This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a3a2f33322d3332203d3e20323731323734.roa File: 323830343a373865633a3a2f33322d3332203d3e20323731323734.roa (raw, json) Hash identifier: foo6vsCunQYOdKozzV0vt6s5iK7OlpItZGBDpzbGTBA= Subject key identifier: A8:06:2E:04:2B:79:54:70:A7:7B:7A:F4:7E:80:DA:DD:14:86:DA:4D Certificate issuer: /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Certificate serial: 6F87E77782F28DCC3CBA7BB1155A961B9C6240CB Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject info access: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a3a2f33322d3332203d3e20323731323734.roa Signing time: Thu 11 Dec 2025 12:56:21 +0000 ROA not before: Thu 11 Dec 2025 12:51:21 +0000 ROA not after: Thu 10 Dec 2026 12:56:21 +0000 asID: 271274 IP address blocks: 2804:78ec::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 13:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:87:e7:77:82:f2:8d:cc:3c:ba:7b:b1:15:5a:96:1b:9c:62:40:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Validity Not Before: Dec 11 12:51:21 2025 GMT Not After : Dec 10 12:56:21 2026 GMT Subject: CN=A8062E042B795470A77B7AF47E80DADD1486DA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:52:c2:b4:1e:ae:d5:ca:d7:70:c9:f5:e6:5d: 88:46:88:e3:46:f8:fd:c0:20:13:28:a0:41:ca:53: 26:ef:f3:e9:ab:79:f4:d4:2d:81:46:cf:bc:5b:ca: 3b:ea:36:32:5d:7d:0b:a8:44:79:06:36:d8:f2:b7: c0:16:0d:3f:72:37:0e:85:b0:da:6e:91:3a:4a:61: a2:0b:e7:3c:38:85:7f:ef:bc:7a:84:43:fe:f6:33: 03:45:53:89:d0:37:d4:96:1f:93:59:4f:d4:ca:01: f9:fb:00:15:c2:dd:0b:a6:3e:dd:f5:87:54:d2:f4: 79:f6:64:7e:9e:a9:be:95:b7:cf:01:3d:28:09:a9: 52:75:1d:aa:31:25:f3:e4:bc:35:6a:bb:41:ca:be: 0d:cb:9c:cd:db:cb:83:4a:e9:d8:d1:3d:9d:fa:f6: 3d:38:17:81:ea:48:24:1f:23:f3:48:18:d7:be:79: 9b:6f:18:b0:e5:75:96:99:57:fa:61:c8:25:2e:70: c8:7a:1f:66:62:90:91:38:a1:3e:67:a8:0f:ec:7c: 58:c5:ee:30:7e:8e:ce:b0:43:7b:cb:18:46:66:5e: ba:d1:f0:dd:4a:ec:5f:a1:eb:ad:4b:ee:33:d8:21: af:11:c4:86:f7:28:64:b0:9e:e7:3b:4f:29:5c:c3: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:2E:04:2B:79:54:70:A7:7B:7A:F4:7E:80:DA:DD:14:86:DA:4D X509v3 Authority Key Identifier: keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a3a2f33322d3332203d3e20323731323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:78ec::/32 Signature Algorithm: sha256WithRSAEncryption 86:f8:de:38:9a:35:aa:fa:65:bb:30:bf:fa:ce:c6:02:40:a2: 2b:cd:dd:a1:87:07:a4:b5:04:bc:5e:06:44:95:21:23:79:a0: 87:08:90:70:fc:86:31:fe:91:35:8d:0c:5d:d7:d3:3f:d4:c0: 1a:41:1f:75:15:99:f9:3d:c9:4b:51:ba:a7:54:02:dd:a2:d7: 7a:19:53:ae:1c:6e:b6:d5:2a:0d:2b:32:4d:64:71:98:04:8a: a5:55:22:fd:5d:f1:a4:22:c7:27:68:41:5f:05:bb:b7:b0:3f: 11:99:d7:16:ff:a3:e1:22:84:ba:8f:1f:ae:fe:1d:4d:f5:c9: 62:dd:5a:ed:a8:ce:5c:56:97:9e:a5:53:c7:42:86:44:86:be: 73:d4:af:fd:37:85:bf:53:e7:8b:68:7f:d3:10:7f:93:78:47: 5a:b2:02:6a:0f:c2:a9:b7:b9:c7:11:91:92:01:a9:be:6e:0e: bf:83:8d:b0:b0:19:db:05:ab:88:86:60:a2:e7:4d:59:21:88: fc:78:2c:5a:53:eb:90:ec:cf:d9:97:69:4a:f2:89:bb:be:f3: 0c:75:ae:0e:7e:7e:69:3e:dc:9f:30:29:8a:5c:b5:59:f5:c9: e7:36:76:68:fa:77:d7:a8:83:b6:7c:b7:dd:a9:3c:51:ad:7e: 35:61:a1:23 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUb4fnd4Lyjcw8unuxFVqWG5xiQMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFDQzg4QzdGRDQ5RUVCNDE2OUJDQzdGQzM2NkREQUQ3 NTBDMTQ3ODAeFw0yNTEyMTExMjUxMjFaFw0yNjEyMTAxMjU2MjFaMDMxMTAvBgNV BAMTKEE4MDYyRTA0MkI3OTU0NzBBNzdCN0FGNDdFODBEQUREMTQ4NkRBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgUsK0Hq7VytdwyfXmXYhGiONG +P3AIBMooEHKUybv8+mrefTULYFGz7xbyjvqNjJdfQuoRHkGNtjyt8AWDT9yNw6F sNpukTpKYaIL5zw4hX/vvHqEQ/72MwNFU4nQN9SWH5NZT9TKAfn7ABXC3QumPt31 h1TS9Hn2ZH6eqb6Vt88BPSgJqVJ1HaoxJfPkvDVqu0HKvg3LnM3by4NK6djRPZ36 9j04F4HqSCQfI/NIGNe+eZtvGLDldZaZV/phyCUucMh6H2ZikJE4oT5nqA/sfFjF 7jB+js6wQ3vLGEZmXrrR8N1K7F+h661L7jPYIa8RxIb3KGSwnuc7Tylcw2rvAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUqAYuBCt5VHCne3r0foDa3RSG2k0wHwYDVR0j BBgwFoAUocyIx/1J7rQWm8x/w2bdrXUMFHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFh N3UvMC9BMUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQ0M4OEM3RkQ0OUVFQjQx NjlCQ0M3RkMzNjZEREFENzUwQzE0NzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RmaFQ3akoyQ21ZOTRHRVZLeDhneW1TQ1A4NEhkUGs4VGtFU0VzWlpRYTd1LzAv MzIzODMwMzQzYTM3Mzg2NTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx MzIzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR47DANBgkqhkiG9w0BAQsFAAOCAQEAhvjeOJo1 qvpluzC/+s7GAkCiK83doYcHpLUEvF4GRJUhI3mghwiQcPyGMf6RNY0MXdfTP9TA GkEfdRWZ+T3JS1G6p1QC3aLXehlTrhxuttUqDSsyTWRxmASKpVUi/V3xpCLHJ2hB XwW7t7A/EZnXFv+j4SKEuo8frv4dTfXJYt1a7ajOXFaXnqVTx0KGRIa+c9Sv/TeF v1Pni2h/0xB/k3hHWrICag/Cqbe5xxGRkgGpvm4Ov4ONsLAZ2wWriIZgoudNWSGI /HgsWlPrkOzP2ZdpSvKJu77zDHWuDn5+aT7cnzApily1WfXJ5zZ2aPp316iDtny3 3ak8Ua1+NWGhIw== -----END CERTIFICATE-----Generated at Tue Dec 23 14:55:58 2025 by rpki-client