This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/323830343a6139383a3a2f33322d3334203d3e203532383936.roa File: 323830343a6139383a3a2f33322d3334203d3e203532383936.roa (raw, json) Hash identifier: VtD6hZOL35jC8V/BCtRc/pc8AjiZhL4UZT6KYVB/RGo= Subject key identifier: D1:D8:F8:D7:1F:A6:2A:AD:14:BB:40:78:C3:12:EE:0C:DD:0A:59:C1 Certificate issuer: /CN=B171168B147A39B40BADE73A49290C2ACE3D34C9 Certificate serial: 6F02547456A08F49960DBDD2B7F003B6FFCEE643 Authority key identifier: B1:71:16:8B:14:7A:39:B4:0B:AD:E7:3A:49:29:0C:2A:CE:3D:34:C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer Subject info access: rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/323830343a6139383a3a2f33322d3334203d3e203532383936.roa Signing time: Tue 23 Dec 2025 20:55:12 +0000 ROA not before: Tue 23 Dec 2025 20:50:12 +0000 ROA not after: Tue 22 Dec 2026 20:55:12 +0000 asID: 52896 IP address blocks: 2804:a98::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.crl rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 16:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:02:54:74:56:a0:8f:49:96:0d:bd:d2:b7:f0:03:b6:ff:ce:e6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B171168B147A39B40BADE73A49290C2ACE3D34C9 Validity Not Before: Dec 23 20:50:12 2025 GMT Not After : Dec 22 20:55:12 2026 GMT Subject: CN=D1D8F8D71FA62AAD14BB4078C312EE0CDD0A59C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:60:f9:b6:2f:85:6f:13:e5:ed:5e:fe:5a: 61:22:1e:80:ae:a0:f1:4a:b3:c4:f8:ec:82:38:df: da:9a:9e:21:17:75:2e:19:32:a5:b4:ee:e0:db:ef: 2a:00:66:44:02:8f:0e:2b:02:9a:b4:35:39:02:d6: 6e:1c:2b:df:b7:fb:95:f4:d1:65:9d:46:a8:b0:4b: 97:fe:57:46:d7:0e:0d:3c:11:66:1a:be:f5:e7:6a: b9:55:84:f5:26:17:e8:0d:bb:9a:fb:51:da:2c:ad: 6e:ee:15:d1:94:88:23:1c:2d:35:ef:b2:ee:de:e5: 37:ce:d6:13:bf:db:52:ca:73:d4:ea:6e:35:02:ac: ab:e5:9b:ed:3e:36:02:73:28:06:bc:11:44:ee:1d: 82:e6:61:56:1c:b8:b8:84:bd:4c:ee:a4:0a:5d:2c: 15:5f:ab:8e:96:9c:56:04:b1:52:06:bb:d7:a6:2a: a7:20:87:a7:87:81:f3:ad:3d:8a:de:33:21:e3:7c: 0c:a2:4e:1f:f4:7f:17:80:25:d3:be:4a:6c:5a:03: df:e9:dc:53:13:e5:6d:52:59:c0:e1:05:b5:94:0c: d4:f7:1b:8d:bf:a3:db:3b:e0:0c:98:22:92:0c:ab: 1e:40:44:e9:92:63:a3:e7:10:8c:66:94:f8:99:64: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D8:F8:D7:1F:A6:2A:AD:14:BB:40:78:C3:12:EE:0C:DD:0A:59:C1 X509v3 Authority Key Identifier: keyid:B1:71:16:8B:14:7A:39:B4:0B:AD:E7:3A:49:29:0C:2A:CE:3D:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/323830343a6139383a3a2f33322d3334203d3e203532383936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:a98::/32 Signature Algorithm: sha256WithRSAEncryption 04:c4:d4:91:01:b8:b5:de:e0:01:8f:9e:d1:c8:d3:b5:30:3f: 30:b5:81:c1:bb:35:99:9c:96:73:b7:2c:d6:9a:1d:21:8b:db: fa:13:bd:db:54:87:79:3b:a6:31:44:42:bd:a6:26:09:20:36: b4:e9:3f:09:dd:1a:39:d7:4e:f4:62:5c:d3:0a:a6:9a:f9:6c: 82:e0:62:44:24:5b:69:d9:21:79:38:82:85:7c:b0:ad:3a:52: e8:92:20:a6:44:f4:1b:f3:3f:77:7a:5f:05:3f:79:9b:79:6f: aa:fd:a2:3d:53:21:03:d1:48:71:c1:e6:d2:ed:d7:08:5d:ad: 44:c5:86:ac:6a:9d:4a:e6:c3:ff:a3:97:6c:2b:09:b4:56:ef: bd:77:7b:c1:aa:21:e9:d4:72:94:85:59:70:1d:21:e0:42:21: ce:e5:c0:ed:2b:f3:a6:ff:d9:8a:b2:95:53:73:a8:56:f0:ef: 8b:7f:84:fc:83:44:54:65:b7:f2:76:14:ae:38:b9:fc:e1:d9: 69:94:e3:e8:3d:45:9d:11:13:18:fe:03:b7:56:44:01:39:e3: fa:08:6d:fa:dd:3d:f5:e8:e0:6b:d8:29:06:c6:28:68:59:4b: 37:10:eb:b7:1f:96:b4:4b:27:35:15:17:7f:cc:64:f2:77:9e: 90:f7:cb:c4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUbwJUdFagj0mWDb3St/ADtv/O5kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3MTE2OEIxNDdBMzlCNDBCQURFNzNBNDkyOTBDMkFD RTNEMzRDOTAeFw0yNTEyMjMyMDUwMTJaFw0yNjEyMjIyMDU1MTJaMDMxMTAvBgNV BAMTKEQxRDhGOEQ3MUZBNjJBQUQxNEJCNDA3OEMzMTJFRTBDREQwQTU5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPs2D5ti+FbxPl7V7+WmEiHoCu oPFKs8T47II439qaniEXdS4ZMqW07uDb7yoAZkQCjw4rApq0NTkC1m4cK9+3+5X0 0WWdRqiwS5f+V0bXDg08EWYavvXnarlVhPUmF+gNu5r7UdosrW7uFdGUiCMcLTXv su7e5TfO1hO/21LKc9TqbjUCrKvlm+0+NgJzKAa8EUTuHYLmYVYcuLiEvUzupApd LBVfq46WnFYEsVIGu9emKqcgh6eHgfOtPYreMyHjfAyiTh/0fxeAJdO+SmxaA9/p 3FMT5W1SWcDhBbWUDNT3G42/o9s74AyYIpIMqx5AROmSY6PnEIxmlPiZZHSLAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU0dj41x+mKq0Uu0B4wxLuDN0KWcEwHwYDVR0j BBgwFoAUsXEWixR6ObQLrec6SSkMKs49NMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1ZGSDFvWkFmQ281V1N0a29mdVhXNlhETlh6YjVDOWdXbWJlZTk3akpG cnYvMC9CMTcxMTY4QjE0N0EzOUI0MEJBREU3M0E0OTI5MEMyQUNFM0QzNEM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxNzExNjhCMTQ3QTM5QjQw QkFERTczQTQ5MjkwQzJBQ0UzRDM0QzkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dWRkgxb1pBZkNvNVdTdGtvZnVYVzZYRE5YemI1QzlnV21iZWU5N2pKRnJ2LzAv MzIzODMwMzQzYTYxMzkzODNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDM1MzIzODM5 MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAqYMA0GCSqGSIb3DQEBCwUAA4IBAQAExNSRAbi13uAB j57RyNO1MD8wtYHBuzWZnJZztyzWmh0hi9v6E73bVId5O6YxREK9piYJIDa06T8J 3Ro51070YlzTCqaa+WyC4GJEJFtp2SF5OIKFfLCtOlLokiCmRPQb8z93el8FP3mb eW+q/aI9UyED0UhxwebS7dcIXa1ExYasap1K5sP/o5dsKwm0Vu+9d3vBqiHp1HKU hVlwHSHgQiHO5cDtK/Om/9mKspVTc6hW8O+Lf4T8g0RUZbfydhSuOLn84dlplOPo PUWdERMY/gO3VkQBOeP6CG363T316OBr2CkGxihoWUs3EOu3H5a0Syc1FRd/zGTy d56Q98vE -----END CERTIFICATE-----Generated at Wed Dec 24 19:23:32 2025 by rpki-client