This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa File: 323830343a373432303a3a2f33322d3334203d3e20323730393630.roa (raw, json) Hash identifier: wuGHSqk43nJ9Olv9nW2OVd3ptBpriENkIJp4DF24wGE= Subject key identifier: 45:43:4E:7D:0A:3F:20:38:FA:01:D5:C0:9D:AF:95:FD:69:B6:0E:6F Certificate issuer: /CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5 Certificate serial: 0E38949B3E8A4144190E80EBDDF7DC61EBDBEE12 Authority key identifier: 0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer Subject info access: rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa Signing time: Fri 12 Dec 2025 15:08:08 +0000 ROA not before: Fri 12 Dec 2025 15:03:08 +0000 ROA not after: Fri 11 Dec 2026 15:08:08 +0000 asID: 270960 IP address blocks: 2804:7420::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.crl rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 20:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:38:94:9b:3e:8a:41:44:19:0e:80:eb:dd:f7:dc:61:eb:db:ee:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5 Validity Not Before: Dec 12 15:03:08 2025 GMT Not After : Dec 11 15:08:08 2026 GMT Subject: CN=45434E7D0A3F2038FA01D5C09DAF95FD69B60E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:fb:b0:5c:c9:80:d8:a8:6d:38:75:c5:6c: 49:ed:12:90:6d:18:92:52:00:03:c2:fb:49:1b:2b: dc:40:6f:39:20:6f:9f:ea:f4:7f:02:75:b8:fa:27: 61:ab:2e:0d:b0:c8:50:ad:1a:50:30:54:b2:fd:93: bf:73:a8:75:76:8b:0c:6d:58:da:14:bb:0c:bb:b0: f4:e1:0b:8b:f7:64:d1:56:82:a7:a7:3b:4c:8a:9b: 64:fa:f5:f2:2f:88:9e:27:1e:36:b0:81:8f:16:6e: 89:52:fa:5a:ca:78:73:8d:57:39:c3:c3:3b:7d:4a: 57:12:59:cc:80:b2:8a:b9:1b:9d:b6:af:24:3d:84: 49:a5:53:ac:6f:bb:02:15:bd:ae:ef:a9:a8:cd:e6: 71:fc:a4:37:59:9d:01:df:45:25:b6:00:9a:f9:e8: c1:f9:7e:1a:8c:df:8a:0d:30:c5:20:11:c6:7a:82: d6:f8:5c:3a:b2:13:48:93:57:1f:90:c7:7a:e8:a5: d9:b2:6f:9c:33:9b:40:5b:8c:5c:b4:ba:37:b1:b4: ef:a9:77:0f:09:a0:33:89:08:6b:84:1d:48:19:4b: a1:c9:ce:1f:d8:a5:ac:fe:2d:2a:7a:77:f8:5c:e9: 61:a3:8d:a8:fd:a4:8d:dc:d5:5f:dd:89:95:6b:83: dd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:43:4E:7D:0A:3F:20:38:FA:01:D5:C0:9D:AF:95:FD:69:B6:0E:6F X509v3 Authority Key Identifier: keyid:0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a3a2f33322d3334203d3e20323730393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7420::/32 Signature Algorithm: sha256WithRSAEncryption 24:9d:ea:4e:c7:f6:31:d0:83:d8:98:3c:f5:e3:b7:a2:9d:c0: f4:54:73:a2:6a:c7:0d:12:e1:49:92:5a:7e:36:81:43:6d:9d: 97:53:a2:28:0a:3e:1e:31:2e:a5:47:8b:fd:2a:7b:fc:c7:b3: 63:73:cf:a3:cc:3f:10:8f:29:87:71:04:9d:74:7f:69:95:59: 10:6d:67:a5:13:12:4e:14:69:1d:79:e9:f8:5a:5f:f0:14:ff: dc:74:19:7a:18:86:53:5d:5b:fa:83:8a:15:f1:2f:fa:b4:51: 3d:94:25:0d:0c:8d:4a:36:b8:9b:7f:21:3b:0a:d7:e5:3f:85: d4:05:29:ba:d8:8b:e4:41:da:c0:54:82:0b:a9:45:ea:bd:16: eb:44:2c:41:57:b3:4a:88:7a:a8:91:92:b7:89:93:7d:c6:f3: 49:91:e6:ac:0e:ef:ff:8e:29:b1:1a:66:a3:95:0b:4d:af:95: 49:3f:bd:3e:51:91:d1:97:b6:b7:ca:62:5c:70:64:19:fe:3b: 9f:ab:6b:ca:20:cf:31:83:83:be:9e:48:15:62:e1:98:63:a9: 93:b8:d2:18:ae:0f:58:e6:e3:1a:31:4c:fc:f1:41:02:d1:c2: 18:49:ba:63:ae:16:e8:81:17:04:7f:f7:ef:9b:68:b5:61:28: 05:7b:d4:f4 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUDjiUmz6KQUQZDoDr3ffcYevb7hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREN0JDRUZEQkE0NENERkE1MkUzQ0Y5M0I1MDdGRDM1 QjYzOENGNTAeFw0yNTEyMTIxNTAzMDhaFw0yNjEyMTExNTA4MDhaMDMxMTAvBgNV BAMTKDQ1NDM0RTdEMEEzRjIwMzhGQTAxRDVDMDlEQUY5NUZENjlCNjBFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/d/uwXMmA2KhtOHXFbEntEpBt GJJSAAPC+0kbK9xAbzkgb5/q9H8Cdbj6J2GrLg2wyFCtGlAwVLL9k79zqHV2iwxt WNoUuwy7sPThC4v3ZNFWgqenO0yKm2T69fIviJ4nHjawgY8WbolS+lrKeHONVznD wzt9SlcSWcyAsoq5G522ryQ9hEmlU6xvuwIVva7vqajN5nH8pDdZnQHfRSW2AJr5 6MH5fhqM34oNMMUgEcZ6gtb4XDqyE0iTVx+Qx3ropdmyb5wzm0BbjFy0ujextO+p dw8JoDOJCGuEHUgZS6HJzh/Ypaz+LSp6d/hc6WGjjaj9pI3c1V/diZVrg93rAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQURUNOfQo/IDj6AdXAna+V/Wm2Dm8wHwYDVR0j BBgwFoAUDde879ukTN+lLjz5O1B/01tjjPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmNkRGcyUnBxQ05GNk4zdmJEMzhqVlFlWWFzaXQ0V2VkYlpSTUpEb0pi c3EvMC8wREQ3QkNFRkRCQTQ0Q0RGQTUyRTNDRjkzQjUwN0ZEMzVCNjM4Q0Y1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDdCQ0VGREJBNDRDREZB NTJFM0NGOTNCNTA3RkQzNUI2MzhDRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZjZERnMlJwcUNORjZOM3ZiRDM4alZRZVlhc2l0NFdlZGJaUk1KRG9KYnNxLzAv MzIzODMwMzQzYTM3MzQzMjMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMw MzkzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR0IDANBgkqhkiG9w0BAQsFAAOCAQEAJJ3qTsf2 MdCD2Jg89eO3op3A9FRzomrHDRLhSZJafjaBQ22dl1OiKAo+HjEupUeL/Sp7/Mez Y3PPo8w/EI8ph3EEnXR/aZVZEG1npRMSThRpHXnp+Fpf8BT/3HQZehiGU11b+oOK FfEv+rRRPZQlDQyNSja4m38hOwrX5T+F1AUputiL5EHawFSCC6lF6r0W60QsQVez Soh6qJGSt4mTfcbzSZHmrA7v/44psRpmo5ULTa+VST+9PlGR0Ze2t8piXHBkGf47 n6tryiDPMYODvp5IFWLhmGOpk7jSGK4PWObjGjFM/PFBAtHCGEm6Y64W6IEXBH/3 75totWEoBXvU9A== -----END CERTIFICATE-----Generated at Fri Dec 19 10:23:48 2025 by rpki-client