This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3438203d3e20323733343038.roa File: 323830343a386532633a3a2f33322d3438203d3e20323733343038.roa (raw, json) Hash identifier: G/XiXJWvUHjXdetYZOinPftE6hcIH1QMqPHq2b2n+qI= Subject key identifier: 65:6E:EA:1E:C4:BE:B0:6D:F5:99:D0:23:B8:1E:3A:4B:E7:92:20:F6 Certificate issuer: /CN=C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8 Certificate serial: 629FD3A1243C0C0EB9349EE956232B7BC29F5248 Authority key identifier: C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3438203d3e20323733343038.roa Signing time: Fri 21 Nov 2025 17:17:34 +0000 ROA not before: Fri 21 Nov 2025 17:12:34 +0000 ROA not after: Fri 20 Nov 2026 17:17:34 +0000 asID: 273408 IP address blocks: 2804:8e2c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 04 Dec 2025 15:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9f:d3:a1:24:3c:0c:0e:b9:34:9e:e9:56:23:2b:7b:c2:9f:52:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8 Validity Not Before: Nov 21 17:12:34 2025 GMT Not After : Nov 20 17:17:34 2026 GMT Subject: CN=656EEA1EC4BEB06DF599D023B81E3A4BE79220F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:c7:e0:5d:38:6d:71:59:6e:52:82:65:29: 18:9f:50:e1:2c:76:0a:82:45:fe:ad:7d:3a:9b:35: 84:72:43:f9:20:08:be:8a:9a:69:36:35:8f:63:ad: f6:f4:8b:e8:d4:39:6a:3d:ee:11:a9:03:0c:cd:c1: e4:81:da:5d:69:bc:37:54:95:5a:88:82:81:6c:f6: 85:b7:ad:53:c7:58:74:9d:71:0d:eb:8c:96:7e:85: 1b:41:69:4a:59:78:db:71:1b:67:e2:f4:ae:3e:6e: 36:13:c9:37:9d:13:ff:b5:5d:93:c3:08:2a:ec:98: e2:74:f8:de:8e:b2:9f:b7:90:5e:1e:3e:c5:aa:fe: c0:a2:86:9f:18:16:11:09:1b:38:fb:28:45:5c:62: a7:f6:74:ed:55:d5:5c:b6:7d:83:14:36:c9:73:e5: ef:1f:ab:1b:ef:98:79:de:d7:70:81:80:99:2e:ec: b5:1b:39:01:1f:22:1f:cb:ec:3b:ab:e6:16:5b:77: ed:a6:8e:3e:ce:f4:4e:2c:7c:77:84:c1:c5:d8:4e: e2:0a:ae:bc:e3:c1:1a:66:f3:94:38:2c:76:87:40: b3:94:5d:05:36:1e:d8:5f:45:4e:f2:11:58:41:a5: f4:13:04:d5:e9:46:c5:30:7c:83:6a:29:e2:ef:2a: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:EA:1E:C4:BE:B0:6D:F5:99:D0:23:B8:1E:3A:4B:E7:92:20:F6 X509v3 Authority Key Identifier: keyid:C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3438203d3e20323733343038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8e2c::/32 Signature Algorithm: sha256WithRSAEncryption b9:7b:be:68:cb:9d:14:ec:97:2e:6d:35:0a:03:3f:86:9e:b0: 22:43:69:4d:da:66:1f:02:59:c4:9e:15:87:0c:86:dc:ba:82: ef:54:19:40:ea:41:19:e6:1e:45:a6:51:92:4b:eb:87:55:e2: d1:ab:c8:90:eb:7e:7a:9c:c9:bc:00:b3:9a:f1:fd:a8:6b:98: 36:a1:2b:56:a9:df:ef:45:2d:3a:56:36:a7:9d:cc:74:d0:50: c1:71:a4:fa:1c:f0:21:b2:50:f4:76:90:57:aa:ad:d3:eb:fd: f9:d3:ab:c0:a5:34:c8:d8:8d:56:fc:49:c2:33:c3:e9:e9:eb: 13:d9:79:3f:5c:08:9a:de:57:10:16:60:e7:54:2d:9f:2a:91: e3:2f:2c:29:1f:51:8f:2c:66:d7:17:ad:54:bb:16:ef:e4:8f: 94:11:db:61:7a:fb:aa:cb:9c:b6:ff:7d:38:b3:b7:e7:b3:13: 9d:05:29:41:c2:de:84:37:f8:2b:e0:6e:7c:69:40:9c:50:b7: 88:48:2f:fe:e7:fa:59:c7:d6:3e:46:82:e7:95:8c:02:af:ff: ba:77:e5:c5:52:ba:81:f4:ef:e4:2d:55:eb:dd:a6:58:a3:da: ba:cd:fb:5b:66:fb:97:f0:4f:f7:f4:dd:cc:7e:a0:ff:df:5b: 51:24:65:51 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUYp/ToSQ8DA65NJ7pViMre8KfUkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRDcyQ0Y4Rjk1NjhBQUE5Mzk1MEU5OTdFQ0RENDBE NkNCRjFFODAeFw0yNTExMjExNzEyMzRaFw0yNjExMjAxNzE3MzRaMDMxMTAvBgNV BAMTKDY1NkVFQTFFQzRCRUIwNkRGNTk5RDAyM0I4MUUzQTRCRTc5MjIwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczsfgXThtcVluUoJlKRifUOEs dgqCRf6tfTqbNYRyQ/kgCL6Kmmk2NY9jrfb0i+jUOWo97hGpAwzNweSB2l1pvDdU lVqIgoFs9oW3rVPHWHSdcQ3rjJZ+hRtBaUpZeNtxG2fi9K4+bjYTyTedE/+1XZPD CCrsmOJ0+N6Osp+3kF4ePsWq/sCihp8YFhEJGzj7KEVcYqf2dO1V1Vy2fYMUNslz 5e8fqxvvmHne13CBgJku7LUbOQEfIh/L7Dur5hZbd+2mjj7O9E4sfHeEwcXYTuIK rrzjwRpm85Q4LHaHQLOUXQU2HthfRU7yEVhBpfQTBNXpRsUwfINqKeLvKpPhAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUZW7qHsS+sG31mdAjuB46S+eSIPYwHwYDVR0j BBgwFoAUwR1yz4+VaKqpOVDpl+zdQNbL8egwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1RSdlNaUFRweTNmaGVXcG1jUG15VUZhYkNuZldvZ1JNZnBWTGhZY2h0 SlovMC9DMTFENzJDRjhGOTU2OEFBQTkzOTUwRTk5N0VDREQ0MEQ2Q0JGMUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUQ3MkNGOEY5NTY4QUFB OTM5NTBFOTk3RUNERDQwRDZDQkYxRTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NUUnZTWlBUcHkzZmhlV3BtY1BteVVGYWJDbmZXb2dSTWZwVkxoWWNodEpaLzAv MzIzODMwMzQzYTM4NjUzMjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz MzQzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASOLDANBgkqhkiG9w0BAQsFAAOCAQEAuXu+aMud FOyXLm01CgM/hp6wIkNpTdpmHwJZxJ4VhwyG3LqC71QZQOpBGeYeRaZRkkvrh1Xi 0avIkOt+epzJvACzmvH9qGuYNqErVqnf70UtOlY2p53MdNBQwXGk+hzwIbJQ9HaQ V6qt0+v9+dOrwKU0yNiNVvxJwjPD6enrE9l5P1wImt5XEBZg51QtnyqR4y8sKR9R jyxm1xetVLsW7+SPlBHbYXr7qsuctv99OLO357MTnQUpQcLehDf4K+BufGlAnFC3 iEgv/uf6WcfWPkaC55WMAq//unflxVK6gfTv5C1V692mWKPaus37W2b7l/BP9/Td zH6g/99bUSRlUQ== -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:06 2025 by rpki-client