This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa File: 323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa (raw, json) Hash identifier: cyDYOWCuaCF6n9Lt1rr6Sqi528Elrn2zNkIoqduRwlE= Subject key identifier: A3:68:45:63:3C:A0:1A:15:CC:6F:E3:DA:3F:8B:42:C9:16:53:BF:BD Certificate issuer: /CN=171FB2622757FE5D9107ADC119D88C8439A742D9 Certificate serial: 2EA8DCC66A6C04FA6A43CB5E8133925C3CB2210F Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa Signing time: Sat 13 Dec 2025 17:48:54 +0000 ROA not before: Sat 13 Dec 2025 17:43:54 +0000 ROA not after: Sat 12 Dec 2026 17:48:54 +0000 asID: 61721 IP address blocks: 2801:80:c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 13:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a8:dc:c6:6a:6c:04:fa:6a:43:cb:5e:81:33:92:5c:3c:b2:21:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9 Validity Not Before: Dec 13 17:43:54 2025 GMT Not After : Dec 12 17:48:54 2026 GMT Subject: CN=A36845633CA01A15CC6FE3DA3F8B42C91653BFBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:18:41:af:6b:f3:1b:32:9a:26:cd:f0:c1: 7b:b4:a7:1e:0e:da:75:10:2b:98:ef:5b:33:6d:2b: d6:f8:5e:b8:02:e3:3b:20:01:20:a8:fc:63:c1:96: fc:d8:81:3a:2b:76:8a:ea:b4:22:45:36:20:1a:1c: 7c:fd:26:8e:9a:de:b2:f9:4d:31:7b:be:83:df:77: 47:fb:ea:b6:8d:cb:80:66:ae:52:33:5e:b4:0d:63: da:3e:46:73:de:fd:02:52:fc:b2:67:d8:88:c5:de: 17:09:20:d3:3e:9e:86:9b:df:f6:aa:b5:61:7c:47: 52:ce:c0:9e:48:58:dd:84:4e:07:12:07:60:fe:30: f4:c1:a8:d0:ee:57:d2:67:84:9b:6d:50:2c:2e:dc: 99:f5:09:42:89:00:42:3d:f9:f7:3c:9f:07:f5:fc: 50:60:a1:7a:c0:8b:fe:3a:7e:f6:90:fd:28:a7:1c: a3:74:d0:b4:c2:ba:a9:05:37:6a:6e:12:95:64:39: f5:73:58:b6:66:bc:0d:4b:9f:2e:16:f3:0b:9c:d4: 0b:25:f6:28:ea:1b:2b:8c:66:6e:3b:30:7d:2f:d9: d5:e8:a3:33:f1:fe:a2:ef:2a:de:10:85:ad:3c:7e: 03:f7:c5:1d:5b:f5:b0:b5:09:f5:4d:6c:43:8c:61: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:68:45:63:3C:A0:1A:15:CC:6F:E3:DA:3F:8B:42:C9:16:53:BF:BD X509v3 Authority Key Identifier: keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:80:c30::/48 Signature Algorithm: sha256WithRSAEncryption 11:3b:12:d8:e8:90:c3:8a:2a:4c:8b:60:6d:b6:ac:eb:0a:6a: c3:14:f5:98:41:d7:e8:e0:02:92:b0:6d:7f:e5:52:25:c2:12: ee:38:7d:60:79:8e:78:54:db:f9:3b:d4:a3:0c:a7:3a:a9:8c: dc:8a:49:f9:96:71:0e:ea:cc:f3:28:87:81:62:e3:17:73:32: 26:2a:ad:86:b3:5d:f2:63:af:c0:ef:66:d6:44:0b:c7:af:7b: 83:43:0c:33:7a:12:64:75:c1:b3:5d:31:58:ab:ff:79:de:bd: 60:a2:20:63:66:78:14:88:46:e0:57:00:dc:10:10:4f:30:bf: 2b:b6:61:6f:08:d8:d1:50:76:13:e8:3b:b4:cd:c1:5c:62:d6: 44:a3:57:89:6b:8f:3f:05:3c:89:0f:d8:07:8e:cc:32:79:28: 63:37:a6:9f:7b:50:51:29:57:ab:5a:67:8a:92:eb:19:aa:0e: d6:5f:42:f1:e0:97:f8:ed:50:f3:ce:c0:22:41:0e:8d:90:d3: 3f:bf:c0:f6:fa:5f:26:d1:87:76:f4:4e:61:13:5b:bb:c9:34: 44:bb:6b:d9:88:a6:1a:6a:13:92:15:58:c5:6c:3a:86:3c:38: ca:20:97:e3:a1:08:2f:ec:e9:8a:5f:10:48:47:ba:5c:38:4c: c4:d5:a1:e1 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIULqjcxmpsBPpqQ8tegTOSXDyyIQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcxRkIyNjIyNzU3RkU1RDkxMDdBREMxMTlEODhDODQz OUE3NDJEOTAeFw0yNTEyMTMxNzQzNTRaFw0yNjEyMTIxNzQ4NTRaMDMxMTAvBgNV BAMTKEEzNjg0NTYzM0NBMDFBMTVDQzZGRTNEQTNGOEI0MkM5MTY1M0JGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV1RhBr2vzGzKaJs3wwXu0px4O 2nUQK5jvWzNtK9b4XrgC4zsgASCo/GPBlvzYgTordorqtCJFNiAaHHz9Jo6a3rL5 TTF7voPfd0f76raNy4BmrlIzXrQNY9o+RnPe/QJS/LJn2IjF3hcJINM+noab3/aq tWF8R1LOwJ5IWN2ETgcSB2D+MPTBqNDuV9JnhJttUCwu3Jn1CUKJAEI9+fc8nwf1 /FBgoXrAi/46fvaQ/SinHKN00LTCuqkFN2puEpVkOfVzWLZmvA1Lny4W8wuc1Asl 9ijqGyuMZm47MH0v2dXoozPx/qLvKt4Qha08fgP3xR1b9bC1CfVNbEOMYV8XAgMB AAGjggJUMIICUDAdBgNVHQ4EFgQUo2hFYzygGhXMb+PaP4tCyRZTv70wHwYDVR0j BBgwFoAUFx+yYidX/l2RB63BGdiMhDmnQtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn MVcvMC8xNzFGQjI2MjI3NTdGRTVEOTEwN0FEQzExOUQ4OEM4NDM5QTc0MkQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MUZCMjYyMjc1N0ZFNUQ5 MTA3QURDMTE5RDg4Qzg0MzlBNzQyRDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv MzIzODMwMzEzYTM4MzAzYTYzMzMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2 MzEzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAoAQCADDAwDQYJKoZIhvcNAQELBQADggEBABE7 EtjokMOKKkyLYG22rOsKasMU9ZhB1+jgApKwbX/lUiXCEu44fWB5jnhU2/k71KMM pzqpjNyKSfmWcQ7qzPMoh4Fi4xdzMiYqrYazXfJjr8DvZtZEC8eve4NDDDN6EmR1 wbNdMVir/3nevWCiIGNmeBSIRuBXANwQEE8wvyu2YW8I2NFQdhPoO7TNwVxi1kSj V4lrjz8FPIkP2AeOzDJ5KGM3pp97UFEpV6taZ4qS6xmqDtZfQvHgl/jtUPPOwCJB Do2Q0z+/wPb6XybRh3b0TmETW7vJNES7a9mIphpqE5IVWMVsOoY8OMogl+OhCC/s 6YpfEEhHulw4TMTVoeE= -----END CERTIFICATE-----Generated at Sun Dec 21 23:01:11 2025 by rpki-client