This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33362d3336203d3e20323633343434.roa File: 323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (raw, json) Hash identifier: Sy02wUMoN7a4gcN3MRE0U56qNaH7kBtcCeAx/Iq30Bo= Subject key identifier: 8F:D5:D0:EC:F1:32:DA:FD:B4:58:6B:7D:C3:25:03:26:3A:86:3F:79 Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Certificate serial: 23CFF89710416BD2263195C91107A25DF50C78A4 Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33362d3336203d3e20323633343434.roa Signing time: Thu 11 Dec 2025 15:43:46 +0000 ROA not before: Thu 11 Dec 2025 15:38:46 +0000 ROA not after: Thu 10 Dec 2026 15:43:46 +0000 asID: 263444 IP address blocks: 2804:11dc::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cf:f8:97:10:41:6b:d2:26:31:95:c9:11:07:a2:5d:f5:0c:78:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Validity Not Before: Dec 11 15:38:46 2025 GMT Not After : Dec 10 15:43:46 2026 GMT Subject: CN=8FD5D0ECF132DAFDB4586B7DC32503263A863F79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:ad:e0:70:32:9c:a4:84:f9:aa:de:44:a2: bd:e7:a5:72:fc:a4:9c:db:5b:21:f0:de:9a:43:50: 95:fa:cf:c2:2f:2f:fe:51:a9:17:ae:74:3e:ef:30: b5:fb:db:bd:ff:ec:1c:2f:06:03:91:67:53:6f:30: 3d:02:c4:7c:6c:2b:6d:f6:a2:b1:19:fd:d5:77:fc: c0:29:e2:2d:66:4a:c8:6f:f8:d4:a9:56:9c:c7:e6: b6:13:47:fd:cb:09:39:46:6b:5d:77:5f:f3:09:af: 77:3a:9c:4f:e7:5f:3f:77:d9:aa:8e:2e:d2:2c:db: ba:08:a2:58:be:ac:7c:7e:aa:c0:f2:64:e4:bb:b9: a5:ec:30:c0:00:3b:03:71:e2:f7:f3:e6:b1:6e:f1: b3:f0:f0:e1:89:f8:2b:c8:8d:3c:de:8f:cf:a8:d3: 77:45:7d:32:cf:4f:f7:b4:ab:3c:b8:51:26:8f:c1: 59:fe:f2:6e:81:3b:8a:aa:ad:2b:d6:ae:6b:c6:3c: 3e:33:3c:81:83:0a:c2:07:4e:26:9e:23:05:17:49: f7:ff:39:d2:3b:2f:dd:96:10:d0:b9:c3:bb:49:28: d8:4d:db:aa:ee:f6:77:4a:07:0a:a0:2c:76:87:6c: 26:8b:93:e9:d8:9b:4c:f8:56:40:67:f8:23:5b:09: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D5:D0:EC:F1:32:DA:FD:B4:58:6B:7D:C3:25:03:26:3A:86:3F:79 X509v3 Authority Key Identifier: keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33362d3336203d3e20323633343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:11dc::/36 Signature Algorithm: sha256WithRSAEncryption 57:88:76:99:80:99:ad:07:15:88:6b:b5:4a:d5:37:bf:91:61: 5e:36:fb:eb:0f:9e:d6:99:01:af:bb:19:4c:13:99:97:cd:ab: 7b:b6:63:6a:ff:93:78:19:19:e8:3f:4f:aa:f6:2e:66:8a:36: 4b:54:02:b2:a9:d0:64:04:be:84:6a:bd:19:61:70:e0:41:2a: 05:c3:70:e2:aa:60:48:04:4f:20:7a:b4:5a:3f:37:6f:3c:46: 01:c2:ca:aa:ab:1c:3e:41:3f:60:44:01:a2:fb:34:58:8b:62: 51:e5:94:4f:6d:e8:20:e7:e5:46:59:dd:5b:ec:f4:84:ab:4d: 65:b4:8b:31:1d:fe:f6:ff:00:92:4e:15:b4:bf:7c:c2:09:b0: d4:96:ba:3c:44:0b:cf:9c:ae:63:9e:d5:3c:79:1e:65:89:e4: 4b:78:dd:69:62:ad:6c:52:e6:cb:60:97:03:15:a6:ab:f0:89: e3:ef:2e:45:66:51:85:3a:6e:5d:4a:7c:a3:4f:07:16:4f:c9: e5:c5:0b:5d:82:62:90:56:f0:93:81:12:6a:f2:94:03:c5:3b: 12:00:5d:df:48:64:23:c9:09:25:1e:e2:6c:05:76:f1:b3:51: 68:8b:19:6f:61:40:b0:14:1e:67:2d:4e:89:e5:84:9b:e8:26: c9:81:1d:56 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUI8/4lxBBa9ImMZXJEQeiXfUMeKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3 MDE4NDgwRDAeFw0yNTEyMTExNTM4NDZaFw0yNjEyMTAxNTQzNDZaMDMxMTAvBgNV BAMTKDhGRDVEMEVDRjEzMkRBRkRCNDU4NkI3REMzMjUwMzI2M0E4NjNGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEa3gcDKcpIT5qt5Eor3npXL8 pJzbWyHw3ppDUJX6z8IvL/5RqReudD7vMLX7273/7BwvBgORZ1NvMD0CxHxsK232 orEZ/dV3/MAp4i1mSshv+NSpVpzH5rYTR/3LCTlGa113X/MJr3c6nE/nXz932aqO LtIs27oIoli+rHx+qsDyZOS7uaXsMMAAOwNx4vfz5rFu8bPw8OGJ+CvIjTzej8+o 03dFfTLPT/e0qzy4USaPwVn+8m6BO4qqrSvWrmvGPD4zPIGDCsIHTiaeIwUXSff/ OdI7L92WENC5w7tJKNhN26ru9ndKBwqgLHaHbCaLk+nYm0z4VkBn+CNbCXHHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUj9XQ7PEy2v20WGt9wyUDJjqGP3kwHwYDVR0j BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv MzIzODMwMzQzYTMxMzE2NDYzM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjMz MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYEKAQR3AAwDQYJKoZIhvcNAQELBQADggEBAFeIdpmA ma0HFYhrtUrVN7+RYV42++sPntaZAa+7GUwTmZfNq3u2Y2r/k3gZGeg/T6r2LmaK NktUArKp0GQEvoRqvRlhcOBBKgXDcOKqYEgETyB6tFo/N288RgHCyqqrHD5BP2BE AaL7NFiLYlHllE9t6CDn5UZZ3Vvs9ISrTWW0izEd/vb/AJJOFbS/fMIJsNSWujxE C8+crmOe1Tx5HmWJ5Et43WlirWxS5stglwMVpqvwiePvLkVmUYU6bl1KfKNPBxZP yeXFC12CYpBW8JOBEmrylAPFOxIAXd9IZCPJCSUe4mwFdvGzUWiLGW9hQLAUHmct TonlhJvoJsmBHVY= -----END CERTIFICATE-----Generated at Fri Dec 19 17:32:17 2025 by rpki-client