This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33332d3333203d3e203532383338.roa File: 323830343a6264383a3a2f33332d3333203d3e203532383338.roa (raw, json) Hash identifier: 0Ds+X7fYVE7gv6LSnzOWyMtsyruGJ7XFvfiPMQX2vTQ= Subject key identifier: AE:B7:83:F8:15:FE:8C:59:CE:FA:12:7F:C3:B5:74:BF:5B:A8:91:9F Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 4E16DAF9F26794750F93640269F2E29E3ADDF3E8 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33332d3333203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:46:04 +0000 ROA not before: Wed 03 Dec 2025 00:41:04 +0000 ROA not after: Wed 02 Dec 2026 00:46:04 +0000 asID: 52838 IP address blocks: 2804:bd8::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 10:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:16:da:f9:f2:67:94:75:0f:93:64:02:69:f2:e2:9e:3a:dd:f3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:41:04 2025 GMT Not After : Dec 2 00:46:04 2026 GMT Subject: CN=AEB783F815FE8C59CEFA127FC3B574BF5BA8919F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:ed:9e:da:66:f6:25:a7:72:e9:76:69:dc: de:4f:34:c0:7c:88:4c:de:c2:7e:cf:35:ab:bb:44: 6a:dd:e7:4b:9b:b0:47:14:18:72:17:97:37:0c:92: 11:b9:0f:02:98:75:4d:1c:6f:c7:7d:72:99:e3:6d: 29:1b:f1:f7:1e:e8:0a:fa:96:59:43:ee:6a:7c:d0: bf:71:f6:f3:3a:92:c5:58:9f:d7:0f:fd:87:57:ad: 1f:54:66:bc:54:c4:06:2d:2c:c9:a2:f1:89:c5:2d: 1c:76:a0:d0:96:87:f8:66:ae:90:40:07:79:30:41: 25:3b:cf:62:b2:7d:75:9c:db:a6:09:f3:cd:0f:20: 88:3e:51:b3:59:d3:57:e1:a6:c6:2b:c2:f8:1b:b2: 2d:5f:3e:b4:04:74:02:3a:fa:e3:4a:da:ae:76:db: 44:7b:2a:ee:cb:95:c5:9e:1b:cd:e5:8c:ca:21:f6: 8b:74:64:24:e8:e7:25:38:13:5d:43:b9:75:9f:f9: b8:e4:79:a0:cf:7b:d0:cf:19:d0:a6:7c:ef:7b:86: ff:c7:a6:18:ba:98:c6:ef:65:8c:4c:c3:07:28:ef: a5:85:17:0d:65:9c:31:45:58:0a:44:89:b6:de:79: d7:ec:c5:b6:22:e5:5c:8d:c5:49:ba:03:c8:d4:50: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B7:83:F8:15:FE:8C:59:CE:FA:12:7F:C3:B5:74:BF:5B:A8:91:9F X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33332d3333203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:bd8::/33 Signature Algorithm: sha256WithRSAEncryption 8b:29:d4:80:48:42:bc:70:a5:75:15:37:1e:24:a2:9c:a1:ab: dc:99:0e:0c:12:0c:7c:65:7d:c5:0f:0e:57:5f:d8:50:88:7a: 9d:76:46:77:42:80:05:f1:ab:da:bc:ef:e0:3b:e4:99:08:4c: 51:a8:01:17:5f:1d:1e:50:40:5d:f1:f7:66:20:9f:8f:b9:fd: 7f:ea:a5:dc:05:8e:82:29:a3:4d:46:dd:90:eb:ca:2e:05:a2: 59:f0:df:17:55:80:1d:60:1f:a5:69:0a:5b:b1:fa:b0:22:f6: 76:50:8b:de:97:cf:30:d4:a5:c0:24:f0:b9:83:eb:34:66:98: 7e:33:15:44:36:b6:01:a3:7b:1c:5d:9c:70:e8:0d:ac:d0:a7: 3a:c6:e0:78:b8:28:a0:11:0e:99:1d:df:4c:8f:90:ce:af:01: 29:db:68:af:43:5d:75:6b:f6:2e:84:e9:e4:65:b6:5e:fb:f2: d9:26:f1:c1:42:ae:16:6a:0f:36:72:b1:f3:42:dd:a7:d7:c0: 9e:ea:7f:b7:55:8c:9d:f3:21:2f:97:7f:75:9e:09:ad:4a:cf: 59:93:2c:23:db:ec:dd:a6:26:01:3e:25:e8:5b:a1:aa:8f:a5: 58:1f:eb:13:77:18:36:d0:91:47:6d:94:6a:8c:b7:f4:94:bf: 66:37:35:80 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUThba+fJnlHUPk2QCafLinjrd8+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDQxMDRaFw0yNjEyMDIwMDQ2MDRaMDMxMTAvBgNV BAMTKEFFQjc4M0Y4MTVGRThDNTlDRUZBMTI3RkMzQjU3NEJGNUJBODkxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZ+2e2mb2Jady6XZp3N5PNMB8 iEzewn7PNau7RGrd50ubsEcUGHIXlzcMkhG5DwKYdU0cb8d9cpnjbSkb8fce6Ar6 lllD7mp80L9x9vM6ksVYn9cP/YdXrR9UZrxUxAYtLMmi8YnFLRx2oNCWh/hmrpBA B3kwQSU7z2KyfXWc26YJ880PIIg+UbNZ01fhpsYrwvgbsi1fPrQEdAI6+uNK2q52 20R7Ku7LlcWeG83ljMoh9ot0ZCTo5yU4E11DuXWf+bjkeaDPe9DPGdCmfO97hv/H phi6mMbvZYxMwwco76WFFw1lnDFFWApEibbeedfsxbYi5VyNxUm6A8jUUI6PAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUrreD+BX+jFnO+hJ/w7V0v1uokZ8wHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzIz ODMwMzQzYTYyNjQzODNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzODMzMzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgcoBAvYADANBgkqhkiG9w0BAQsFAAOCAQEAiynUgEhCvHCldRU3 HiSinKGr3JkODBIMfGV9xQ8OV1/YUIh6nXZGd0KABfGr2rzv4DvkmQhMUagBF18d HlBAXfH3ZiCfj7n9f+ql3AWOgimjTUbdkOvKLgWiWfDfF1WAHWAfpWkKW7H6sCL2 dlCL3pfPMNSlwCTwuYPrNGaYfjMVRDa2AaN7HF2ccOgNrNCnOsbgeLgooBEOmR3f TI+Qzq8BKdtor0NddWv2LoTp5GW2Xvvy2SbxwUKuFmoPNnKx80Ldp9fAnup/t1WM nfMhL5d/dZ4JrUrPWZMsI9vs3aYmAT4l6Fuhqo+lWB/rE3cYNtCRR22Uaoy39JS/ Zjc1gA== -----END CERTIFICATE-----Generated at Sun Dec 7 17:08:03 2025 by rpki-client