This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/323830343a393539633a3a2f33322d313238203d3e20323734353333.roa File: 323830343a393539633a3a2f33322d313238203d3e20323734353333.roa (raw, json) Hash identifier: aEO4ZPibLWZ8DPxY/2v4NVH5yBsjIZnlJPaG6/91zgQ= Subject key identifier: 6B:04:EC:96:CC:A1:6E:A5:AD:D1:6A:9A:74:13:A1:11:E7:8E:85:A3 Certificate issuer: /CN=CD466D427F1FD3AB41CF878A569898A79B337545 Certificate serial: 6D8E2DB69B2BCADB17261E761DC0BB2482FA93C2 Authority key identifier: CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer Subject info access: rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/323830343a393539633a3a2f33322d313238203d3e20323734353333.roa Signing time: Fri 12 Dec 2025 14:51:27 +0000 ROA not before: Fri 12 Dec 2025 14:46:27 +0000 ROA not after: Fri 11 Dec 2026 14:51:27 +0000 asID: 274533 IP address blocks: 2804:959c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 01:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8e:2d:b6:9b:2b:ca:db:17:26:1e:76:1d:c0:bb:24:82:fa:93:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD466D427F1FD3AB41CF878A569898A79B337545 Validity Not Before: Dec 12 14:46:27 2025 GMT Not After : Dec 11 14:51:27 2026 GMT Subject: CN=6B04EC96CCA16EA5ADD16A9A7413A111E78E85A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:cc:52:f4:79:f0:d2:4d:a8:3e:2b:2e:c2: b1:bc:b3:d3:dc:6d:b7:3a:ce:97:1e:d1:6b:2a:f9: e4:5b:2b:1e:79:a1:30:7e:2f:5a:70:62:99:81:8d: 56:b2:91:82:1b:b6:e8:48:2a:4c:28:46:0c:3b:36: 05:6e:13:24:68:14:7c:63:4e:99:c4:cc:60:4e:4c: 9f:34:09:26:90:d2:b9:49:ae:48:a9:45:5b:72:a6: b1:bb:ee:08:96:cc:92:f9:4d:cc:ab:b4:23:23:aa: b6:e6:13:bd:01:dc:25:d9:b6:df:62:f5:c2:f8:dd: fd:8c:73:02:2c:0c:1b:e5:8c:d1:92:5e:87:6b:94: 67:ca:0f:90:f2:d7:f7:f3:97:76:b4:af:5e:db:0a: 3d:e9:8f:94:f4:64:ef:72:60:5c:c9:3d:e0:11:92: f0:74:d1:14:4e:4e:7d:32:d3:16:a0:92:cb:ae:9a: 4f:f4:77:68:f8:cc:72:eb:01:69:09:a3:0c:13:a5: 61:24:55:2e:d4:cc:eb:13:68:69:99:9c:87:8c:01: 4e:c0:ee:82:68:29:cd:db:7a:4a:cf:d2:a2:3c:1a: 20:84:d5:7a:29:08:35:c2:79:02:62:e8:85:6c:91: e0:f4:68:69:d0:2f:79:75:3f:ac:61:9f:5c:97:35: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:04:EC:96:CC:A1:6E:A5:AD:D1:6A:9A:74:13:A1:11:E7:8E:85:A3 X509v3 Authority Key Identifier: keyid:CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/323830343a393539633a3a2f33322d313238203d3e20323734353333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:959c::/32 Signature Algorithm: sha256WithRSAEncryption 88:b8:1b:8d:6a:ff:72:8f:30:35:dd:c7:09:53:c2:8a:f0:5d: 7d:18:3e:58:0a:68:ec:44:d2:fe:60:ed:e2:87:66:98:a1:ce: 4b:af:a5:7d:71:85:a7:82:30:91:43:21:78:d7:63:b0:25:ab: a8:e9:53:13:92:83:04:44:45:6d:5a:0d:b9:00:7d:4d:d5:81: c8:ca:8e:9d:9a:f0:5a:5a:b3:d6:66:dc:e6:63:e5:e8:d0:d1: 84:96:30:de:16:87:b3:b1:71:ee:da:c0:48:30:41:fb:c1:5c: 6c:64:81:0f:07:8b:80:04:8d:c3:00:fc:22:60:33:82:6d:f9: 0b:3e:b5:04:ca:f9:4e:02:39:a8:91:0e:06:1d:65:7f:bd:20: 6e:26:e2:82:cd:18:44:f7:66:32:a2:c8:35:03:78:21:a5:78: 93:c6:44:a7:cc:63:f8:78:2c:a5:04:a2:0d:84:2d:18:e4:70: 33:ee:fc:4d:c8:99:6e:b2:88:55:8c:e6:49:60:e8:59:d9:79: 87:25:9a:31:27:65:91:35:7d:21:31:74:bb:4b:68:14:fd:42: c6:26:66:ed:02:1a:32:9d:7d:64:a1:12:fd:3b:16:fd:92:dd: 77:5f:25:18:e4:e4:c0:e6:c1:6a:8a:16:1f:7a:b5:06:4a:17: db:05:98:df -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUbY4ttpsrytsXJh52HcC7JIL6k8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5 QjMzNzU0NTAeFw0yNTEyMTIxNDQ2MjdaFw0yNjEyMTExNDUxMjdaMDMxMTAvBgNV BAMTKDZCMDRFQzk2Q0NBMTZFQTVBREQxNkE5QTc0MTNBMTExRTc4RTg1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJsxS9Hnw0k2oPisuwrG8s9Pc bbc6zpce0Wsq+eRbKx55oTB+L1pwYpmBjVaykYIbtuhIKkwoRgw7NgVuEyRoFHxj TpnEzGBOTJ80CSaQ0rlJrkipRVtyprG77giWzJL5TcyrtCMjqrbmE70B3CXZtt9i 9cL43f2McwIsDBvljNGSXodrlGfKD5Dy1/fzl3a0r17bCj3pj5T0ZO9yYFzJPeAR kvB00RROTn0y0xagksuumk/0d2j4zHLrAWkJowwTpWEkVS7UzOsTaGmZnIeMAU7A 7oJoKc3bekrP0qI8GiCE1XopCDXCeQJi6IVskeD0aGnQL3l1P6xhn1yXNaG/AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUawTslsyhbqWt0WqadBOhEeeOhaMwHwYDVR0j BBgwFoAUzUZtQn8f06tBz4eKVpiYp5szdUUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Cbm1MWEpNUXNlWVhpTXZoOVoyZnFId2l6S2V0aFRjZkNLSnVaOFdvZkY2 LzAvQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5QjMzNzU0NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DRDQ2NkQ0MjdGMUZEM0FCNDFD Rjg3OEE1Njk4OThBNzlCMzM3NTQ1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9C bm1MWEpNUXNlWVhpTXZoOVoyZnFId2l6S2V0aFRjZkNLSnVaOFdvZkY2LzAvMzIz ODMwMzQzYTM5MzUzOTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzQz NTMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBJWcMA0GCSqGSIb3DQEBCwUAA4IBAQCIuBuNav9y jzA13ccJU8KK8F19GD5YCmjsRNL+YO3ih2aYoc5Lr6V9cYWngjCRQyF412OwJauo 6VMTkoMEREVtWg25AH1N1YHIyo6dmvBaWrPWZtzmY+Xo0NGEljDeFoezsXHu2sBI MEH7wVxsZIEPB4uABI3DAPwiYDOCbfkLPrUEyvlOAjmokQ4GHWV/vSBuJuKCzRhE 92Yyosg1A3ghpXiTxkSnzGP4eCylBKINhC0Y5HAz7vxNyJlusohVjOZJYOhZ2XmH JZoxJ2WRNX0hMXS7S2gU/ULGJmbtAhoynX1koRL9Oxb9kt13XyUY5OTA5sFqihYf erUGShfbBZjf -----END CERTIFICATE-----Generated at Wed Dec 24 16:19:05 2025 by rpki-client