This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa File: 323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa (raw, json) Hash identifier: X6PqM2ZpDKayLAvzziP9K8hcZaj1lLrDai8D6JXK+rg= Subject key identifier: DC:1A:2C:0A:99:17:C6:1E:10:CE:15:87:90:C0:FA:3C:1F:F4:F4:53 Certificate issuer: /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC Certificate serial: 220604D7D4471FC1D08DC8041B21E1C34809F45F Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa Signing time: Mon 22 Dec 2025 18:34:32 +0000 ROA not before: Mon 22 Dec 2025 18:29:32 +0000 ROA not after: Mon 21 Dec 2026 18:34:32 +0000 asID: 263634 IP address blocks: 2804:1068:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 18:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:06:04:d7:d4:47:1f:c1:d0:8d:c8:04:1b:21:e1:c3:48:09:f4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC Validity Not Before: Dec 22 18:29:32 2025 GMT Not After : Dec 21 18:34:32 2026 GMT Subject: CN=DC1A2C0A9917C61E10CE158790C0FA3C1FF4F453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:2b:55:42:eb:b4:e6:3f:22:fc:6c:bd:73: 95:0c:77:21:01:ac:e2:f5:b7:43:11:d9:08:fe:5d: 3e:b5:37:3f:fa:10:37:dc:49:13:25:52:08:91:96: 8d:b8:de:23:00:37:6e:a7:f0:bf:0f:68:8a:ab:42: bf:8e:87:34:e2:9b:e7:db:37:56:ef:5f:79:b2:61: d0:87:c4:32:c0:0e:b4:f9:4e:34:77:b2:90:b1:62: 96:a2:14:fc:15:63:af:8d:b7:d2:ec:c4:23:b9:06: 54:21:ec:21:0c:34:63:22:8a:71:b1:d8:c1:ce:01: 5f:85:d2:f3:fd:13:f3:3b:81:88:5b:14:fc:c5:e2: 9f:c5:a3:c2:09:50:86:a7:04:36:08:14:b5:11:75: 03:b8:ca:85:5a:13:c4:c6:9c:92:9b:73:30:68:34: 43:fb:5c:90:c5:d8:42:19:cc:33:85:8d:ab:b6:01: ca:66:c8:a5:be:6c:4f:47:b7:02:a7:55:cb:43:f8: 30:7b:f7:6f:fc:28:24:0e:e1:80:78:50:e4:ed:c7: 12:d7:2c:96:28:23:16:17:c1:2e:1b:40:b2:f0:c1: 34:ee:2f:be:72:09:ef:44:fa:a9:45:0b:99:7b:fc: 22:57:1f:56:8d:3c:ce:ff:c1:a7:d0:de:90:3d:01: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1A:2C:0A:99:17:C6:1E:10:CE:15:87:90:C0:FA:3C:1F:F4:F4:53 X509v3 Authority Key Identifier: keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1068:4000::/36 Signature Algorithm: sha256WithRSAEncryption 04:2c:6d:ff:8c:1b:3f:8b:d9:74:8a:a6:17:58:80:ae:a3:5c: 9e:ea:38:db:9a:20:87:dc:3f:16:8d:b6:11:db:d1:ea:06:e8: c3:0f:fc:ea:4d:e2:bc:5f:fa:dd:d2:8a:8a:fc:98:fc:5e:8c: 4b:f5:e9:40:e4:26:d6:19:f4:77:75:6d:31:0f:ab:80:db:eb: 25:9d:4a:50:e0:5b:87:81:ea:36:96:f0:9d:a5:2e:b6:ad:1c: 60:04:34:5e:c7:d5:e5:0e:72:c2:73:2d:08:e7:39:12:99:b3: 0b:ab:cd:4c:b2:16:b5:9f:c0:83:16:4b:ae:d7:49:1e:ce:a6: ac:2c:94:f7:c5:03:e0:e2:46:ad:71:13:7e:9f:41:15:21:f8: de:54:82:4d:40:ef:cd:23:28:ff:af:a5:d0:95:46:fb:19:eb: e0:85:ea:e1:3c:3d:ec:9b:18:48:9e:a2:c9:37:e3:ff:59:da: 63:ac:cf:71:24:db:42:b8:0d:b2:74:42:a7:13:b1:c4:fd:8c: 2c:27:cd:a4:3b:e0:93:0a:64:fe:31:d8:78:a5:b1:44:67:3a: 8d:b1:de:98:66:fb:08:db:8e:48:f9:b0:01:17:4e:39:98:eb: 10:58:af:92:a8:f5:cf:4e:33:a4:a0:de:e4:94:aa:1c:d5:e1: fd:a0:46:df -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUIgYE19RHH8HQjcgEGyHhw0gJ9F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjczMDEwMERERjE1REFFMTU2MkI5NjcwMUM1RTMwQzRG QzBBMDFEQzAeFw0yNTEyMjIxODI5MzJaFw0yNjEyMjExODM0MzJaMDMxMTAvBgNV BAMTKERDMUEyQzBBOTkxN0M2MUUxMENFMTU4NzkwQzBGQTNDMUZGNEY0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvytVQuu05j8i/Gy9c5UMdyEB rOL1t0MR2Qj+XT61Nz/6EDfcSRMlUgiRlo243iMAN26n8L8PaIqrQr+OhzTim+fb N1bvX3myYdCHxDLADrT5TjR3spCxYpaiFPwVY6+Nt9LsxCO5BlQh7CEMNGMiinGx 2MHOAV+F0vP9E/M7gYhbFPzF4p/Fo8IJUIanBDYIFLURdQO4yoVaE8TGnJKbczBo NEP7XJDF2EIZzDOFjau2AcpmyKW+bE9HtwKnVctD+DB792/8KCQO4YB4UOTtxxLX LJYoIxYXwS4bQLLwwTTuL75yCe9E+qlFC5l7/CJXH1aNPM7/wafQ3pA9AekjAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU3BosCpkXxh4QzhWHkMD6PB/09FMwHwYDVR0j BBgwFoAUtzAQDd8V2uFWK5ZwHF4wxPwKAdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNtRjd4TmM0cjI3akdoS2RMZFFzbTJ3WGhWNnJuOWRuY3g1MWpSWWFl aWovMC9CNzMwMTAwRERGMTVEQUUxNTYyQjk2NzAxQzVFMzBDNEZDMEEwMURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MzAxMDBEREYxNURBRTE1 NjJCOTY3MDFDNUUzMEM0RkMwQTAxREMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0MzbUY3eE5jNHIyN2pHaEtkTGRRc20yd1hoVjZybjlkbmN4NTFqUllhZWlqLzAv MzIzODMwMzQzYTMxMzAzNjM4M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM2MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEGhAMA0GCSqGSIb3DQEBCwUA A4IBAQAELG3/jBs/i9l0iqYXWICuo1ye6jjbmiCH3D8WjbYR29HqBujDD/zqTeK8 X/rd0oqK/Jj8XoxL9elA5CbWGfR3dW0xD6uA2+slnUpQ4FuHgeo2lvCdpS62rRxg BDRex9XlDnLCcy0I5zkSmbMLq81Msha1n8CDFkuu10kezqasLJT3xQPg4katcRN+ n0EVIfjeVIJNQO/NIyj/r6XQlUb7GevgherhPD3smxhInqLJN+P/WdpjrM9xJNtC uA2ydEKnE7HE/YwsJ82kO+CTCmT+Mdh4pbFEZzqNsd6YZvsI245I+bABF045mOsQ WK+SqPXPTjOkoN7klKoc1eH9oEbf -----END CERTIFICATE-----Generated at Tue Dec 23 11:23:12 2025 by rpki-client