This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa File: 323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa (raw, json) Hash identifier: cFX9BycWNMyW2bJATeVm/0+Vd8d2yaqmcaHLjEHkTN4= Subject key identifier: DE:5B:C5:46:8C:0A:35:A2:2C:B7:E0:F6:CD:FE:77:FD:9D:DE:B2:68 Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Certificate serial: 0CA79DDB6A6D8296953DA5BD8AC006F967DB8747 Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa Signing time: Tue 09 Dec 2025 23:47:03 +0000 ROA not before: Tue 09 Dec 2025 23:42:03 +0000 ROA not after: Tue 08 Dec 2026 23:47:03 +0000 asID: 267991 IP address blocks: 2804:5654:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 04:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a7:9d:db:6a:6d:82:96:95:3d:a5:bd:8a:c0:06:f9:67:db:87:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Validity Not Before: Dec 9 23:42:03 2025 GMT Not After : Dec 8 23:47:03 2026 GMT Subject: CN=DE5BC5468C0A35A22CB7E0F6CDFE77FD9DDEB268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:c9:45:d9:9d:38:97:8d:3c:91:e0:b3:1c: 38:80:39:fa:8c:ac:20:ce:69:ea:29:58:ce:34:ce: fb:a0:9a:90:dd:cb:cb:b5:88:2f:6c:3a:2d:c3:3b: d4:37:32:9e:fb:25:27:99:3b:b3:71:7b:77:41:63: 8d:e3:68:af:30:09:c8:3e:bb:d6:5c:df:de:bb:e9: 16:64:c7:48:47:85:6d:76:38:00:fe:b4:f0:ca:fb: 87:e5:d8:2c:e5:f6:bb:89:c6:ba:21:b8:bb:b8:b2: 8e:92:7f:89:f0:c5:fd:6e:b3:ad:c9:19:12:97:d2: ab:3a:c3:a9:ee:38:ee:2b:5a:25:c0:af:ae:40:fb: fa:85:91:b6:34:9e:8c:78:fb:dc:fc:6b:0b:6b:0b: fd:16:f4:ff:f7:87:59:2c:75:d3:de:33:23:86:44: e6:0f:d1:aa:df:86:10:f3:86:80:b7:68:a8:0d:c3: 9c:95:3d:52:30:6d:06:9a:e1:5b:30:66:f8:e4:82: a6:2b:6e:76:56:eb:97:af:92:67:82:db:72:cc:aa: 63:5c:33:66:59:23:a5:ae:a9:8d:87:27:92:9c:02: 31:d2:aa:b6:2a:c7:d2:65:82:cd:80:b5:c0:64:f8: ee:a9:bb:c2:29:21:27:27:f1:87:ed:d6:b7:39:1f: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:C5:46:8C:0A:35:A2:2C:B7:E0:F6:CD:FE:77:FD:9D:DE:B2:68 X509v3 Authority Key Identifier: keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5654:9000::/36 Signature Algorithm: sha256WithRSAEncryption 5e:0a:f3:20:58:6d:43:1b:37:6f:bf:8c:02:fc:58:c1:ae:3e: d2:e3:42:6e:02:25:23:2e:e7:c8:db:3b:aa:a3:6f:1a:2c:8c: 28:96:a6:b7:7c:9a:0d:fa:b8:9f:68:c2:49:74:70:d1:c0:4f: 5d:9b:22:0b:4e:e3:37:9b:37:20:ba:11:b2:7b:51:cc:b2:31: f4:83:e4:69:44:f0:36:92:77:6e:b0:8e:81:30:bc:dd:d2:c0: c1:7f:91:9e:bc:b5:0f:72:2b:fd:c6:85:a0:2e:d8:ba:b5:f3: b9:ff:7e:ef:06:73:21:f2:7a:ac:d5:87:ad:a9:b3:14:31:41: 3d:8c:5c:3c:1d:5c:25:d0:7b:57:38:47:d0:bd:3b:03:09:3d: fa:0e:33:51:bf:27:99:b9:83:dc:8f:28:e4:38:2c:77:2b:d3: b4:cd:82:17:8c:6e:27:f5:88:d7:0a:f8:9b:fc:8f:3e:60:df: c0:2f:b7:07:86:cb:b7:6d:e7:e8:02:a5:e9:18:a0:1d:5c:44: 03:66:50:75:b9:87:2a:d4:32:72:1b:46:97:d4:0c:82:f8:1e: 7d:ab:eb:1b:dd:f8:9a:0f:97:bc:78:94:d6:15:84:f8:49:6a: 55:c0:59:31:61:7e:07:ea:20:d0:bc:65:31:21:d8:3e:41:cf: 52:86:e6:3c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUDKed22ptgpaVPaW9isAG+Wfbh0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1 QjkwRjFBQjAeFw0yNTEyMDkyMzQyMDNaFw0yNjEyMDgyMzQ3MDNaMDMxMTAvBgNV BAMTKERFNUJDNTQ2OEMwQTM1QTIyQ0I3RTBGNkNERkU3N0ZEOURERUIyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyMlF2Z04l408keCzHDiAOfqM rCDOaeopWM40zvugmpDdy8u1iC9sOi3DO9Q3Mp77JSeZO7Nxe3dBY43jaK8wCcg+ u9Zc39676RZkx0hHhW12OAD+tPDK+4fl2Czl9ruJxrohuLu4so6Sf4nwxf1us63J GRKX0qs6w6nuOO4rWiXAr65A+/qFkbY0nox4+9z8awtrC/0W9P/3h1ksddPeMyOG ROYP0arfhhDzhoC3aKgNw5yVPVIwbQaa4VswZvjkgqYrbnZW65evkmeC23LMqmNc M2ZZI6WuqY2HJ5KcAjHSqrYqx9Jlgs2AtcBk+O6pu8IpIScn8Yft1rc5Hxp5AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU3lvFRowKNaIst+D2zf53/Z3esmgwHwYDVR0j BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5 Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv MzIzODMwMzQzYTM1MzYzNTM0M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlSQMA0GCSqGSIb3DQEBCwUA A4IBAQBeCvMgWG1DGzdvv4wC/FjBrj7S40JuAiUjLufI2zuqo28aLIwolqa3fJoN +rifaMJJdHDRwE9dmyILTuM3mzcguhGye1HMsjH0g+RpRPA2kndusI6BMLzd0sDB f5GevLUPciv9xoWgLti6tfO5/37vBnMh8nqs1YetqbMUMUE9jFw8HVwl0HtXOEfQ vTsDCT36DjNRvyeZuYPcjyjkOCx3K9O0zYIXjG4n9YjXCvib/I8+YN/AL7cHhsu3 befoAqXpGKAdXEQDZlB1uYcq1DJyG0aX1AyC+B59q+sb3fiaD5e8eJTWFYT4SWpV wFkxYX4H6iDQvGUxIdg+Qc9ShuY8 -----END CERTIFICATE-----Generated at Fri Dec 19 15:23:34 2025 by rpki-client