This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a323030303a3a2f33362d3336203d3e20323637393931.roa File: 323830343a353635343a323030303a3a2f33362d3336203d3e20323637393931.roa (raw, json) Hash identifier: 3wOzjexIrFQ1I25ha6xailOI5zcy6LHh8pMpGVv9l4U= Subject key identifier: 2D:8E:A1:8D:45:28:81:FB:1F:C4:76:79:DB:27:CF:E6:4B:09:22:8C Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Certificate serial: 32B0935E750A75379CB46E571273BC2813E4F45A Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a323030303a3a2f33362d3336203d3e20323637393931.roa Signing time: Tue 09 Dec 2025 23:47:03 +0000 ROA not before: Tue 09 Dec 2025 23:42:03 +0000 ROA not after: Tue 08 Dec 2026 23:47:03 +0000 asID: 267991 IP address blocks: 2804:5654:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 23:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b0:93:5e:75:0a:75:37:9c:b4:6e:57:12:73:bc:28:13:e4:f4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Validity Not Before: Dec 9 23:42:03 2025 GMT Not After : Dec 8 23:47:03 2026 GMT Subject: CN=2D8EA18D452881FB1FC47679DB27CFE64B09228C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:75:5d:a3:d0:63:a6:8d:f7:00:62:7e:ec: ab:4b:81:c9:fd:d7:14:51:e7:bf:31:04:e3:0a:61: fa:e6:a4:83:55:d7:f7:ef:cd:96:d6:9d:2f:33:93: a4:54:f4:4a:af:8e:4b:29:f7:f4:95:2d:53:d8:62: bc:2a:b7:e0:02:e7:a6:51:70:13:f1:84:a2:a7:ee: 8c:eb:87:11:e5:86:78:f3:75:43:71:13:97:ce:4b: 8c:ec:4e:5a:ec:08:69:cf:18:cd:55:56:23:2a:88: 44:49:5c:b6:d9:dc:2e:ff:d2:a9:f2:fc:5c:4c:93: 1a:ea:59:fd:66:a7:44:35:c3:74:c0:8e:ef:5a:d0: 34:26:54:6a:14:2e:d0:a6:88:d7:1f:bd:26:f8:31: a1:15:b2:a3:57:19:36:2a:ff:b9:26:96:48:d9:4e: 2c:4b:cd:17:dc:88:15:ea:bc:3b:b1:4d:00:87:b5: 9d:49:5d:86:d4:99:ac:80:20:e5:23:65:97:c8:40: da:68:ca:ed:6a:95:53:d0:02:5e:00:43:ed:2e:2a: f5:b4:f4:26:57:ea:49:16:72:c8:88:54:5e:ed:33: 52:9d:d6:83:82:ff:48:08:5c:79:88:96:13:4e:e0: cb:fc:4f:46:0b:56:f7:66:de:eb:3c:21:74:83:00: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8E:A1:8D:45:28:81:FB:1F:C4:76:79:DB:27:CF:E6:4B:09:22:8C X509v3 Authority Key Identifier: keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a323030303a3a2f33362d3336203d3e20323637393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5654:2000::/36 Signature Algorithm: sha256WithRSAEncryption a0:2f:06:7f:b0:d5:2b:63:b4:2b:63:75:c5:17:f4:29:9f:e0: 21:b6:17:fd:5b:4f:ac:91:05:37:60:1f:cf:6a:14:15:f1:97: cc:e0:b9:68:21:85:34:df:99:b6:d2:8c:2f:57:d4:ce:04:13: 7f:cb:57:41:f1:ba:51:32:ea:e6:b8:2e:72:32:db:f3:63:6e: 32:5c:98:30:eb:4a:b2:d2:f5:bd:ac:af:0b:bb:8b:9f:87:f3: ce:2c:14:d9:8c:a0:a5:3e:71:43:fc:42:01:68:73:ea:60:44: 7a:64:59:fb:cf:77:54:c6:e1:2b:c7:bc:07:95:d2:b8:dc:a1: 04:51:db:80:62:ee:55:36:b6:c0:43:51:92:cc:37:f2:e8:aa: 87:ed:bf:6c:a6:86:10:82:89:f4:1a:14:b0:36:05:99:89:8e: 94:ab:f6:6c:3d:36:7d:86:dd:60:0d:95:f0:30:5d:ef:c0:16: 71:c6:66:21:1c:c3:e4:89:b1:63:e8:10:48:03:58:76:47:fb: 77:69:ac:a6:b0:76:0d:b8:24:c6:72:ac:0f:f4:cb:bc:12:e3: f9:19:2c:60:69:08:f0:ed:46:dc:b4:60:17:c3:af:27:e1:0b: b2:68:65:14:be:42:cd:84:cd:b3:77:f6:82:74:9b:49:61:ef: 10:d8:aa:37 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUMrCTXnUKdTectG5XEnO8KBPk9FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1 QjkwRjFBQjAeFw0yNTEyMDkyMzQyMDNaFw0yNjEyMDgyMzQ3MDNaMDMxMTAvBgNV BAMTKDJEOEVBMThENDUyODgxRkIxRkM0NzY3OURCMjdDRkU2NEIwOTIyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoF3Vdo9Bjpo33AGJ+7KtLgcn9 1xRR578xBOMKYfrmpINV1/fvzZbWnS8zk6RU9Eqvjksp9/SVLVPYYrwqt+AC56ZR cBPxhKKn7ozrhxHlhnjzdUNxE5fOS4zsTlrsCGnPGM1VViMqiERJXLbZ3C7/0qny /FxMkxrqWf1mp0Q1w3TAju9a0DQmVGoULtCmiNcfvSb4MaEVsqNXGTYq/7kmlkjZ TixLzRfciBXqvDuxTQCHtZ1JXYbUmayAIOUjZZfIQNpoyu1qlVPQAl4AQ+0uKvW0 9CZX6kkWcsiIVF7tM1Kd1oOC/0gIXHmIlhNO4Mv8T0YLVvdm3us8IXSDANHPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULY6hjUUogfsfxHZ52yfP5ksJIowwHwYDVR0j BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5 Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv MzIzODMwMzQzYTM1MzYzNTM0M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlQgMA0GCSqGSIb3DQEBCwUA A4IBAQCgLwZ/sNUrY7QrY3XFF/Qpn+Ahthf9W0+skQU3YB/PahQV8ZfM4LloIYU0 35m20owvV9TOBBN/y1dB8bpRMurmuC5yMtvzY24yXJgw60qy0vW9rK8Lu4ufh/PO LBTZjKClPnFD/EIBaHPqYER6ZFn7z3dUxuErx7wHldK43KEEUduAYu5VNrbAQ1GS zDfy6KqH7b9spoYQgon0GhSwNgWZiY6Uq/ZsPTZ9ht1gDZXwMF3vwBZxxmYhHMPk ibFj6BBIA1h2R/t3aaymsHYNuCTGcqwP9Mu8EuP5GSxgaQjw7UbctGAXw68n4Quy aGUUvkLNhM2zd/aCdJtJYe8Q2Ko3 -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:48 2025 by rpki-client