This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/323830343a393530633a3a2f33322d313238203d3e20323734343935.roa File: 323830343a393530633a3a2f33322d313238203d3e20323734343935.roa (raw, json) Hash identifier: palxQt0TJRmonm6nkQBO8Vw/OhYY5tHXOZN4T88z8Qk= Subject key identifier: 2A:6E:8E:82:E4:6D:A3:26:95:E8:B8:40:D8:82:CE:E7:14:F5:3B:2D Certificate issuer: /CN=45A9D6A3E95D9881210149B7208CB8921A7716CB Certificate serial: 6E6741B7FCEABB2868110F77F63FBCCC351B0122 Authority key identifier: 45:A9:D6:A3:E9:5D:98:81:21:01:49:B7:20:8C:B8:92:1A:77:16:CB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/323830343a393530633a3a2f33322d313238203d3e20323734343935.roa Signing time: Tue 23 Dec 2025 15:18:33 +0000 ROA not before: Tue 23 Dec 2025 15:13:33 +0000 ROA not after: Tue 22 Dec 2026 15:18:33 +0000 asID: 274495 IP address blocks: 2804:950c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.crl rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 08:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:67:41:b7:fc:ea:bb:28:68:11:0f:77:f6:3f:bc:cc:35:1b:01:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A9D6A3E95D9881210149B7208CB8921A7716CB Validity Not Before: Dec 23 15:13:33 2025 GMT Not After : Dec 22 15:18:33 2026 GMT Subject: CN=2A6E8E82E46DA32695E8B840D882CEE714F53B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:33:37:4b:d1:08:7c:da:d9:0f:24:26:56: 8c:71:46:35:b5:e4:94:a7:74:a5:da:36:34:b3:c2: 8b:de:fd:0e:ad:18:df:4f:fb:38:81:aa:69:42:bf: 3a:ce:08:3d:5d:76:95:40:85:4a:4b:ae:b3:62:6d: 92:c4:c7:f8:0d:05:61:82:9a:43:80:65:24:4f:d6: eb:7e:d9:20:f0:bc:b2:77:d8:82:aa:37:c1:d4:27: c4:96:8b:16:d4:6d:3d:ea:52:fe:67:90:07:be:7b: 0b:07:84:cb:89:97:32:18:fa:69:04:6f:a7:e4:f1: dc:c7:08:68:ff:65:57:3c:3e:41:7b:77:7a:37:66: a0:5d:75:21:f1:1f:09:ee:97:61:3f:fd:58:97:be: ad:8e:52:81:ee:3c:b3:69:f2:58:93:cd:b9:c1:a4: 9a:fe:00:c5:48:4e:6d:d9:28:f5:de:83:16:3b:9f: 33:06:4c:90:fd:ee:89:33:01:ef:e7:e8:7a:fc:78: 1f:5e:eb:04:cd:33:99:c9:5a:2c:ed:aa:75:51:14: fa:0a:e3:49:c5:ef:ce:59:07:67:05:06:14:9d:17: 8e:e2:d7:f4:f2:98:99:67:c3:d3:c6:98:b3:5d:0b: 51:80:76:33:07:17:1e:2e:45:7d:be:9d:2d:97:09: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6E:8E:82:E4:6D:A3:26:95:E8:B8:40:D8:82:CE:E7:14:F5:3B:2D X509v3 Authority Key Identifier: keyid:45:A9:D6:A3:E9:5D:98:81:21:01:49:B7:20:8C:B8:92:1A:77:16:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/323830343a393530633a3a2f33322d313238203d3e20323734343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:950c::/32 Signature Algorithm: sha256WithRSAEncryption 00:b2:09:73:e3:b8:f6:57:3e:28:f0:43:57:55:43:1a:07:45: 40:09:d9:01:2e:29:80:61:97:ea:00:97:5b:9b:37:c5:f5:ce: f1:86:78:86:ec:e1:21:f2:18:f9:89:de:4b:5b:1a:93:20:9a: 2e:29:87:77:6a:75:cd:9d:1b:d3:dd:d3:2d:aa:ec:93:4c:e1: be:18:2c:b9:4b:73:8c:f7:d6:80:b4:c6:2b:b6:a4:7c:06:d4: 29:65:4e:a0:df:ef:cd:bf:da:36:2e:6f:c2:10:8a:bb:79:a5: 22:a0:07:8e:9d:eb:5e:64:e2:56:01:71:5e:99:76:ab:4c:2f: a8:f4:78:13:9e:8d:eb:13:87:bf:1d:1f:84:f5:05:4b:8e:54: 37:56:0c:b4:8f:2f:28:30:b0:39:f3:9f:83:81:25:cd:8a:e0: 43:f5:9a:23:63:a9:f3:50:47:ff:fd:e1:4e:6f:12:40:5e:01: a0:5f:b6:e1:fe:18:fc:5e:03:83:99:2b:9c:97:0d:c6:60:c0: 91:3b:7e:7a:5a:7b:5c:65:74:b1:53:3b:48:b8:f7:2b:d2:8d: b7:51:b9:ad:0c:9a:7b:40:6b:96:79:44:1b:a0:d4:e2:9a:12: 2e:68:b1:db:4c:7f:b4:be:95:87:82:23:7e:83:2e:ca:fd:94: 01:62:dd:4d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUbmdBt/zquyhoEQ939j+8zDUbASIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBOUQ2QTNFOTVEOTg4MTIxMDE0OUI3MjA4Q0I4OTIx QTc3MTZDQjAeFw0yNTEyMjMxNTEzMzNaFw0yNjEyMjIxNTE4MzNaMDMxMTAvBgNV BAMTKDJBNkU4RTgyRTQ2REEzMjY5NUU4Qjg0MEQ4ODJDRUU3MTRGNTNCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tDM3S9EIfNrZDyQmVoxxRjW1 5JSndKXaNjSzwove/Q6tGN9P+ziBqmlCvzrOCD1ddpVAhUpLrrNibZLEx/gNBWGC mkOAZSRP1ut+2SDwvLJ32IKqN8HUJ8SWixbUbT3qUv5nkAe+ewsHhMuJlzIY+mkE b6fk8dzHCGj/ZVc8PkF7d3o3ZqBddSHxHwnul2E//ViXvq2OUoHuPLNp8liTzbnB pJr+AMVITm3ZKPXegxY7nzMGTJD97okzAe/n6Hr8eB9e6wTNM5nJWiztqnVRFPoK 40nF785ZB2cFBhSdF47i1/TymJlnw9PGmLNdC1GAdjMHFx4uRX2+nS2XCTuJAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUKm6OguRtoyaV6LhA2ILO5xT1Oy0wHwYDVR0j BBgwFoAURanWo+ldmIEhAUm3IIy4khp3FsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlRTjF5UTNQVmY5aVVmTTJleFhOQ0hXZnBETGFVRWROTENVR3JSUkNz WWovMC80NUE5RDZBM0U5NUQ5ODgxMjEwMTQ5QjcyMDhDQjg5MjFBNzcxNkNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1QTlENkEzRTk1RDk4ODEy MTAxNDlCNzIwOENCODkyMUE3NzE2Q0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0o5UU4xeVEzUFZmOWlVZk0yZXhYTkNIV2ZwRExhVUVkTkxDVUdyUlJDc1lqLzAv MzIzODMwMzQzYTM5MzUzMDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzQzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBJUMMA0GCSqGSIb3DQEBCwUAA4IBAQAAsglz 47j2Vz4o8ENXVUMaB0VACdkBLimAYZfqAJdbmzfF9c7xhniG7OEh8hj5id5LWxqT IJouKYd3anXNnRvT3dMtquyTTOG+GCy5S3OM99aAtMYrtqR8BtQpZU6g3+/Nv9o2 Lm/CEIq7eaUioAeOneteZOJWAXFemXarTC+o9HgTno3rE4e/HR+E9QVLjlQ3Vgy0 jy8oMLA585+DgSXNiuBD9ZojY6nzUEf//eFObxJAXgGgX7bh/hj8XgODmSuclw3G YMCRO356WntcZXSxUztIuPcr0o23UbmtDJp7QGuWeUQboNTimhIuaLHbTH+0vpWH giN+gy7K/ZQBYt1N -----END CERTIFICATE-----Generated at Wed Dec 24 15:39:21 2025 by rpki-client