This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa File: 323830343a353735383a3a2f33322d313238203d3e20323638363035.roa (raw, json) Hash identifier: hRk6zTTmwtTl6q/rX2tOO4A3QRG3X/2oeJTUyvgovpg= Subject key identifier: 25:AD:32:7B:C0:39:69:70:55:92:32:3B:DB:62:2D:6A:A0:C9:D7:98 Certificate issuer: /CN=AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF Certificate serial: 248F936F6615ACACA4477A8595F3AE37563ED558 Authority key identifier: AA:DF:2B:4E:B4:DA:1D:ED:92:09:01:1C:2A:3B:BA:C3:32:76:83:CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa Signing time: Fri 12 Dec 2025 12:39:09 +0000 ROA not before: Fri 12 Dec 2025 12:34:09 +0000 ROA not after: Fri 11 Dec 2026 12:39:09 +0000 asID: 268605 IP address blocks: 2804:5758::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.crl rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 02:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8f:93:6f:66:15:ac:ac:a4:47:7a:85:95:f3:ae:37:56:3e:d5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF Validity Not Before: Dec 12 12:34:09 2025 GMT Not After : Dec 11 12:39:09 2026 GMT Subject: CN=25AD327BC03969705592323BDB622D6AA0C9D798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9d:87:43:06:0b:24:f3:e6:47:7a:41:9a:10: 3b:4b:69:4a:65:0e:25:43:26:9a:22:9d:de:e6:61: 0f:9f:36:03:fc:bb:cb:64:22:cb:8a:9c:2c:fc:8d: ec:d5:cc:64:eb:00:65:10:fd:f8:2b:56:b0:7f:cb: c2:ec:a7:29:b9:59:59:d9:92:fc:1b:fe:bb:65:a4: ee:87:0f:c1:fa:2e:87:52:43:2c:78:e1:af:a2:23: 07:70:02:73:40:a8:45:d8:0e:8b:c9:0c:ce:bb:d4: 5d:29:07:9e:ab:d0:7a:52:e3:96:44:a9:a1:d4:19: 1a:22:6a:ec:73:8c:ac:36:93:8d:d4:46:ed:8c:dc: 97:52:22:b3:f4:5d:16:e9:b6:df:3e:85:49:8f:a7: f7:1f:1d:ff:f9:8a:7d:01:4e:d1:34:59:05:73:18: 6f:38:a2:6d:2d:06:97:ca:f0:d9:7b:89:84:42:a1: 1a:e5:0a:f7:e1:9d:96:bf:cf:31:34:4b:62:23:8c: d0:1f:77:14:1a:27:bd:c9:ac:a8:3f:07:1e:8a:0c: e0:d5:ce:34:82:f3:4e:9c:20:eb:70:49:5b:44:81: c1:64:96:01:ca:97:12:a7:be:0e:2a:c6:e4:73:57: b6:8e:5a:f7:8e:a5:65:13:68:a5:02:3f:05:b9:c4: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:32:7B:C0:39:69:70:55:92:32:3B:DB:62:2D:6A:A0:C9:D7:98 X509v3 Authority Key Identifier: keyid:AA:DF:2B:4E:B4:DA:1D:ED:92:09:01:1C:2A:3B:BA:C3:32:76:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5758::/32 Signature Algorithm: sha256WithRSAEncryption 8c:f6:ce:0c:87:75:6c:58:b3:e0:0e:4f:41:c4:5e:e3:ec:5d: 52:6d:f3:a7:80:7a:51:72:e2:b7:2d:d8:d4:1a:2b:da:aa:f3: bf:ac:b5:f4:4f:51:5b:f7:4d:a2:59:4f:90:4a:3d:f3:8f:1a: 48:8f:9d:b4:76:af:eb:f3:a4:5f:b6:fa:80:23:2f:b7:07:4a: 8b:79:53:d9:8d:11:11:fc:77:9c:f2:ee:db:70:99:78:f9:c0: 39:f8:2c:19:5b:67:14:8c:78:d0:78:ed:5c:98:2c:42:f9:4d: 7b:dc:c0:35:93:e8:9a:8a:d5:fa:9a:1c:da:02:c9:f9:72:4c: b4:a0:cc:e1:f8:7a:8b:84:92:c8:ca:cd:31:86:ad:ee:74:49: 1d:98:06:fc:94:68:5e:80:0e:a3:e4:de:75:ca:00:59:7d:ca: 30:16:20:7f:c6:e4:20:9f:7e:cc:f9:a7:38:25:86:29:24:27: c6:f1:82:8f:09:63:54:58:13:99:27:ba:75:69:6d:a2:2c:87: 68:da:f5:e3:50:1d:94:53:b0:e6:f7:f5:70:33:1d:6e:78:f9: 2c:31:a0:3a:03:13:49:96:c1:9d:84:ba:00:cd:74:5e:bf:5a: 09:c8:23:da:b1:1e:32:96:e4:71:5f:5b:74:8a:9b:b0:87:a4: 01:85:70:07 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUJI+Tb2YVrKykR3qFlfOuN1Y+1VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFERjJCNEVCNERBMURFRDkyMDkwMTFDMkEzQkJBQzMz Mjc2ODNDRjAeFw0yNTEyMTIxMjM0MDlaFw0yNjEyMTExMjM5MDlaMDMxMTAvBgNV BAMTKDI1QUQzMjdCQzAzOTY5NzA1NTkyMzIzQkRCNjIyRDZBQTBDOUQ3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnYdDBgsk8+ZHekGaEDtLaUpl DiVDJpoind7mYQ+fNgP8u8tkIsuKnCz8jezVzGTrAGUQ/fgrVrB/y8Lspym5WVnZ kvwb/rtlpO6HD8H6LodSQyx44a+iIwdwAnNAqEXYDovJDM671F0pB56r0HpS45ZE qaHUGRoiauxzjKw2k43URu2M3JdSIrP0XRbptt8+hUmPp/cfHf/5in0BTtE0WQVz GG84om0tBpfK8Nl7iYRCoRrlCvfhnZa/zzE0S2IjjNAfdxQaJ73JrKg/Bx6KDODV zjSC806cIOtwSVtEgcFklgHKlxKnvg4qxuRzV7aOWveOpWUTaKUCPwW5xMzZAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJa0ye8A5aXBVkjI722ItaqDJ15gwHwYDVR0j BBgwFoAUqt8rTrTaHe2SCQEcKju6wzJ2g88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkdHRGo3OWFxcE1TZTFRM3VySllKZnVSeFNNWmhLb3VYaU1CUVBaQmtN UU4vMC9BQURGMkI0RUI0REExREVEOTIwOTAxMUMyQTNCQkFDMzMyNzY4M0NGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBREYyQjRFQjREQTFERUQ5 MjA5MDExQzJBM0JCQUMzMzI3NjgzQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JHR0RqNzlhcXBNU2UxUTN1ckpZSmZ1UnhTTVpoS291WGlNQlFQWkJrTVFOLzAv MzIzODMwMzQzYTM1MzczNTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzgzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBFdYMA0GCSqGSIb3DQEBCwUAA4IBAQCM9s4M h3VsWLPgDk9BxF7j7F1SbfOngHpRcuK3LdjUGivaqvO/rLX0T1Fb902iWU+QSj3z jxpIj520dq/r86RftvqAIy+3B0qLeVPZjRER/Hec8u7bcJl4+cA5+CwZW2cUjHjQ eO1cmCxC+U173MA1k+iaitX6mhzaAsn5cky0oMzh+HqLhJLIys0xhq3udEkdmAb8 lGhegA6j5N51ygBZfcowFiB/xuQgn37M+ac4JYYpJCfG8YKPCWNUWBOZJ7p1aW2i LIdo2vXjUB2UU7Dm9/VwMx1uePksMaA6AxNJlsGdhLoAzXRev1oJyCPasR4yluRx X1t0ipuwh6QBhXAH -----END CERTIFICATE-----Generated at Fri Dec 19 16:54:19 2025 by rpki-client