This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa File: 323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (raw, json) Hash identifier: Xjm0Vl3oFhLjawrmQOM9tt8PdRs4kTPr7qp4IGKCEUI= Subject key identifier: 0F:F0:D6:7E:31:72:4E:33:BC:DB:D6:2D:C3:1F:55:9C:31:F6:D6:87 Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Certificate serial: 0B35941B254B5BD0433F660318579E43425E2133 Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa Signing time: Thu 11 Dec 2025 15:43:46 +0000 ROA not before: Thu 11 Dec 2025 15:38:46 +0000 ROA not after: Thu 10 Dec 2026 15:43:46 +0000 asID: 263444 IP address blocks: 2804:11dc:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:35:94:1b:25:4b:5b:d0:43:3f:66:03:18:57:9e:43:42:5e:21:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Validity Not Before: Dec 11 15:38:46 2025 GMT Not After : Dec 10 15:43:46 2026 GMT Subject: CN=0FF0D67E31724E33BCDBD62DC31F559C31F6D687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:9c:5c:99:da:12:a7:8a:d2:03:9b:50:10: 20:c0:65:81:5f:9d:b3:9d:99:71:81:77:57:48:2b: 4e:8c:b9:f1:d3:1e:90:64:f1:38:2c:06:d8:fd:0c: 38:92:c7:34:6f:25:dd:54:d5:18:0b:2a:17:30:78: 28:62:e9:71:7b:05:ba:d5:af:1a:71:f8:79:d3:60: 16:fe:14:9c:a2:b2:c1:03:1a:50:00:fe:a3:13:b5: 51:31:4c:42:6b:f5:77:c8:ac:59:2b:12:7c:5c:66: fb:6f:8f:89:1e:74:be:8d:58:b0:51:96:5a:9f:8e: 1d:a0:5c:07:be:9d:4b:85:55:b4:fa:bc:c1:6a:1c: d0:1a:b7:33:3b:a1:c5:6d:de:98:b2:3f:5a:7d:6d: 5c:a3:61:ec:3f:b0:41:5a:33:26:0b:c3:19:ad:03: a0:14:c8:11:c7:36:89:88:f1:42:b0:e4:80:6b:91: 43:b4:af:5f:36:12:15:db:76:da:00:da:0d:28:0b: e7:d1:d9:7b:e5:29:63:7a:5c:a7:2f:3a:f1:e0:58: 5b:57:fd:34:cc:89:9f:19:80:ee:7c:ac:84:99:7d: cf:89:64:b8:ea:b5:ad:7e:c7:3d:c6:b8:43:d3:db: e8:b2:c0:36:48:fa:d7:c9:ed:87:5b:72:42:73:a8: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:D6:7E:31:72:4E:33:BC:DB:D6:2D:C3:1F:55:9C:31:F6:D6:87 X509v3 Authority Key Identifier: keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:11dc:a000::/36 Signature Algorithm: sha256WithRSAEncryption a1:ce:87:0e:c6:fe:49:90:da:b8:aa:48:e0:df:a3:63:9a:db: 05:e8:d4:41:79:73:d5:ce:86:10:1f:f3:fe:08:c7:cd:9d:bb: db:56:4f:4a:55:45:b3:90:a4:fb:7d:49:14:c3:38:cb:84:5f: 0e:ae:03:73:15:39:05:65:42:ca:e7:82:db:30:a7:f2:66:3d: 78:d4:15:30:ce:25:14:26:c9:89:f6:79:bd:a7:4c:c2:11:42: d5:a8:dd:24:cf:35:38:0b:21:2d:a4:5c:89:c3:8e:06:b0:d1: 66:74:8f:22:02:60:75:fd:7f:74:71:44:88:bb:52:e3:5f:2e: a4:88:5e:5e:17:fa:80:7a:1e:c8:83:48:fc:07:94:1a:22:4b: 1d:b4:39:be:58:fc:ab:c8:1b:44:eb:30:9f:e9:a2:66:5d:12: 2c:34:7c:6c:01:e4:40:99:20:59:0d:43:85:f9:94:da:96:4f: 75:63:8f:95:67:96:25:f3:80:7a:f8:b2:87:fc:93:db:32:33: 5b:cd:4e:94:b0:44:98:0c:cb:7c:56:df:51:fd:d3:50:6d:44: db:51:6f:fa:a4:93:f5:d2:b5:a2:f6:a1:5e:5d:f3:e6:7b:4f: fc:a4:a0:f1:12:88:81:b6:71:40:9d:f9:54:5f:0d:50:ab:6b: 6e:ae:56:c4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUCzWUGyVLW9BDP2YDGFeeQ0JeITMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3 MDE4NDgwRDAeFw0yNTEyMTExNTM4NDZaFw0yNjEyMTAxNTQzNDZaMDMxMTAvBgNV BAMTKDBGRjBENjdFMzE3MjRFMzNCQ0RCRDYyREMzMUY1NTlDMzFGNkQ2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HpxcmdoSp4rSA5tQECDAZYFf nbOdmXGBd1dIK06MufHTHpBk8TgsBtj9DDiSxzRvJd1U1RgLKhcweChi6XF7BbrV rxpx+HnTYBb+FJyissEDGlAA/qMTtVExTEJr9XfIrFkrEnxcZvtvj4kedL6NWLBR llqfjh2gXAe+nUuFVbT6vMFqHNAatzM7ocVt3piyP1p9bVyjYew/sEFaMyYLwxmt A6AUyBHHNomI8UKw5IBrkUO0r182EhXbdtoA2g0oC+fR2XvlKWN6XKcvOvHgWFtX /TTMiZ8ZgO58rISZfc+JZLjqta1+xz3GuEPT2+iywDZI+tfJ7YdbckJzqMP7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUD/DWfjFyTjO829Ytwx9VnDH21ocwHwYDVR0j BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv MzIzODMwMzQzYTMxMzE2NDYzM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEdygMA0GCSqGSIb3DQEBCwUA A4IBAQChzocOxv5JkNq4qkjg36NjmtsF6NRBeXPVzoYQH/P+CMfNnbvbVk9KVUWz kKT7fUkUwzjLhF8OrgNzFTkFZULK54LbMKfyZj141BUwziUUJsmJ9nm9p0zCEULV qN0kzzU4CyEtpFyJw44GsNFmdI8iAmB1/X90cUSIu1LjXy6kiF5eF/qAeh7Ig0j8 B5QaIksdtDm+WPyryBtE6zCf6aJmXRIsNHxsAeRAmSBZDUOF+ZTalk91Y4+VZ5Yl 84B6+LKH/JPbMjNbzU6UsESYDMt8Vt9R/dNQbUTbUW/6pJP10rWi9qFeXfPme0/8 pKDxEoiBtnFAnflUXw1Qq2turlbE -----END CERTIFICATE-----Generated at Fri Dec 19 17:27:30 2025 by rpki-client