This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33322d3332203d3e203532383338.roa File: 323830343a6264383a3a2f33322d3332203d3e203532383338.roa (raw, json) Hash identifier: uP0EKAARdlWmkDETBRsYsppAi7I5Og/Ba3+XHO85UIk= Subject key identifier: 27:2E:A0:5B:F3:CD:4A:4C:63:F4:E8:4A:B5:B2:58:4D:87:50:76:08 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 465191879E5DC6A41D364F01191DB3A2ABEB26E4 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33322d3332203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:45:33 +0000 ROA not before: Wed 03 Dec 2025 00:40:33 +0000 ROA not after: Wed 02 Dec 2026 00:45:33 +0000 asID: 52838 IP address blocks: 2804:bd8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 10:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:51:91:87:9e:5d:c6:a4:1d:36:4f:01:19:1d:b3:a2:ab:eb:26:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:40:33 2025 GMT Not After : Dec 2 00:45:33 2026 GMT Subject: CN=272EA05BF3CD4A4C63F4E84AB5B2584D87507608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:f1:7c:cb:4b:41:a0:e0:f6:8f:c7:1b:87: 08:0d:7a:39:e1:b4:0d:0f:87:57:ce:ad:8e:cf:6d: 33:ef:16:98:87:c4:6b:8d:ae:d1:c7:cc:73:0a:92: 4a:10:f6:d7:63:a5:f7:c8:9d:f3:88:49:4d:c0:be: 58:37:3d:ee:93:6e:99:ff:a1:40:0b:ef:bb:db:33: d5:59:04:25:46:c3:9f:9a:2c:b6:11:a1:66:5f:86: 14:23:73:69:a4:08:ad:d8:45:28:c7:b8:43:5a:24: 79:09:25:9f:74:b3:60:9e:cf:96:05:f8:d2:84:a6: 93:fc:c9:7f:3d:5f:42:8a:21:fb:10:89:34:db:c9: c6:17:8f:68:39:cc:8b:e7:75:91:34:05:ae:87:18: 58:33:07:d9:b0:c4:f1:6c:0e:d2:f0:53:1f:a1:20: 96:64:d1:a3:74:64:5e:7f:23:e3:bd:d8:a8:6a:30: b5:ab:64:84:6d:aa:95:99:05:2b:97:b5:7c:97:d9: bb:c6:2a:fe:7a:64:91:88:86:9c:5e:fe:31:0b:30: 65:98:84:8e:d0:10:9b:41:62:97:73:d8:be:a5:c4: bf:8d:52:03:28:7f:02:24:e2:45:43:2c:a2:75:f3: 98:bd:5b:90:4e:c6:dd:38:fb:de:39:a8:4f:8e:24: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2E:A0:5B:F3:CD:4A:4C:63:F4:E8:4A:B5:B2:58:4D:87:50:76:08 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33322d3332203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:bd8::/32 Signature Algorithm: sha256WithRSAEncryption 02:0d:8a:89:70:45:4a:32:95:ae:22:f0:b2:35:b7:c0:58:5a: 4c:fd:07:3a:66:c5:30:4e:ba:ee:bb:cc:a6:c8:18:27:3e:4e: 1c:3e:8e:4d:18:77:43:3c:26:15:80:ab:17:c8:f1:a9:6d:e5: 61:5f:c0:58:1c:a7:29:f7:b3:dc:20:71:d5:ec:5c:f8:f2:06: 01:b7:97:35:9f:0f:83:67:5f:74:e2:bf:75:82:3b:15:5e:70: af:e0:e9:97:4c:0c:62:73:ee:8d:81:0f:d2:96:a5:bf:fb:d6: 9f:ef:b3:cc:8e:e5:d4:50:45:86:80:89:8f:de:42:d0:36:31: fe:ac:f0:f3:b3:69:01:af:4d:85:e1:d8:cc:a1:69:a1:17:9b: a5:66:7e:04:aa:35:12:69:84:be:e8:1a:60:69:83:8b:20:c9: 8e:5e:c4:af:80:c7:32:43:20:bb:7b:88:54:b3:dd:3f:ab:de: 37:fd:76:f2:5c:89:7b:06:5d:2a:40:e7:6c:7f:99:2d:34:eb: 2c:7c:fe:b2:77:be:bf:97:37:c8:dc:ee:24:d7:b6:5e:07:f1: 43:c0:70:9c:87:6d:23:a9:8a:e5:db:0a:2e:98:00:2d:39:8e: fb:ac:2b:d3:b3:72:f5:9e:34:61:ab:60:83:7d:eb:b5:9b:3b: 16:0a:44:eb -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIURlGRh55dxqQdNk8BGR2zoqvrJuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDQwMzNaFw0yNjEyMDIwMDQ1MzNaMDMxMTAvBgNV BAMTKDI3MkVBMDVCRjNDRDRBNEM2M0Y0RTg0QUI1QjI1ODREODc1MDc2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpevF8y0tBoOD2j8cbhwgNejnh tA0Ph1fOrY7PbTPvFpiHxGuNrtHHzHMKkkoQ9tdjpffInfOISU3Avlg3Pe6Tbpn/ oUAL77vbM9VZBCVGw5+aLLYRoWZfhhQjc2mkCK3YRSjHuENaJHkJJZ90s2Cez5YF +NKEppP8yX89X0KKIfsQiTTbycYXj2g5zIvndZE0Ba6HGFgzB9mwxPFsDtLwUx+h IJZk0aN0ZF5/I+O92KhqMLWrZIRtqpWZBSuXtXyX2bvGKv56ZJGIhpxe/jELMGWY hI7QEJtBYpdz2L6lxL+NUgMofwIk4kVDLKJ185i9W5BOxt04+945qE+OJGSTAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUJy6gW/PNSkxj9OhKtbJYTYdQdggwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzIz ODMwMzQzYTYyNjQzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzODMzMzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAoBAvYMA0GCSqGSIb3DQEBCwUAA4IBAQACDYqJcEVKMpWuIvCy NbfAWFpM/Qc6ZsUwTrruu8ymyBgnPk4cPo5NGHdDPCYVgKsXyPGpbeVhX8BYHKcp 97PcIHHV7Fz48gYBt5c1nw+DZ1904r91gjsVXnCv4OmXTAxic+6NgQ/SlqW/+9af 77PMjuXUUEWGgImP3kLQNjH+rPDzs2kBr02F4djMoWmhF5ulZn4EqjUSaYS+6Bpg aYOLIMmOXsSvgMcyQyC7e4hUs90/q943/XbyXIl7Bl0qQOdsf5ktNOssfP6yd76/ lzfI3O4k17ZeB/FDwHCch20jqYrl2woumAAtOY77rCvTs3L1njRhq2CDfeu1mzsW CkTr -----END CERTIFICATE-----Generated at Sun Dec 7 17:08:03 2025 by rpki-client