This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33322d313238203d3e20323730343036.roa File: 323830343a366238383a3a2f33322d313238203d3e20323730343036.roa (raw, json) Hash identifier: Sznij2UR2u79R0kkXN2D9ZamKRyRWPYq37b5RlYvLj8= Subject key identifier: 98:8D:02:45:A2:25:63:D4:E6:28:7A:B9:3D:F8:F8:36:8A:6B:A8:35 Certificate issuer: /CN=2CECFC86960C437277CA4FDF82CD3F36C7D009A8 Certificate serial: 6E2DEDF22EC6CC0CEA45F5C3499B6407C031FAC1 Authority key identifier: 2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33322d313238203d3e20323730343036.roa Signing time: Mon 29 Dec 2025 20:35:07 +0000 ROA not before: Mon 29 Dec 2025 20:30:07 +0000 ROA not after: Mon 28 Dec 2026 20:35:07 +0000 asID: 270406 IP address blocks: 2804:6b88::/32 maxlen: 128 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2d:ed:f2:2e:c6:cc:0c:ea:45:f5:c3:49:9b:64:07:c0:31:fa:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CECFC86960C437277CA4FDF82CD3F36C7D009A8 Validity Not Before: Dec 29 20:30:07 2025 GMT Not After : Dec 28 20:35:07 2026 GMT Subject: CN=988D0245A22563D4E6287AB93DF8F8368A6BA835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:6e:4b:0b:e0:ee:f8:84:41:e7:28:6c:86: 53:30:28:02:4b:9a:41:1c:ba:bc:05:31:c8:ae:2c: cc:d0:32:14:38:c4:d6:41:83:b8:e8:67:b6:39:14: bd:fd:c4:5d:f6:ea:94:b4:83:8a:81:54:26:1a:52: 3f:9f:37:f8:b4:38:57:f3:6d:1b:57:1c:88:48:78: 4b:3c:85:6d:dc:02:2f:fd:61:78:b5:37:cd:ae:15: 08:af:c6:18:6d:59:62:56:5c:aa:e2:7d:96:9c:bb: 4b:81:4a:90:93:52:86:66:09:b2:92:44:ae:46:49: 37:ed:01:6f:08:35:1a:00:c5:f0:18:1a:a6:b0:2a: 26:21:eb:8a:5d:2d:00:89:ce:a6:55:90:66:f1:99: dd:90:8e:c1:fc:5b:39:a5:cb:a0:2e:e4:ef:01:79: 4d:77:e1:c2:23:20:fd:5a:c8:3e:fc:39:1a:39:fa: 35:84:77:61:45:e0:11:08:7c:48:b8:f0:d5:df:c5: 5e:18:9c:01:9c:97:9f:0d:7d:3d:1d:cd:71:64:4c: 1b:d5:c5:bb:54:6d:f8:3a:d0:a4:18:a8:1b:b8:af: f2:b3:27:e3:f3:28:41:02:c7:90:b7:03:25:42:c9: 4c:a3:82:6f:48:70:3d:9d:a6:c8:03:51:1b:4d:55: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8D:02:45:A2:25:63:D4:E6:28:7A:B9:3D:F8:F8:36:8A:6B:A8:35 X509v3 Authority Key Identifier: keyid:2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a3a2f33322d313238203d3e20323730343036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6b88::/32 Signature Algorithm: sha256WithRSAEncryption 88:01:33:b8:39:54:5d:79:1b:75:fa:4a:fd:a5:4a:f0:fc:ea: b7:d6:f5:5e:34:23:5e:58:39:7c:c5:25:62:55:20:fb:ac:53: 62:70:5f:80:a6:4b:84:be:0b:6a:27:03:fa:32:39:ce:9d:e4: 84:eb:6b:36:4c:06:f2:d6:98:b3:df:72:a0:52:60:87:d9:5a: 6f:e1:d9:6f:b2:8a:7e:5f:61:0a:2f:0b:17:29:f2:bf:4e:47: 0d:52:0b:be:1c:4b:df:1b:f6:26:5a:b4:11:16:55:4d:2c:b3: 7d:15:19:0e:47:75:b2:01:db:8c:8a:51:2c:4b:67:2b:cf:14: 3e:d5:5c:e0:ff:18:d7:99:49:2e:c9:90:ca:24:0b:e7:49:12: a2:0a:06:e6:d4:73:b5:55:1b:ec:7b:5c:71:6c:3b:ce:7e:aa: 75:ba:93:9f:c5:4c:02:e3:d4:8e:f5:6b:80:7e:d0:a8:77:50: b7:6d:b3:ad:0f:2c:3a:4c:00:92:7d:39:2f:ee:12:c1:02:fd: d9:21:af:44:0d:c5:3a:f7:f2:03:6a:c7:78:ee:de:61:2f:78: 76:f4:e9:80:90:74:bc:c5:b0:3b:f1:72:63:7c:53:3d:4a:44: 9b:57:b5:2c:f8:e0:8d:02:c6:f1:ea:94:3f:af:5f:a0:e4:d5: 31:fb:f4:03 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUbi3t8i7GzAzqRfXDSZtkB8Ax+sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFQ0ZDODY5NjBDNDM3Mjc3Q0E0RkRGODJDRDNGMzZD N0QwMDlBODAeFw0yNTEyMjkyMDMwMDdaFw0yNjEyMjgyMDM1MDdaMDMxMTAvBgNV BAMTKDk4OEQwMjQ1QTIyNTYzRDRFNjI4N0FCOTNERjhGODM2OEE2QkE4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+B25LC+Du+IRB5yhshlMwKAJL mkEcurwFMciuLMzQMhQ4xNZBg7joZ7Y5FL39xF326pS0g4qBVCYaUj+fN/i0OFfz bRtXHIhIeEs8hW3cAi/9YXi1N82uFQivxhhtWWJWXKrifZacu0uBSpCTUoZmCbKS RK5GSTftAW8INRoAxfAYGqawKiYh64pdLQCJzqZVkGbxmd2QjsH8Wzmly6Au5O8B eU134cIjIP1ayD78ORo5+jWEd2FF4BEIfEi48NXfxV4YnAGcl58NfT0dzXFkTBvV xbtUbfg60KQYqBu4r/KzJ+PzKEECx5C3AyVCyUyjgm9IcD2dpsgDURtNVXUTAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUmI0CRaIlY9TmKHq5Pfj4NoprqDUwHwYDVR0j BBgwFoAULOz8hpYMQ3J3yk/fgs0/NsfQCagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dzRThpaVA4M2p6ZGhGMzZSVGc1YTJkWW1KRndZOU5iblNKejVtOExn UVQvMC8yQ0VDRkM4Njk2MEM0MzcyNzdDQTRGREY4MkNEM0YzNkM3RDAwOUE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRUNGQzg2OTYwQzQzNzI3 N0NBNEZERjgyQ0QzRjM2QzdEMDA5QTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHc0U4aWlQODNqemRoRjM2UlRnNWEyZFltSkZ3WTlOYm5TSno1bThMZ1FULzAv MzIzODMwMzQzYTM2NjIzODM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzAzNDMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBGuIMA0GCSqGSIb3DQEBCwUAA4IBAQCIATO4 OVRdeRt1+kr9pUrw/Oq31vVeNCNeWDl8xSViVSD7rFNicF+ApkuEvgtqJwP6MjnO neSE62s2TAby1piz33KgUmCH2Vpv4dlvsop+X2EKLwsXKfK/TkcNUgu+HEvfG/Ym WrQRFlVNLLN9FRkOR3WyAduMilEsS2crzxQ+1Vzg/xjXmUkuyZDKJAvnSRKiCgbm 1HO1VRvse1xxbDvOfqp1upOfxUwC49SO9WuAftCod1C3bbOtDyw6TACSfTkv7hLB Av3ZIa9EDcU69/IDasd47t5hL3h29OmAkHS8xbA78XJjfFM9SkSbV7Us+OCNAsbx 6pQ/r1+g5NUx+/QD -----END CERTIFICATE-----Generated at Sat Jan 10 00:29:21 2026 by rpki-client