This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa File: 323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa (raw, json) Hash identifier: J0jmDvm9gddVwJ3kt03v5E9Iq4C4ZuvjByglJkuxU0o= Subject key identifier: 3C:0B:D4:C3:F7:3F:9A:1F:4A:74:B3:1C:BF:26:39:81:68:2B:B1:A4 Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Certificate serial: 1CBD15683085BF5D61447D4B337E852D55C03390 Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa Signing time: Tue 09 Dec 2025 23:47:03 +0000 ROA not before: Tue 09 Dec 2025 23:42:03 +0000 ROA not after: Tue 08 Dec 2026 23:47:03 +0000 asID: 267991 IP address blocks: 2804:5654:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 04:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bd:15:68:30:85:bf:5d:61:44:7d:4b:33:7e:85:2d:55:c0:33:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Validity Not Before: Dec 9 23:42:03 2025 GMT Not After : Dec 8 23:47:03 2026 GMT Subject: CN=3C0BD4C3F73F9A1F4A74B31CBF263981682BB1A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:78:67:9b:f4:5a:12:24:dc:35:eb:8b:6c: d4:d0:ae:b1:62:52:3b:e4:df:c7:b5:88:dd:eb:1e: 00:34:26:45:30:4e:0d:75:f1:8a:cb:47:c8:b0:c0: a4:09:97:09:aa:b5:af:71:03:5d:a5:17:0f:cc:a1: 06:82:a7:39:4e:3f:23:e0:85:1f:69:a3:d1:d9:83: 98:55:a3:54:24:17:22:64:d3:90:a1:41:93:c1:b9: 67:60:87:f5:b1:ee:88:b4:86:92:96:4c:b3:86:85: d0:96:23:10:de:2e:ed:00:28:10:75:3e:a0:c2:7e: a5:d6:2c:be:21:95:d6:e5:3a:07:97:9b:db:50:c2: 27:45:5e:0c:53:7c:f0:c3:12:ec:48:52:a7:1e:c4: 58:62:d1:58:27:ec:f6:3a:57:05:06:5a:b1:65:1d: da:ee:c6:98:05:55:ae:1e:33:7f:19:f7:e7:8f:0b: 34:65:ce:cd:67:2b:6b:cb:01:17:04:4d:f6:d4:09: 58:e5:95:39:5b:56:72:d2:45:08:93:12:0b:5c:4e: ed:6c:b3:ab:09:18:af:16:1f:15:40:46:56:af:a5: 7c:da:e9:4c:cd:10:0f:3a:8c:d8:86:38:a1:ab:9c: 1b:7f:42:ec:58:0a:f8:42:34:f9:96:7c:0d:a7:fd: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:D4:C3:F7:3F:9A:1F:4A:74:B3:1C:BF:26:39:81:68:2B:B1:A4 X509v3 Authority Key Identifier: keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5654:7000::/36 Signature Algorithm: sha256WithRSAEncryption 26:6f:bd:85:bd:70:bc:7c:cf:95:25:20:d9:54:bd:d5:f2:83: 24:44:c4:54:88:c2:16:53:54:fa:b0:2e:a9:9e:e6:de:04:e8: 24:32:cb:36:c8:68:3c:82:03:42:cb:f5:29:f1:ce:6c:49:37: 0b:e2:33:6d:98:57:7a:6a:58:0e:d4:1f:2e:4e:dc:5c:11:17: c4:d8:69:06:5f:b6:23:7a:24:b4:14:0c:6d:80:39:ca:7b:fb: e8:13:45:a9:23:17:1c:2f:c1:fa:33:7f:8a:cb:f2:72:a8:14: 1e:a3:56:23:1b:3b:f0:27:52:fa:14:cf:83:80:62:4b:56:dc: b7:1e:fc:c9:f5:38:ed:09:69:32:1f:88:dc:74:88:65:67:fe: 18:4b:76:de:72:72:31:34:b2:7f:19:ec:0b:2e:2b:f3:6c:0f: 18:81:b0:77:3d:df:95:d4:6f:71:c3:ab:be:9c:9b:a5:57:17: 66:9e:84:14:e7:a6:f6:03:c4:82:a8:fa:a8:e2:d3:98:15:e2: cc:12:e4:fc:86:a6:ed:b0:3f:70:b3:4b:50:c5:e6:92:b3:fa: e0:ca:e0:95:d3:ba:9c:62:53:9e:6b:ee:76:9f:b7:9e:39:42: 08:d9:c0:9e:9b:a3:bc:41:0f:f4:54:02:7b:37:5b:c3:cd:9b: b1:34:59:e3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUHL0VaDCFv11hRH1LM36FLVXAM5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1 QjkwRjFBQjAeFw0yNTEyMDkyMzQyMDNaFw0yNjEyMDgyMzQ3MDNaMDMxMTAvBgNV BAMTKDNDMEJENEMzRjczRjlBMUY0QTc0QjMxQ0JGMjYzOTgxNjgyQkIxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOCXhnm/RaEiTcNeuLbNTQrrFi Ujvk38e1iN3rHgA0JkUwTg118YrLR8iwwKQJlwmqta9xA12lFw/MoQaCpzlOPyPg hR9po9HZg5hVo1QkFyJk05ChQZPBuWdgh/Wx7oi0hpKWTLOGhdCWIxDeLu0AKBB1 PqDCfqXWLL4hldblOgeXm9tQwidFXgxTfPDDEuxIUqcexFhi0Vgn7PY6VwUGWrFl HdruxpgFVa4eM38Z9+ePCzRlzs1nK2vLARcETfbUCVjllTlbVnLSRQiTEgtcTu1s s6sJGK8WHxVARlavpXza6UzNEA86jNiGOKGrnBt/QuxYCvhCNPmWfA2n/affAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUPAvUw/c/mh9KdLMcvyY5gWgrsaQwHwYDVR0j BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5 Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv MzIzODMwMzQzYTM1MzYzNTM0M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlRwMA0GCSqGSIb3DQEBCwUA A4IBAQAmb72FvXC8fM+VJSDZVL3V8oMkRMRUiMIWU1T6sC6pnubeBOgkMss2yGg8 ggNCy/Up8c5sSTcL4jNtmFd6algO1B8uTtxcERfE2GkGX7YjeiS0FAxtgDnKe/vo E0WpIxccL8H6M3+Ky/JyqBQeo1YjGzvwJ1L6FM+DgGJLVty3HvzJ9TjtCWkyH4jc dIhlZ/4YS3becnIxNLJ/GewLLivzbA8YgbB3Pd+V1G9xw6u+nJulVxdmnoQU56b2 A8SCqPqo4tOYFeLMEuT8hqbtsD9ws0tQxeaSs/rgyuCV07qcYlOea+52n7eeOUII 2cCem6O8QQ/0VAJ7N1vDzZuxNFnj -----END CERTIFICATE-----Generated at Fri Dec 19 15:23:34 2025 by rpki-client