This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d313238203d3e20323638353634.roa File: 323830343a353331633a3a2f33322d313238203d3e20323638353634.roa (raw, json) Hash identifier: bNsL0JvKIHE0dUPHSmRlfsWrDsw7cnUmPdnKroyAhY8= Subject key identifier: 9F:A6:D1:DD:0D:31:50:B5:0E:01:2E:EC:D6:D5:43:E0:14:35:A9:86 Certificate issuer: /CN=1F633439ED8763E6BDFD397FD0E522BF4DF9606F Certificate serial: 32E989C752062D57E4914308B4957EDF3C18F564 Authority key identifier: 1F:63:34:39:ED:87:63:E6:BD:FD:39:7F:D0:E5:22:BF:4D:F9:60:6F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F633439ED8763E6BDFD397FD0E522BF4DF9606F.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d313238203d3e20323638353634.roa Signing time: Wed 10 Dec 2025 11:55:40 +0000 ROA not before: Wed 10 Dec 2025 11:50:40 +0000 ROA not after: Wed 09 Dec 2026 11:55:40 +0000 asID: 268564 IP address blocks: 2804:531c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/1F633439ED8763E6BDFD397FD0E522BF4DF9606F.crl rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/1F633439ED8763E6BDFD397FD0E522BF4DF9606F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F633439ED8763E6BDFD397FD0E522BF4DF9606F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 20:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e9:89:c7:52:06:2d:57:e4:91:43:08:b4:95:7e:df:3c:18:f5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F633439ED8763E6BDFD397FD0E522BF4DF9606F Validity Not Before: Dec 10 11:50:40 2025 GMT Not After : Dec 9 11:55:40 2026 GMT Subject: CN=9FA6D1DD0D3150B50E012EECD6D543E01435A986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9c:c2:e5:19:49:71:67:f4:98:d4:4a:0f:15: da:80:0a:4d:1b:b4:ab:7c:4a:42:b7:05:16:80:36: 33:3e:73:16:b6:54:c0:06:cf:62:07:5d:11:38:12: 3d:3f:ae:79:37:91:56:bf:4e:8f:7d:0c:c1:fc:f5: 7c:73:63:cf:be:00:73:bd:5b:3e:a8:b0:ac:27:fa: 72:3b:46:ce:14:6d:f7:cb:ef:73:cf:49:6c:cf:00: c7:e6:c2:5e:e0:f6:f5:9d:ed:df:93:e2:5c:30:9a: 95:ef:16:f2:0b:d7:d2:5d:6f:05:ca:c9:26:e0:b1: 8c:21:09:3a:35:0f:6e:56:77:bf:ad:5d:d9:27:8b: 88:a8:e7:a7:5b:c5:32:2b:83:6e:de:63:ad:d4:26: 45:de:55:e4:d8:c4:47:5a:34:08:a8:bc:1f:3b:da: c1:3e:0a:6d:82:ca:2f:ba:40:3a:75:1f:d2:06:6e: 5c:08:d8:da:4a:89:52:3b:fb:ef:41:34:d4:e5:bc: f9:50:13:d2:1d:46:af:79:2a:ee:9e:fd:58:6d:30: 52:6e:63:25:f9:7a:16:ce:e8:dc:aa:09:13:d1:c3: 7d:70:86:a0:82:a3:18:ce:ac:21:6a:b9:22:15:00: dd:0f:6f:20:e2:7f:79:2f:09:cc:6d:56:ae:eb:05: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A6:D1:DD:0D:31:50:B5:0E:01:2E:EC:D6:D5:43:E0:14:35:A9:86 X509v3 Authority Key Identifier: keyid:1F:63:34:39:ED:87:63:E6:BD:FD:39:7F:D0:E5:22:BF:4D:F9:60:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/1F633439ED8763E6BDFD397FD0E522BF4DF9606F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F633439ED8763E6BDFD397FD0E522BF4DF9606F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d313238203d3e20323638353634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:531c::/32 Signature Algorithm: sha256WithRSAEncryption 59:09:3f:fd:dd:1e:d2:9e:39:a4:4f:20:92:8c:e2:1d:cf:10: 97:cf:5b:28:f8:2b:cb:86:32:20:e9:1f:56:05:50:74:8f:26: 3d:74:75:86:27:f4:a4:74:e0:25:7d:39:16:90:a1:fe:ff:c6: dc:c1:5e:25:4c:5b:3b:06:f2:1a:05:c3:16:34:4a:82:f3:9a: aa:6d:f6:6e:b2:b7:91:ac:eb:57:b6:c1:3d:ea:ac:0e:c4:6e: 8e:53:b7:d4:fb:00:e2:bf:8f:ea:a4:45:4e:69:13:49:79:de: fc:e0:e7:fa:e9:10:2c:e7:51:3e:2d:eb:f9:b5:f7:0a:ba:fd: 1e:f8:47:f7:21:2c:e4:8c:11:82:44:75:28:60:8a:a0:b6:0d: b9:25:6e:aa:69:05:23:f9:cd:c2:95:1e:01:14:1d:5b:17:04: 5f:d7:c2:30:11:5b:c2:26:c5:2d:c6:17:63:25:05:d0:d1:12: dd:30:0e:97:ab:4d:17:e4:33:cf:82:83:f4:1d:6f:4c:bb:b3: d6:5c:49:6d:95:9c:52:52:64:6b:3d:d4:61:b4:86:3d:cf:a5: 74:95:86:aa:94:ba:85:f0:54:3e:0d:73:74:a8:81:88:12:dd: 36:a6:6e:4d:dc:48:69:77:0f:2c:ce:f2:d3:b7:79:97:29:45: ef:e5:1d:50 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUMumJx1IGLVfkkUMItJV+3zwY9WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MzM0MzlFRDg3NjNFNkJERkQzOTdGRDBFNTIyQkY0 REY5NjA2RjAeFw0yNTEyMTAxMTUwNDBaFw0yNjEyMDkxMTU1NDBaMDMxMTAvBgNV BAMTKDlGQTZEMUREMEQzMTUwQjUwRTAxMkVFQ0Q2RDU0M0UwMTQzNUE5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBnMLlGUlxZ/SY1EoPFdqACk0b tKt8SkK3BRaANjM+cxa2VMAGz2IHXRE4Ej0/rnk3kVa/To99DMH89XxzY8++AHO9 Wz6osKwn+nI7Rs4UbffL73PPSWzPAMfmwl7g9vWd7d+T4lwwmpXvFvIL19JdbwXK ySbgsYwhCTo1D25Wd7+tXdkni4io56dbxTIrg27eY63UJkXeVeTYxEdaNAiovB87 2sE+Cm2Cyi+6QDp1H9IGblwI2NpKiVI7++9BNNTlvPlQE9IdRq95Ku6e/VhtMFJu YyX5ehbO6NyqCRPRw31whqCCoxjOrCFquSIVAN0PbyDif3kvCcxtVq7rBROrAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUn6bR3Q0xULUOAS7s1tVD4BQ1qYYwHwYDVR0j BBgwFoAUH2M0Oe2HY+a9/Tl/0OUiv035YG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo YW4vMC8xRjYzMzQzOUVEODc2M0U2QkRGRDM5N0ZEMEU1MjJCRjRERjk2MDZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNjMzNDM5RUQ4NzYzRTZC REZEMzk3RkQwRTUyMkJGNERGOTYwNkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0g0TFhVY2RZU2Q2N2k3b0N5SnBWVEhVMWZ5QjU5SkttaHU5MlRqcDFnaGFuLzAv MzIzODMwMzQzYTM1MzMzMTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzgzNTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBFMcMA0GCSqGSIb3DQEBCwUAA4IBAQBZCT/9 3R7SnjmkTyCSjOIdzxCXz1so+CvLhjIg6R9WBVB0jyY9dHWGJ/SkdOAlfTkWkKH+ /8bcwV4lTFs7BvIaBcMWNEqC85qqbfZusreRrOtXtsE96qwOxG6OU7fU+wDiv4/q pEVOaRNJed784Of66RAs51E+Lev5tfcKuv0e+Ef3ISzkjBGCRHUoYIqgtg25JW6q aQUj+c3ClR4BFB1bFwRf18IwEVvCJsUtxhdjJQXQ0RLdMA6Xq00X5DPPgoP0HW9M u7PWXEltlZxSUmRrPdRhtIY9z6V0lYaqlLqF8FQ+DXN0qIGIEt02pm5N3Ehpdw8s zvLTt3mXKUXv5R1Q -----END CERTIFICATE-----Generated at Fri Dec 19 11:02:26 2025 by rpki-client