This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa File: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (raw, json) Hash identifier: aGhB8GwGGOw4fjLbwd2dHG8lWAcKkK2gTduDVziPQPU= Subject key identifier: DB:5E:92:BF:8B:5E:DA:15:CB:82:C5:9D:41:AC:C4:39:F2:6D:6B:50 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 4D0E277859AB9C8133CC17CAF1E9ACE7B6496F9C Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa Signing time: Fri 19 Dec 2025 20:31:09 +0000 ROA not before: Fri 19 Dec 2025 20:26:09 +0000 ROA not after: Fri 18 Dec 2026 20:31:09 +0000 asID: 61862 IP address blocks: 2804:1a7c::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0e:27:78:59:ab:9c:81:33:cc:17:ca:f1:e9:ac:e7:b6:49:6f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Dec 19 20:26:09 2025 GMT Not After : Dec 18 20:31:09 2026 GMT Subject: CN=DB5E92BF8B5EDA15CB82C59D41ACC439F26D6B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:dc:f0:4b:46:39:50:2e:f6:47:d5:42:08: cf:56:3c:cd:ac:7d:db:4b:05:cc:00:d0:f1:ba:a0: 6f:5b:70:b5:e1:bd:e5:0b:ea:af:79:76:fb:b7:70: 4d:9d:eb:20:22:ea:9c:f0:be:4b:91:61:b1:47:76: 75:6e:9b:68:d0:ce:72:17:2b:f1:62:1c:4e:1c:34: 43:92:5b:01:5e:99:dc:1d:da:d2:e1:0a:5c:d5:29: bd:f3:a6:e7:e7:74:79:13:e9:3f:37:35:5e:de:17: b6:88:d3:c5:37:a2:20:1b:69:07:7b:a6:f1:b7:0b: bc:f3:0f:67:12:1c:ce:cd:b0:42:8f:81:02:0f:48: a6:3e:61:1f:f5:9b:59:8c:94:9d:4a:4b:3f:55:ff: a8:4c:2a:b2:75:2d:8d:e8:2f:8f:de:b7:42:aa:0f: 23:a3:43:1b:f1:46:0b:cb:34:d9:7a:a8:ec:3c:39: 99:16:ba:58:9a:d5:8a:b1:5a:54:70:3e:34:34:79: 96:12:c6:34:96:ce:33:56:5f:33:49:84:db:9e:88: f3:bb:a9:28:71:f1:f2:b3:99:fb:65:54:03:92:26: 33:12:81:dc:71:60:b9:14:4f:19:a9:38:2a:3d:e0: 27:e8:81:37:d7:3e:a6:29:7b:d0:50:7e:0a:fd:e7: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5E:92:BF:8B:5E:DA:15:CB:82:C5:9D:41:AC:C4:39:F2:6D:6B:50 X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/323830343a316137633a3a2f33322d3334203d3e203631383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1a7c::/32 Signature Algorithm: sha256WithRSAEncryption 6d:b4:16:50:4e:24:d9:d3:38:b5:52:08:dc:50:e6:09:b1:56: 1f:e5:1c:f4:d6:ce:ac:c3:f1:46:19:3a:80:7c:b8:65:d8:53: 4c:8a:fd:4b:81:28:02:67:d4:80:5e:46:24:f2:58:e1:65:aa: f8:63:6d:12:ed:e7:96:b7:56:0c:64:36:0f:57:3f:dc:59:d9: ba:9e:9a:66:2d:0d:02:5e:4b:b6:6f:15:6e:8c:3d:4d:b0:30: f9:52:bd:13:43:97:dd:43:c7:da:bc:91:b9:79:68:56:5a:49: 94:4f:90:f6:d0:77:0e:d6:9f:a5:4a:61:0f:7a:d4:d5:4a:6d: 63:13:e8:dc:a9:64:57:c0:8a:0b:8e:71:97:d8:ba:b9:78:59: 22:22:b5:87:a0:98:a5:78:e5:32:51:a8:88:6b:5d:ef:6e:9b: b9:85:4d:a5:ba:7b:e7:19:da:c9:28:f2:2a:be:8e:ae:cf:20: 3a:c8:6f:87:bd:e9:44:71:82:c7:73:cc:f6:85:cc:6c:1e:7e: c4:8d:c0:52:05:b4:0f:62:52:a2:3f:f5:3e:80:ce:10:59:f7: 08:16:0b:8b:da:ae:5e:05:31:86:ee:72:89:34:c8:7c:cc:91: e8:e7:a0:0b:ee:d4:3e:c5:de:3e:30:67:f2:22:23:d5:02:9e: b6:dc:62:1a -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUTQ4neFmrnIEzzBfK8ems57ZJb5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTEyMTkyMDI2MDlaFw0yNjEyMTgyMDMxMDlaMDMxMTAvBgNV BAMTKERCNUU5MkJGOEI1RURBMTVDQjgyQzU5RDQxQUNDNDM5RjI2RDZCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSNzwS0Y5UC72R9VCCM9WPM2s fdtLBcwA0PG6oG9bcLXhveUL6q95dvu3cE2d6yAi6pzwvkuRYbFHdnVum2jQznIX K/FiHE4cNEOSWwFemdwd2tLhClzVKb3zpufndHkT6T83NV7eF7aI08U3oiAbaQd7 pvG3C7zzD2cSHM7NsEKPgQIPSKY+YR/1m1mMlJ1KSz9V/6hMKrJ1LY3oL4/et0Kq DyOjQxvxRgvLNNl6qOw8OZkWulia1YqxWlRwPjQ0eZYSxjSWzjNWXzNJhNueiPO7 qShx8fKzmftlVAOSJjMSgdxxYLkUTxmpOCo94CfogTfXPqYpe9BQfgr95+T3AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU216Sv4te2hXLgsWdQazEOfJta1AwHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T b2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNzLzAvMzIz ODMwMzQzYTMxNjEzNzYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzYzMTM4MzYz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgEGnwwDQYJKoZIhvcNAQELBQADggEBAG20FlBOJNnTOLVS CNxQ5gmxVh/lHPTWzqzD8UYZOoB8uGXYU0yK/UuBKAJn1IBeRiTyWOFlqvhjbRLt 55a3VgxkNg9XP9xZ2bqemmYtDQJeS7ZvFW6MPU2wMPlSvRNDl91Dx9q8kbl5aFZa SZRPkPbQdw7Wn6VKYQ961NVKbWMT6NypZFfAiguOcZfYurl4WSIitYegmKV45TJR qIhrXe9um7mFTaW6e+cZ2sko8iq+jq7PIDrIb4e96URxgsdzzPaFzGwefsSNwFIF tA9iUqI/9T6AzhBZ9wgWC4varl4FMYbucok0yHzMkejnoAvu1D7F3j4wZ/IiI9UC nrbcYho= -----END CERTIFICATE-----Generated at Wed Dec 24 00:33:34 2025 by rpki-client