This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa File: 323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (raw, json) Hash identifier: suPG8phv1aipkCuomN7AqsFmKDsxBHz5B9OI5ARoxbs= Subject key identifier: BB:2E:C8:02:51:9B:5A:BF:E4:31:59:F3:ED:50:40:0B:E5:4D:0F:3B Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Certificate serial: 5BF5F0FF71AD35054DA50E572300DE34D0DAB3EF Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa Signing time: Thu 11 Dec 2025 15:43:49 +0000 ROA not before: Thu 11 Dec 2025 15:38:49 +0000 ROA not after: Thu 10 Dec 2026 15:43:49 +0000 asID: 263444 IP address blocks: 2804:11dc:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f5:f0:ff:71:ad:35:05:4d:a5:0e:57:23:00:de:34:d0:da:b3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Validity Not Before: Dec 11 15:38:49 2025 GMT Not After : Dec 10 15:43:49 2026 GMT Subject: CN=BB2EC802519B5ABFE43159F3ED50400BE54D0F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:9c:69:26:00:3e:14:36:99:7a:38:4b:7c: 40:4e:fe:f2:a4:2e:dc:0c:ad:4e:13:45:2d:ca:14: cc:9d:03:d4:16:1c:b8:67:1c:6e:39:60:55:b4:24: 39:58:5d:e1:d7:70:07:3b:ce:22:df:a0:c4:53:77: d8:11:25:35:ee:28:9f:5e:94:14:b5:4f:2e:f9:65: e0:6f:14:9a:0e:79:61:64:c2:3b:2f:ff:8c:6a:37: 4f:f3:f7:b9:94:03:c4:1d:9b:80:47:75:a7:98:db: 3a:db:89:a9:24:65:e2:de:36:64:a1:60:e8:62:39: 35:a8:c6:c8:16:0f:7e:34:a2:75:d9:03:03:82:97: 24:4c:ab:47:00:a7:04:9d:c7:25:50:20:c5:33:a9: 58:db:71:65:b9:ca:0d:49:55:7f:fd:92:8e:bd:5b: 60:e5:49:33:e7:d3:52:de:b8:af:cf:4e:76:d6:5c: ba:71:66:8e:ff:bb:e8:00:aa:70:38:d0:f8:37:1f: 19:cf:3e:c2:cd:ed:77:90:e8:54:b4:c4:50:ed:5e: 0c:9e:55:e1:26:60:52:dd:c8:85:b1:7c:a0:4c:5b: 20:26:68:23:1e:54:6b:93:af:34:de:a7:69:b1:c4: 99:0a:99:92:a0:67:e8:54:f8:af:59:6c:60:62:02: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2E:C8:02:51:9B:5A:BF:E4:31:59:F3:ED:50:40:0B:E5:4D:0F:3B X509v3 Authority Key Identifier: keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:11dc:1000::/36 Signature Algorithm: sha256WithRSAEncryption 45:9e:ff:a3:76:1e:04:a9:22:84:2b:31:ba:29:5c:ec:ea:0d: 8d:a9:05:17:08:72:d2:99:27:93:9a:ec:76:89:31:48:ec:74: 5d:96:88:49:08:4e:8c:55:f8:96:1b:83:b4:9a:3f:8c:8b:01: 1e:92:33:18:57:ec:50:ab:0b:22:bb:62:8a:43:21:e9:b6:78: ad:e8:ab:21:25:e0:99:27:13:97:36:df:b3:1a:ac:64:c8:ea: ec:1c:3e:4a:0f:ba:73:c7:8b:b9:ea:e7:4c:1a:51:28:c5:bd: e9:74:15:0a:6f:25:dc:ef:02:e1:97:5b:c5:c1:2e:2a:20:02: 4c:c7:7b:95:00:94:d9:d1:e6:59:1b:3a:8b:d2:6a:ac:30:6e: cc:7b:97:56:27:3d:bc:d4:92:0b:8d:b4:26:c0:0d:f6:00:7a: 3b:88:57:d2:65:5b:31:19:77:79:28:37:47:46:e2:e4:58:27: 85:80:2f:e3:b8:40:ba:9d:61:2e:f4:e0:ae:0a:3e:aa:13:a8: cf:a3:d4:fa:ff:c8:fe:f0:ab:4f:94:1c:d1:22:4f:5a:3b:4d: 01:49:77:65:36:3b:d2:a1:f9:56:3f:fb:35:33:d6:8a:29:c6: 14:3f:84:37:72:e7:86:52:f9:5e:8f:c9:ea:22:4b:19:d5:8b: 46:be:1f:e5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUW/Xw/3GtNQVNpQ5XIwDeNNDas+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3 MDE4NDgwRDAeFw0yNTEyMTExNTM4NDlaFw0yNjEyMTAxNTQzNDlaMDMxMTAvBgNV BAMTKEJCMkVDODAyNTE5QjVBQkZFNDMxNTlGM0VENTA0MDBCRTU0RDBGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGapxpJgA+FDaZejhLfEBO/vKk LtwMrU4TRS3KFMydA9QWHLhnHG45YFW0JDlYXeHXcAc7ziLfoMRTd9gRJTXuKJ9e lBS1Ty75ZeBvFJoOeWFkwjsv/4xqN0/z97mUA8Qdm4BHdaeY2zrbiakkZeLeNmSh YOhiOTWoxsgWD340onXZAwOClyRMq0cApwSdxyVQIMUzqVjbcWW5yg1JVX/9ko69 W2DlSTPn01LeuK/PTnbWXLpxZo7/u+gAqnA40Pg3HxnPPsLN7XeQ6FS0xFDtXgye VeEmYFLdyIWxfKBMWyAmaCMeVGuTrzTep2mxxJkKmZKgZ+hU+K9ZbGBiAvnNAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUuy7IAlGbWr/kMVnz7VBAC+VNDzswHwYDVR0j BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv MzIzODMwMzQzYTMxMzE2NDYzM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEdwQMA0GCSqGSIb3DQEBCwUA A4IBAQBFnv+jdh4EqSKEKzG6KVzs6g2NqQUXCHLSmSeTmux2iTFI7HRdlohJCE6M VfiWG4O0mj+MiwEekjMYV+xQqwsiu2KKQyHptnit6KshJeCZJxOXNt+zGqxkyOrs HD5KD7pzx4u56udMGlEoxb3pdBUKbyXc7wLhl1vFwS4qIAJMx3uVAJTZ0eZZGzqL 0mqsMG7Me5dWJz281JILjbQmwA32AHo7iFfSZVsxGXd5KDdHRuLkWCeFgC/juEC6 nWEu9OCuCj6qE6jPo9T6/8j+8KtPlBzRIk9aO00BSXdlNjvSoflWP/s1M9aKKcYU P4Q3cueGUvlej8nqIksZ1YtGvh/l -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:00 2025 by rpki-client