This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/323830343a386330383a3a2f33322d313238203d3e20323733373735.roa File: 323830343a386330383a3a2f33322d313238203d3e20323733373735.roa (raw, json) Hash identifier: I7h+kMulRTXW2+laY74jZIMJFjhd77WULGlrS9WOa7Y= Subject key identifier: 2D:67:7D:07:D1:A4:F8:FD:E4:03:11:43:0B:CC:FC:5A:8D:A5:7C:50 Certificate issuer: /CN=B085162E58077268172F873FFB370095424571A1 Certificate serial: 2AC0D649133795D36952DFE9104D174F37492B8A Authority key identifier: B0:85:16:2E:58:07:72:68:17:2F:87:3F:FB:37:00:95:42:45:71:A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B085162E58077268172F873FFB370095424571A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/323830343a386330383a3a2f33322d313238203d3e20323733373735.roa Signing time: Sat 08 Nov 2025 16:21:55 +0000 ROA not before: Sat 08 Nov 2025 16:16:55 +0000 ROA not after: Sat 07 Nov 2026 16:21:55 +0000 asID: 273775 IP address blocks: 2804:8c08::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.crl rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B085162E58077268172F873FFB370095424571A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Nov 2025 10:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c0:d6:49:13:37:95:d3:69:52:df:e9:10:4d:17:4f:37:49:2b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B085162E58077268172F873FFB370095424571A1 Validity Not Before: Nov 8 16:16:55 2025 GMT Not After : Nov 7 16:21:55 2026 GMT Subject: CN=2D677D07D1A4F8FDE40311430BCCFC5A8DA57C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:ba:c7:9d:a1:45:e3:e3:fb:d8:02:20:02: 2b:73:83:78:55:33:e5:f4:84:7b:e1:d4:0c:1f:d7: 35:62:51:b2:54:be:e5:3f:40:ec:74:b4:5e:57:02: 84:70:1f:c6:60:ee:7f:e5:38:50:38:9d:98:a1:40: 59:5f:40:03:7e:1b:67:52:68:38:53:f3:6e:f4:56: f4:c9:18:f0:9b:29:2b:e5:5a:26:a4:36:4b:98:49: e9:f5:68:ff:92:8a:86:f9:a0:3d:f4:92:36:bb:1a: a1:46:cb:5d:f5:e7:59:df:0f:ae:a2:51:fd:14:74: 4a:92:b4:27:db:20:38:62:67:8b:eb:c3:87:f8:6c: c5:48:ac:f2:72:0b:60:3e:8b:49:59:70:5b:b0:3e: 6a:7d:5b:ff:09:64:fc:e6:fa:e5:42:63:65:e2:86: c8:51:c4:cd:37:9e:b5:6c:28:df:e7:96:73:3f:39: f7:53:70:f1:55:0c:4a:f9:19:be:f0:eb:c5:3e:66: 81:1f:9a:91:28:8f:68:54:dd:6b:a4:22:1f:4b:29: a2:30:35:b7:7d:ff:af:2e:10:43:47:6e:6b:4f:93: fa:86:72:12:a6:a8:cf:ca:a6:8f:d3:49:7f:98:7d: 52:87:e5:e9:18:44:57:70:c0:aa:2a:41:3d:f6:a0: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:67:7D:07:D1:A4:F8:FD:E4:03:11:43:0B:CC:FC:5A:8D:A5:7C:50 X509v3 Authority Key Identifier: keyid:B0:85:16:2E:58:07:72:68:17:2F:87:3F:FB:37:00:95:42:45:71:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/B085162E58077268172F873FFB370095424571A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B085162E58077268172F873FFB370095424571A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/323830343a386330383a3a2f33322d313238203d3e20323733373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8c08::/32 Signature Algorithm: sha256WithRSAEncryption 5b:58:31:00:1e:33:96:3a:24:76:cf:98:6f:1f:29:c4:6f:11: 6b:e0:66:c9:04:31:45:fd:6a:93:cd:d1:25:86:3b:fa:10:74: 24:d4:21:b9:5e:4b:e4:53:22:60:ee:52:62:30:37:ac:78:53: 5e:bf:32:a2:65:26:d4:20:41:41:2e:ed:09:d3:54:24:0b:39: bd:0e:12:97:c9:cc:eb:42:76:63:38:84:42:88:2a:52:45:99: 77:5a:41:67:3c:c9:e8:af:dd:11:59:df:15:fc:c5:91:e6:bd: 7c:4c:e7:f1:6d:17:4c:59:97:3d:de:e0:fc:bb:fe:74:bb:3f: e1:cf:58:4e:34:72:c7:d2:74:08:1b:b9:59:72:04:39:a3:b4: 55:64:d7:75:82:26:88:6b:3e:d0:da:cd:21:af:e4:a5:9f:5d: 45:de:5a:c2:d4:bb:f7:9f:5f:9a:d7:78:76:36:dc:f4:37:6d: 72:6c:b4:d8:ab:74:bc:95:34:12:a1:0a:11:d8:db:18:88:f8: 30:d9:7e:27:42:1a:f8:bd:a7:8b:21:c4:4a:0b:49:bd:26:1c: df:5d:0e:9a:1b:5e:4e:7e:a0:ee:0d:31:88:a0:70:5d:85:b4: ea:3d:cd:86:8e:9d:26:1a:ea:51:91:de:ce:79:87:ea:55:b9: e6:47:d9:c2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUKsDWSRM3ldNpUt/pEE0XTzdJK4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA4NTE2MkU1ODA3NzI2ODE3MkY4NzNGRkIzNzAwOTU0 MjQ1NzFBMTAeFw0yNTExMDgxNjE2NTVaFw0yNjExMDcxNjIxNTVaMDMxMTAvBgNV BAMTKDJENjc3RDA3RDFBNEY4RkRFNDAzMTE0MzBCQ0NGQzVBOERBNTdDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXbrHnaFF4+P72AIgAitzg3hV M+X0hHvh1Awf1zViUbJUvuU/QOx0tF5XAoRwH8Zg7n/lOFA4nZihQFlfQAN+G2dS aDhT8270VvTJGPCbKSvlWiakNkuYSen1aP+Siob5oD30kja7GqFGy13151nfD66i Uf0UdEqStCfbIDhiZ4vrw4f4bMVIrPJyC2A+i0lZcFuwPmp9W/8JZPzm+uVCY2Xi hshRxM03nrVsKN/nlnM/OfdTcPFVDEr5Gb7w68U+ZoEfmpEoj2hU3WukIh9LKaIw Nbd9/68uEENHbmtPk/qGchKmqM/Kpo/TSX+YfVKH5ekYRFdwwKoqQT32oHjHAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQULWd9B9Gk+P3kAxFDC8z8Wo2lfFAwHwYDVR0j BBgwFoAUsIUWLlgHcmgXL4c/+zcAlUJFcaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGJreVN3emo2MUdDZzRCSnprZ3VoQWZ3UVI0UkxMS2tUNGJzVXVBOHdr WVkvMC9CMDg1MTYyRTU4MDc3MjY4MTcyRjg3M0ZGQjM3MDA5NTQyNDU3MUExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwODUxNjJFNTgwNzcyNjgx NzJGODczRkZCMzcwMDk1NDI0NTcxQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Ria3lTd3pqNjFHQ2c0Qkp6a2d1aEFmd1FSNFJMTEtrVDRic1V1QTh3a1lZLzAv MzIzODMwMzQzYTM4NjMzMDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzMzNzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBIwIMA0GCSqGSIb3DQEBCwUAA4IBAQBbWDEA HjOWOiR2z5hvHynEbxFr4GbJBDFF/WqTzdElhjv6EHQk1CG5XkvkUyJg7lJiMDes eFNevzKiZSbUIEFBLu0J01QkCzm9DhKXyczrQnZjOIRCiCpSRZl3WkFnPMnor90R Wd8V/MWR5r18TOfxbRdMWZc93uD8u/50uz/hz1hONHLH0nQIG7lZcgQ5o7RVZNd1 giaIaz7Q2s0hr+Sln11F3lrC1Lv3n1+a13h2Ntz0N21ybLTYq3S8lTQSoQoR2NsY iPgw2X4nQhr4vaeLIcRKC0m9JhzfXQ6aG15OfqDuDTGIoHBdhbTqPc2Gjp0mGupR kd7OeYfqVbnmR9nC -----END CERTIFICATE-----Generated at Tue Nov 25 18:40:36 2025 by rpki-client