This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa File: 323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa (raw, json) Hash identifier: Bx+K10ND5iLd2LQbD7lsQIQMigfXG6zHSp6D3ISbys0= Subject key identifier: DB:9D:33:67:F6:B4:B5:49:06:1E:28:A0:90:41:4C:5E:9C:34:E6:C5 Certificate issuer: /CN=F5D2B6352BD20C2CFB1F603C718970CA85A166DB Certificate serial: 569251EE2F67FBF3A5BAB636770115B6B8C3F765 Authority key identifier: F5:D2:B6:35:2B:D2:0C:2C:FB:1F:60:3C:71:89:70:CA:85:A1:66:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa Signing time: Thu 18 Dec 2025 18:23:08 +0000 ROA not before: Thu 18 Dec 2025 18:18:08 +0000 ROA not after: Thu 17 Dec 2026 18:23:08 +0000 asID: 270563 IP address blocks: 2804:6de8:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.crl rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:92:51:ee:2f:67:fb:f3:a5:ba:b6:36:77:01:15:b6:b8:c3:f7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D2B6352BD20C2CFB1F603C718970CA85A166DB Validity Not Before: Dec 18 18:18:08 2025 GMT Not After : Dec 17 18:23:08 2026 GMT Subject: CN=DB9D3367F6B4B549061E28A090414C5E9C34E6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:da:c1:e7:ef:cd:b4:dd:a1:a6:35:66:eb:90: b6:a9:fb:d5:38:62:cb:6d:27:9e:9f:f9:47:0c:83: a4:d9:5b:75:50:fd:23:1a:ae:d4:58:b9:ee:0e:4e: ea:c8:35:f2:39:9e:71:14:f7:f6:4b:8c:a6:35:c9: e1:c6:cd:ca:27:48:9f:06:14:1f:c1:7d:3e:79:c5: 83:c6:b9:2c:1d:14:65:a4:be:56:02:ea:6e:13:33: 51:a9:ca:b0:fa:aa:32:d2:41:a8:92:4a:2e:46:ea: f7:e0:92:9d:fd:b8:67:1a:5c:a3:2c:66:11:da:6c: 9d:fa:a0:53:a0:fd:f6:be:d3:89:71:7c:e6:fd:4d: 04:5e:e7:9c:ca:9b:c5:4f:a0:7a:a6:04:3b:1d:6d: d8:68:87:67:ae:59:e0:99:79:fb:ef:11:82:70:e7: bb:46:53:73:53:6e:30:e5:37:c1:f2:30:93:a9:46: eb:8e:6c:73:ae:dd:18:69:0a:c2:d6:44:8d:77:ed: 2d:a7:e1:1f:6d:ff:34:4d:79:52:e3:10:fe:e9:bd: be:01:a4:f7:81:33:bd:60:23:3e:ad:73:d9:df:e9: ee:bc:50:cf:17:dd:94:b6:b1:b8:aa:a7:a8:98:41: 9b:21:e0:a9:d3:a8:b5:ce:b1:2b:cf:2e:2e:09:85: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9D:33:67:F6:B4:B5:49:06:1E:28:A0:90:41:4C:5E:9C:34:E6:C5 X509v3 Authority Key Identifier: keyid:F5:D2:B6:35:2B:D2:0C:2C:FB:1F:60:3C:71:89:70:CA:85:A1:66:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6de8:a000::/36 Signature Algorithm: sha256WithRSAEncryption 08:c1:a3:7e:f1:3d:84:86:df:2d:b7:ed:d0:f2:2e:2f:7c:df: 88:06:77:1b:d0:90:88:e4:f4:6e:95:e2:6d:d7:57:00:08:9d: 24:32:eb:da:98:17:87:59:74:6f:31:11:99:dd:38:60:50:0f: 68:f4:45:d2:0e:f7:20:1f:96:a0:0c:9a:c6:a2:6b:f3:72:72: 4d:84:41:ba:1e:8c:2b:ea:e7:96:ad:9e:84:5a:93:a1:9d:8a: ef:8e:b6:05:50:af:e1:a1:c7:68:75:b9:ad:3a:32:3d:a3:a0: 03:86:9b:5b:52:35:92:36:e7:49:27:1a:5d:8d:e4:b5:af:68: a7:ff:f0:2a:50:c8:c5:ab:46:0d:9b:e1:e6:b5:c5:80:91:71: f5:0a:97:a2:05:f6:b7:8b:20:59:3f:20:da:d5:95:13:29:43: c1:89:64:e9:bb:b7:29:fd:34:8c:a3:f3:03:f6:f7:3a:3a:d4: 8e:6d:98:1f:30:b5:d1:0f:89:45:7c:ee:3d:b7:25:32:d8:02: 91:09:59:96:b7:1d:97:3c:92:74:25:df:5e:ea:f5:86:00:4d: 93:1b:7f:57:85:fb:27:22:a6:75:86:d0:dc:3f:0d:33:61:02: 05:ae:32:0e:3d:b4:50:70:df:69:e3:a8:67:61:64:6a:0b:c3: 1c:b4:a1:0d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUVpJR7i9n+/OlurY2dwEVtrjD92UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVEMkI2MzUyQkQyMEMyQ0ZCMUY2MDNDNzE4OTcwQ0E4 NUExNjZEQjAeFw0yNTEyMTgxODE4MDhaFw0yNjEyMTcxODIzMDhaMDMxMTAvBgNV BAMTKERCOUQzMzY3RjZCNEI1NDkwNjFFMjhBMDkwNDE0QzVFOUMzNEU2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2sHn78203aGmNWbrkLap+9U4 YsttJ56f+UcMg6TZW3VQ/SMartRYue4OTurINfI5nnEU9/ZLjKY1yeHGzconSJ8G FB/BfT55xYPGuSwdFGWkvlYC6m4TM1GpyrD6qjLSQaiSSi5G6vfgkp39uGcaXKMs ZhHabJ36oFOg/fa+04lxfOb9TQRe55zKm8VPoHqmBDsdbdhoh2euWeCZefvvEYJw 57tGU3NTbjDlN8HyMJOpRuuObHOu3RhpCsLWRI137S2n4R9t/zRNeVLjEP7pvb4B pPeBM71gIz6tc9nf6e68UM8X3ZS2sbiqp6iYQZsh4KnTqLXOsSvPLi4Jhf8/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU250zZ/a0tUkGHiigkEFMXpw05sUwHwYDVR0j BBgwFoAU9dK2NSvSDCz7H2A8cYlwyoWhZtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlNBZWNKVHlEWGJxMkd0VjNXYkJ1aVJVeDhaTG1QWmszU1RqYmhvYW12 SzgvMC9GNUQyQjYzNTJCRDIwQzJDRkIxRjYwM0M3MTg5NzBDQTg1QTE2NkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1RDJCNjM1MkJEMjBDMkNG QjFGNjAzQzcxODk3MENBODVBMTY2REIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JTQWVjSlR5RFhicTJHdFYzV2JCdWlSVXg4WkxtUFprM1NUamJob2Ftdks4LzAv MzIzODMwMzQzYTM2NjQ2NTM4M2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzczMDM1MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEbeigMA0GCSqGSIb3DQEBCwUA A4IBAQAIwaN+8T2Eht8tt+3Q8i4vfN+IBncb0JCI5PRuleJt11cACJ0kMuvamBeH WXRvMRGZ3ThgUA9o9EXSDvcgH5agDJrGomvzcnJNhEG6Howr6ueWrZ6EWpOhnYrv jrYFUK/hocdodbmtOjI9o6ADhptbUjWSNudJJxpdjeS1r2in//AqUMjFq0YNm+Hm tcWAkXH1CpeiBfa3iyBZPyDa1ZUTKUPBiWTpu7cp/TSMo/MD9vc6OtSObZgfMLXR D4lFfO49tyUy2AKRCVmWtx2XPJJ0Jd9e6vWGAE2TG39XhfsnIqZ1htDcPw0zYQIF rjIOPbRQcN9p46hnYWRqC8MctKEN -----END CERTIFICATE-----Generated at Mon Dec 22 00:53:17 2025 by rpki-client