This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3336203d3e203238333036.roa File: 323830343a33343a3a2f33322d3336203d3e203238333036.roa (raw, json) Hash identifier: UfgSXCcDRkH/UopnwWnfUdGag8dEKjdsp2XJJe4h4d8= Subject key identifier: 79:5A:D0:68:7A:1D:48:E4:67:2E:C1:84:51:94:8E:9B:EB:8F:B4:56 Certificate issuer: /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Certificate serial: 2C25CAE150A2694BA51D1D0E76597EBB506CB543 Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3336203d3e203238333036.roa Signing time: Mon 24 Nov 2025 13:22:33 +0000 ROA not before: Mon 24 Nov 2025 13:17:33 +0000 ROA not after: Mon 23 Nov 2026 13:22:33 +0000 asID: 28306 IP address blocks: 2804:34::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 14:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:25:ca:e1:50:a2:69:4b:a5:1d:1d:0e:76:59:7e:bb:50:6c:b5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Validity Not Before: Nov 24 13:17:33 2025 GMT Not After : Nov 23 13:22:33 2026 GMT Subject: CN=795AD0687A1D48E4672EC18451948E9BEB8FB456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:62:77:5e:6b:bc:d1:df:81:51:7a:56:72: 0e:56:eb:58:6c:b9:74:8e:77:da:17:d0:e3:a3:01: e6:e2:11:a2:79:73:f8:c6:44:ba:5c:ed:48:f0:98: b4:3e:ac:9b:41:46:52:d9:5d:61:80:a2:e6:39:52: 61:bb:7e:d0:47:29:3c:17:e1:59:bf:49:c0:0a:19: 47:74:21:4e:55:96:f1:46:53:23:b3:7e:8d:76:8f: f9:dd:86:1c:8e:0e:bb:48:93:41:e7:e2:51:76:ce: c1:56:7e:94:de:e5:a6:b2:04:a3:6f:34:8f:6e:9f: c5:ef:fc:a1:58:98:74:f3:c9:da:2e:01:16:13:06: 02:56:c2:64:34:f8:26:78:83:17:33:5a:99:d4:80: ee:be:0d:94:99:b8:e0:62:26:5f:24:9f:52:c6:b4: c7:d3:9e:dd:e9:72:ef:94:55:4d:80:d3:1b:40:90: 5c:9b:a1:55:6a:e1:5b:59:ee:fa:ca:13:72:01:40: 7a:47:cc:c0:c3:a9:14:34:c4:1a:ca:24:34:ee:c3: 45:ca:71:ae:2c:e4:b2:ce:17:68:9f:a1:d5:1f:2f: 64:0b:03:1f:88:86:78:7b:13:99:fd:42:98:bb:81: af:4c:f8:b0:18:39:85:7d:40:f3:9a:6b:81:32:16: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5A:D0:68:7A:1D:48:E4:67:2E:C1:84:51:94:8E:9B:EB:8F:B4:56 X509v3 Authority Key Identifier: keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3336203d3e203238333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:34::/32 Signature Algorithm: sha256WithRSAEncryption 40:28:f6:7c:d8:6a:69:4a:6d:74:ab:b7:dc:66:72:ac:07:1f: 6b:23:5c:7a:a8:60:25:4b:75:08:31:21:06:57:89:cd:9e:f5: 9d:05:3a:9f:6b:3f:c1:2a:69:e9:31:50:06:1b:09:7e:bc:45: 26:7d:1d:27:e1:4e:21:37:76:94:85:f6:86:36:06:e2:d4:15: 28:f0:a3:68:dd:c2:dc:66:0d:94:6c:57:89:16:10:ab:7e:45: f7:13:86:01:7a:a9:41:42:5c:64:ad:a6:53:b3:8e:6f:87:a4: 10:e2:18:f3:82:a7:c1:26:ac:23:42:83:4f:f5:ec:9b:6c:c2: 12:49:fe:36:c3:e7:bc:4b:62:2f:4a:0d:0c:75:5b:9a:d6:5a: b2:3f:6d:15:00:d9:9e:07:a1:d4:8f:da:4d:34:fe:aa:2d:9c: 3f:2d:f1:8a:a1:79:96:11:f6:06:96:75:20:98:a1:c1:f0:7d: 5a:63:a5:f9:13:25:c3:d5:25:97:d9:14:d3:52:e3:5f:98:20: 80:7e:dd:de:b4:82:92:a1:09:9e:18:40:af:fc:26:49:09:29: c3:58:bd:7f:77:3a:86:df:c1:66:fe:72:4f:f7:82:f9:82:85: e3:75:92:d7:5b:4f:d5:a2:11:cf:d3:0c:7b:b1:96:fd:5d:de: f9:af:62:64 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIULCXK4VCiaUulHR0Odll+u1BstUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDMzUyQ0M0RUNDRTMyNUZEMzdFQ0U3ODNFNEM1NDIw QjIzQzUwMzAeFw0yNTExMjQxMzE3MzNaFw0yNjExMjMxMzIyMzNaMDMxMTAvBgNV BAMTKDc5NUFEMDY4N0ExRDQ4RTQ2NzJFQzE4NDUxOTQ4RTlCRUI4RkI0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHGJ3Xmu80d+BUXpWcg5W61hs uXSOd9oX0OOjAebiEaJ5c/jGRLpc7UjwmLQ+rJtBRlLZXWGAouY5UmG7ftBHKTwX 4Vm/ScAKGUd0IU5VlvFGUyOzfo12j/ndhhyODrtIk0Hn4lF2zsFWfpTe5aayBKNv NI9un8Xv/KFYmHTzydouARYTBgJWwmQ0+CZ4gxczWpnUgO6+DZSZuOBiJl8kn1LG tMfTnt3pcu+UVU2A0xtAkFyboVVq4VtZ7vrKE3IBQHpHzMDDqRQ0xBrKJDTuw0XK ca4s5LLOF2ifodUfL2QLAx+Ihnh7E5n9Qpi7ga9M+LAYOYV9QPOaa4EyFnlPAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUeVrQaHodSORnLsGEUZSOm+uPtFYwHwYDVR0j BBgwFoAUvcNSzE7M4yX9N+zng+TFQgsjxQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O dWcvMC9CREMzNTJDQzRFQ0NFMzI1RkQzN0VDRTc4M0U0QzU0MjBCMjNDNTAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzM1MkNDNEVDQ0UzMjVG RDM3RUNFNzgzRTRDNTQyMEIyM0M1MDMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv MzIzODMwMzQzYTMzMzQzYTNhMmYzMzMyMmQzMzM2MjAzZDNlMjAzMjM4MzMzMDM2 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAKAQANDANBgkqhkiG9w0BAQsFAAOCAQEAQCj2fNhqaUptdKu3 3GZyrAcfayNceqhgJUt1CDEhBleJzZ71nQU6n2s/wSpp6TFQBhsJfrxFJn0dJ+FO ITd2lIX2hjYG4tQVKPCjaN3C3GYNlGxXiRYQq35F9xOGAXqpQUJcZK2mU7OOb4ek EOIY84KnwSasI0KDT/Xsm2zCEkn+NsPnvEtiL0oNDHVbmtZasj9tFQDZngeh1I/a TTT+qi2cPy3xiqF5lhH2BpZ1IJihwfB9WmOl+RMlw9Ull9kU01LjX5gggH7d3rSC kqEJnhhAr/wmSQkpw1i9f3c6ht/BZv5yT/eC+YKF43WS11tP1aIRz9MMe7GW/V3e +a9iZA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:39:27 2025 by rpki-client