This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa File: 323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa (raw, json) Hash identifier: Mrih67bnZN0DRXvygc6oR4OLcCW5VOJQv+RF6QYWwG8= Subject key identifier: 5A:7B:A6:8A:E5:54:6E:41:0B:05:75:B8:C3:AE:05:FF:E6:6F:F6:A1 Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Certificate serial: 2F509C0B0ABED97567BA97DF2DDE0D47E18F52F3 Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa Signing time: Thu 11 Dec 2025 15:43:48 +0000 ROA not before: Thu 11 Dec 2025 15:38:48 +0000 ROA not after: Thu 10 Dec 2026 15:43:48 +0000 asID: 263444 IP address blocks: 2804:11dc:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:50:9c:0b:0a:be:d9:75:67:ba:97:df:2d:de:0d:47:e1:8f:52:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Validity Not Before: Dec 11 15:38:48 2025 GMT Not After : Dec 10 15:43:48 2026 GMT Subject: CN=5A7BA68AE5546E410B0575B8C3AE05FFE66FF6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:d5:da:71:b5:a3:f4:21:1b:fe:e1:ba:d2: f7:c6:12:23:e3:d1:cb:af:25:09:7a:ff:1c:66:93: 3b:87:19:85:e9:e0:e0:75:82:b3:20:90:4f:2b:25: 4c:98:25:cc:2a:9b:1d:7f:3a:6e:77:c4:fe:4a:1c: 0f:0f:32:6b:2e:03:d3:c2:b8:cc:d5:73:5c:c7:06: 20:5e:50:b7:77:36:20:fc:a4:84:d1:89:0b:b4:7d: 9a:c0:71:b7:60:c5:21:f4:ea:26:a7:c8:19:d7:be: 6a:ae:a2:a0:d4:ac:2a:ab:4b:ec:5b:48:7b:2b:98: b5:35:50:dc:c0:ea:bf:e5:6a:c9:f5:cd:e7:7f:61: 65:b2:e5:e0:cc:53:a8:ad:67:85:a0:18:2a:72:09: e5:d0:f9:70:5c:90:65:1c:3b:d6:06:90:80:28:95: d8:44:77:36:99:8b:0c:60:7e:6e:e5:89:ee:73:81: a1:87:83:ab:3c:2b:4c:ab:ab:67:28:d6:47:fc:65: 2d:6f:58:3f:ad:a1:08:ca:16:43:65:41:2e:a9:94: ce:0a:a4:72:0e:3e:70:e2:a0:8f:bb:38:3e:1c:f5: 6a:b4:c5:66:23:73:86:16:76:af:c7:c6:bc:93:f1: 57:1b:56:c9:8c:6a:7b:4c:57:8d:de:ee:88:1c:1d: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7B:A6:8A:E5:54:6E:41:0B:05:75:B8:C3:AE:05:FF:E6:6F:F6:A1 X509v3 Authority Key Identifier: keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:11dc:4000::/36 Signature Algorithm: sha256WithRSAEncryption 2e:23:ee:87:21:a0:18:ad:57:42:ef:ce:a3:e1:dd:fd:82:89: d6:21:bc:d7:f1:b2:ea:30:65:8b:2b:b4:dd:11:a7:c4:f3:ec: 6d:64:9f:0f:20:06:c1:a2:15:ea:93:dd:d6:3d:3e:96:d2:8e: b0:fc:3d:22:66:df:86:77:82:d2:b8:32:08:c3:58:8c:be:88: 7c:f0:32:13:85:04:4a:79:42:03:bb:f6:47:15:f1:b2:51:0b: bf:e7:5c:1a:24:5f:bd:4c:b9:dc:29:ac:39:b6:c5:f2:9c:da: 13:9a:75:6b:f9:bb:70:b5:3f:3b:8b:ed:d9:7e:1e:fc:72:3e: de:08:e1:f8:9e:dc:c2:68:74:aa:24:7f:09:0d:b9:e6:77:58: fa:b1:b6:b3:f8:65:0d:3d:54:79:71:4d:4f:13:17:ec:d3:21: 04:79:f0:09:19:fc:04:eb:88:38:92:ef:0a:cb:12:7f:5c:15: 66:04:90:93:22:fb:43:98:c6:19:1e:69:f5:83:74:38:9c:3d: ae:5b:93:1b:2d:f2:90:a4:e0:f3:15:7d:72:41:e4:c1:84:f5: ff:55:a4:7f:94:d1:2a:b9:ee:cb:0b:ca:da:55:14:22:5c:5d: c6:0b:04:43:f8:77:c8:93:0c:f6:a7:2d:81:d3:26:ab:b5:46: 7f:fd:ff:c4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUL1CcCwq+2XVnupffLd4NR+GPUvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3 MDE4NDgwRDAeFw0yNTEyMTExNTM4NDhaFw0yNjEyMTAxNTQzNDhaMDMxMTAvBgNV BAMTKDVBN0JBNjhBRTU1NDZFNDEwQjA1NzVCOEMzQUUwNUZGRTY2RkY2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgetXacbWj9CEb/uG60vfGEiPj 0cuvJQl6/xxmkzuHGYXp4OB1grMgkE8rJUyYJcwqmx1/Om53xP5KHA8PMmsuA9PC uMzVc1zHBiBeULd3NiD8pITRiQu0fZrAcbdgxSH06ianyBnXvmquoqDUrCqrS+xb SHsrmLU1UNzA6r/lasn1zed/YWWy5eDMU6itZ4WgGCpyCeXQ+XBckGUcO9YGkIAo ldhEdzaZiwxgfm7lie5zgaGHg6s8K0yrq2co1kf8ZS1vWD+toQjKFkNlQS6plM4K pHIOPnDioI+7OD4c9Wq0xWYjc4YWdq/HxryT8VcbVsmMantMV43e7ogcHTbdAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUWnumiuVUbkELBXW4w64F/+Zv9qEwHwYDVR0j BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv MzIzODMwMzQzYTMxMzE2NDYzM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEdxAMA0GCSqGSIb3DQEBCwUA A4IBAQAuI+6HIaAYrVdC786j4d39gonWIbzX8bLqMGWLK7TdEafE8+xtZJ8PIAbB ohXqk93WPT6W0o6w/D0iZt+Gd4LSuDIIw1iMvoh88DIThQRKeUIDu/ZHFfGyUQu/ 51waJF+9TLncKaw5tsXynNoTmnVr+btwtT87i+3Zfh78cj7eCOH4ntzCaHSqJH8J Dbnmd1j6sbaz+GUNPVR5cU1PExfs0yEEefAJGfwE64g4ku8KyxJ/XBVmBJCTIvtD mMYZHmn1g3Q4nD2uW5MbLfKQpODzFX1yQeTBhPX/VaR/lNEque7LC8raVRQiXF3G CwRD+HfIkwz2py2B0yartUZ//f/E -----END CERTIFICATE-----Generated at Fri Dec 19 14:37:09 2025 by rpki-client