This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33332d3333203d3e20323636323638.roa File: 323830343a336435343a3a2f33332d3333203d3e20323636323638.roa (raw, json) Hash identifier: vnPXJYUOcAePJkx/IQgbceZpw1u1KJfNwRNuc+os6Gw= Subject key identifier: 0E:87:A9:3F:28:CB:54:99:A7:D6:4D:C9:29:90:A3:1F:CF:47:1D:FE Certificate issuer: /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15 Certificate serial: 41F72BB61BD8563BA9CBDEB0C7417F1151FD5845 Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer Subject info access: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33332d3333203d3e20323636323638.roa Signing time: Mon 22 Dec 2025 19:16:27 +0000 ROA not before: Mon 22 Dec 2025 19:11:27 +0000 ROA not after: Mon 21 Dec 2026 19:16:27 +0000 asID: 266268 IP address blocks: 2804:3d54::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 22:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f7:2b:b6:1b:d8:56:3b:a9:cb:de:b0:c7:41:7f:11:51:fd:58:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15 Validity Not Before: Dec 22 19:11:27 2025 GMT Not After : Dec 21 19:16:27 2026 GMT Subject: CN=0E87A93F28CB5499A7D64DC92990A31FCF471DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:45:7b:c0:0c:e1:39:9a:b4:8b:ef:80:58:8b: 7b:6d:8a:78:91:23:12:d6:f3:2d:64:80:b8:d3:f3: 67:80:11:25:19:c0:43:9b:85:9d:73:5a:fb:0c:b4: a8:0c:74:76:cf:2c:e6:63:fb:aa:32:10:11:bb:ee: 7d:57:24:17:cd:cb:68:b2:e6:67:04:64:16:0a:45: 8a:ed:f3:91:78:63:fa:37:95:01:5c:f3:7c:fa:be: aa:9d:25:e3:7c:c9:fc:ca:bf:b6:cd:2b:89:24:dd: 64:5f:62:f8:e3:4d:9e:bb:86:23:f0:12:59:74:a0: f8:98:bc:39:ae:c4:d7:18:da:73:77:2b:fc:98:7e: 98:77:bd:41:87:7c:8a:72:0f:a7:87:ea:ec:32:11: 5a:54:7b:2a:c3:0d:83:0c:98:94:07:c0:87:c5:b6: 00:8d:98:7d:1a:a4:22:c0:fa:42:14:17:28:c9:f7: 4c:68:c1:e2:10:43:cc:01:a5:1c:0c:da:19:46:7a: b8:0a:b8:a4:bc:4a:08:65:c9:69:81:4f:1d:88:4f: 25:b9:e9:c9:3c:6b:1d:a2:bc:23:d9:43:c6:2a:98: b8:40:85:8f:01:aa:3a:33:cf:bf:d2:9a:dd:87:15: 70:69:63:00:bd:e0:b8:25:98:81:ab:46:90:86:0d: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:A9:3F:28:CB:54:99:A7:D6:4D:C9:29:90:A3:1F:CF:47:1D:FE X509v3 Authority Key Identifier: keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33332d3333203d3e20323636323638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3d54::/33 Signature Algorithm: sha256WithRSAEncryption 59:b2:6c:d3:88:a7:95:72:9b:6c:d9:13:f2:66:20:94:41:f3: 6b:69:9a:16:f8:f6:28:0c:8e:4e:3b:3f:27:75:18:ff:c0:a8: 62:65:82:b7:08:b6:02:c7:4d:7a:d6:cb:5d:68:ca:65:0a:b5: 40:26:83:18:c9:7a:50:b4:6f:a0:1c:56:77:9c:c0:0b:de:f3: cd:88:12:c8:f7:02:8b:d4:7b:21:9e:ca:d0:f9:21:d5:8d:24: 66:1d:8b:c5:08:2d:5b:a4:1c:b5:eb:66:fa:78:f1:37:84:11: dd:cb:c3:46:4c:d5:63:f5:d5:45:36:91:01:3c:53:69:f1:36: 71:82:f2:93:d2:d7:7d:2e:44:37:91:0b:c8:0c:2c:d1:c7:a9: 87:12:74:bb:b9:3b:09:94:c2:45:7a:67:b5:e1:e0:30:9b:ff: 5b:da:cb:a2:71:62:2d:8c:27:20:e5:71:46:c8:99:67:60:62: 30:73:08:81:51:20:8b:84:8e:b1:ce:3b:35:26:0c:8d:04:f8: d0:51:bb:af:db:f6:37:24:3a:8d:95:73:3a:4a:e7:31:ad:55: 4a:11:49:3b:0b:ff:f4:07:0d:7a:3c:10:e0:a8:a1:9b:4d:cb: 93:17:aa:bd:85:44:ce:35:a3:8f:9c:80:07:21:af:13:43:3d: 74:62:9b:0d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQfcrthvYVjupy96wx0F/EVH9WEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENzM2ODQxQjA2MzhCM0RGQUI4OTcxRUVCQjRBRUVG MjU2MUYxNTAeFw0yNTEyMjIxOTExMjdaFw0yNjEyMjExOTE2MjdaMDMxMTAvBgNV BAMTKDBFODdBOTNGMjhDQjU0OTlBN0Q2NERDOTI5OTBBMzFGQ0Y0NzFERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4RXvADOE5mrSL74BYi3ttiniR IxLW8y1kgLjT82eAESUZwEObhZ1zWvsMtKgMdHbPLOZj+6oyEBG77n1XJBfNy2iy 5mcEZBYKRYrt85F4Y/o3lQFc83z6vqqdJeN8yfzKv7bNK4kk3WRfYvjjTZ67hiPw Ell0oPiYvDmuxNcY2nN3K/yYfph3vUGHfIpyD6eH6uwyEVpUeyrDDYMMmJQHwIfF tgCNmH0apCLA+kIUFyjJ90xoweIQQ8wBpRwM2hlGergKuKS8SghlyWmBTx2ITyW5 6ck8ax2ivCPZQ8YqmLhAhY8Bqjozz7/Smt2HFXBpYwC94LglmIGrRpCGDR9HAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUDoepPyjLVJmn1k3JKZCjH89HHf4wHwYDVR0j BBgwFoAUqdc2hBsGOLPfq4lx7rtK7vJWHxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi TXAvMC9BOUQ3MzY4NDFCMDYzOEIzREZBQjg5NzFFRUJCNEFFRUYyNTYxRjE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RDczNjg0MUIwNjM4QjNE RkFCODk3MUVFQkI0QUVFRjI1NjFGMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv MzIzODMwMzQzYTMzNjQzNTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2 MzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKAQ9VAAwDQYJKoZIhvcNAQELBQADggEBAFmybNOI p5Vym2zZE/JmIJRB82tpmhb49igMjk47Pyd1GP/AqGJlgrcItgLHTXrWy11oymUK tUAmgxjJelC0b6AcVnecwAve882IEsj3AovUeyGeytD5IdWNJGYdi8UILVukHLXr Zvp48TeEEd3Lw0ZM1WP11UU2kQE8U2nxNnGC8pPS130uRDeRC8gMLNHHqYcSdLu5 OwmUwkV6Z7Xh4DCb/1vay6JxYi2MJyDlcUbImWdgYjBzCIFRIIuEjrHOOzUmDI0E +NBRu6/b9jckOo2VczpK5zGtVUoRSTsL//QHDXo8EOCooZtNy5MXqr2FRM41o4+c gAchrxNDPXRimw0= -----END CERTIFICATE-----Generated at Tue Dec 23 06:53:35 2025 by rpki-client