This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa File: 323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa (raw, json) Hash identifier: okARzhUwSA++CaIQiE7G5p/lPgXuBrz6+YAreZuSaj8= Subject key identifier: AA:CD:9E:9D:01:DB:4B:45:7B:F1:93:B6:49:59:D1:1F:BB:D5:33:28 Certificate issuer: /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Certificate serial: 39899B6159AEA65B204B615AE8BCACEB6D8C570A Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject info access: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa Signing time: Thu 11 Dec 2025 12:56:21 +0000 ROA not before: Thu 11 Dec 2025 12:51:21 +0000 ROA not after: Thu 10 Dec 2026 12:56:21 +0000 asID: 271274 IP address blocks: 2804:78ec:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 13:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:89:9b:61:59:ae:a6:5b:20:4b:61:5a:e8:bc:ac:eb:6d:8c:57:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Validity Not Before: Dec 11 12:51:21 2025 GMT Not After : Dec 10 12:56:21 2026 GMT Subject: CN=AACD9E9D01DB4B457BF193B64959D11FBBD53328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:2f:02:a4:04:30:64:55:57:9e:9d:d8:d8: d1:8f:dc:e9:19:f6:04:fa:c9:0d:f1:59:ed:64:9f: 4d:33:61:3e:05:ef:59:df:9d:7d:02:7f:97:6d:22: 8e:62:4e:ee:b0:e1:87:27:28:72:94:a1:4b:4a:22: 9b:b2:9e:59:4b:d7:1e:98:31:b4:6b:a3:e6:d3:54: f6:d4:78:a8:94:ee:d6:5a:ff:13:9b:59:f0:22:a3: 30:86:ed:e5:f3:4a:46:e4:18:4c:c9:9f:31:8a:26: 07:ed:6d:c2:3a:41:a3:70:12:a7:b5:a2:42:29:64: 03:f8:9a:1b:0c:c0:1f:dc:93:7d:98:e5:ad:eb:90: fe:b1:ff:46:8e:91:08:60:93:30:14:f5:18:d7:57: 0a:71:d7:ef:17:ad:d6:d4:92:d0:88:88:56:a1:a0: 2d:20:46:88:98:9a:84:89:46:e1:81:7a:69:48:ad: 78:e9:a8:87:69:cf:b8:a9:39:a8:a2:5e:66:ea:cc: 26:f8:86:5b:3c:51:4c:c3:5a:aa:68:1f:07:c5:ae: bf:96:85:9e:25:51:bd:8d:a3:ff:aa:c3:8c:db:b4: f0:ce:89:da:ea:56:54:be:28:f0:05:37:f2:4d:44: 29:6d:64:5a:01:f1:b2:21:7a:39:65:ba:86:6d:3d: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CD:9E:9D:01:DB:4B:45:7B:F1:93:B6:49:59:D1:1F:BB:D5:33:28 X509v3 Authority Key Identifier: keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:78ec:2000::/36 Signature Algorithm: sha256WithRSAEncryption 2e:e1:c5:87:d3:b4:d4:d9:3a:4f:bf:5c:80:9a:da:bc:75:a2: 7b:35:08:8a:32:76:75:53:fb:1d:42:f3:a0:78:3a:34:f0:15: 72:38:32:6d:ef:69:e8:27:7c:0e:6d:2f:46:51:8a:4e:7d:0b: d9:9b:8b:cc:a8:76:e0:72:59:88:71:1c:36:38:8d:73:36:74: dd:d3:99:de:42:c4:b4:2d:77:54:91:3d:b1:6f:6e:10:72:f5: 6b:ee:15:ec:e9:e6:ff:07:5a:e3:8f:a6:ef:c2:c9:1a:37:98: 90:90:ed:df:88:d1:8f:4a:10:e8:53:79:90:39:72:b1:e0:a5: d4:0d:6a:f1:7f:3c:22:f9:98:e3:71:72:49:b7:4c:2d:6c:fb: 72:c3:62:89:a4:0b:53:f2:42:02:b7:2a:6a:72:5c:89:8a:0b: 31:31:99:7e:42:af:5b:f3:82:07:ab:76:7e:24:84:60:30:d0: eb:06:75:c5:57:e3:8a:e8:8d:91:0d:d1:fa:b8:5e:d1:60:83: 8f:fc:6b:db:f8:e2:51:38:07:85:6a:d7:32:b8:22:a8:66:fb: 29:86:84:c2:d0:27:4c:19:d5:4c:19:da:42:c4:d2:94:fc:6b: 07:44:4c:51:3d:d6:cc:8b:3b:7d:9d:98:93:13:81:f4:44:24: cb:e8:97:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUOYmbYVmuplsgS2Fa6Lys622MVwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFDQzg4QzdGRDQ5RUVCNDE2OUJDQzdGQzM2NkREQUQ3 NTBDMTQ3ODAeFw0yNTEyMTExMjUxMjFaFw0yNjEyMTAxMjU2MjFaMDMxMTAvBgNV BAMTKEFBQ0Q5RTlEMDFEQjRCNDU3QkYxOTNCNjQ5NTlEMTFGQkJENTMzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3S8CpAQwZFVXnp3Y2NGP3OkZ 9gT6yQ3xWe1kn00zYT4F71nfnX0Cf5dtIo5iTu6w4YcnKHKUoUtKIpuynllL1x6Y MbRro+bTVPbUeKiU7tZa/xObWfAiozCG7eXzSkbkGEzJnzGKJgftbcI6QaNwEqe1 okIpZAP4mhsMwB/ck32Y5a3rkP6x/0aOkQhgkzAU9RjXVwpx1+8XrdbUktCIiFah oC0gRoiYmoSJRuGBemlIrXjpqIdpz7ipOaiiXmbqzCb4hls8UUzDWqpoHwfFrr+W hZ4lUb2No/+qw4zbtPDOidrqVlS+KPAFN/JNRCltZFoB8bIhejlluoZtPfv9AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUqs2enQHbS0V78ZO2SVnRH7vVMygwHwYDVR0j BBgwFoAUocyIx/1J7rQWm8x/w2bdrXUMFHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFh N3UvMC9BMUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQ0M4OEM3RkQ0OUVFQjQx NjlCQ0M3RkMzNjZEREFENzUwQzE0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RmaFQ3akoyQ21ZOTRHRVZLeDhneW1TQ1A4NEhkUGs4VGtFU0VzWlpRYTd1LzAv MzIzODMwMzQzYTM3Mzg2NTYzM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzczMTMyMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEeOwgMA0GCSqGSIb3DQEBCwUA A4IBAQAu4cWH07TU2TpPv1yAmtq8daJ7NQiKMnZ1U/sdQvOgeDo08BVyODJt72no J3wObS9GUYpOfQvZm4vMqHbgclmIcRw2OI1zNnTd05neQsS0LXdUkT2xb24QcvVr 7hXs6eb/B1rjj6bvwskaN5iQkO3fiNGPShDoU3mQOXKx4KXUDWrxfzwi+ZjjcXJJ t0wtbPtyw2KJpAtT8kICtypqclyJigsxMZl+Qq9b84IHq3Z+JIRgMNDrBnXFV+OK 6I2RDdH6uF7RYIOP/Gvb+OJROAeFatcyuCKoZvsphoTC0CdMGdVMGdpCxNKU/GsH RExRPdbMizt9nZiTE4H0RCTL6JdO -----END CERTIFICATE-----Generated at Tue Dec 23 16:09:53 2025 by rpki-client