This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33342d3334203d3e203532383338.roa File: 323830343a6264383a3a2f33342d3334203d3e203532383338.roa (raw, json) Hash identifier: zLKx0XUfrYZGa20pxy8w++8MWsN70teR1G7Ryll1kYY= Subject key identifier: 79:38:5E:E3:73:8F:24:96:7F:4C:BE:B7:DE:F7:3E:54:B6:87:AB:B6 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 5F9B17DB6256F27C889E1A33F73E9D2D2478F029 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33342d3334203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:47:13 +0000 ROA not before: Wed 03 Dec 2025 00:42:13 +0000 ROA not after: Wed 02 Dec 2026 00:47:13 +0000 asID: 52838 IP address blocks: 2804:bd8::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 10:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9b:17:db:62:56:f2:7c:88:9e:1a:33:f7:3e:9d:2d:24:78:f0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:42:13 2025 GMT Not After : Dec 2 00:47:13 2026 GMT Subject: CN=79385EE3738F24967F4CBEB7DEF73E54B687ABB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:5a:21:6b:79:5b:cf:75:06:3c:2d:2e:44: 5c:9b:1e:7f:1b:52:ce:fe:da:06:7c:90:7b:12:bb: 30:6b:2f:ae:3e:45:c3:b3:a6:a3:67:5f:d5:8d:20: 70:c5:1d:ce:03:05:80:0d:7d:c3:2f:78:6c:7c:13: bc:19:18:a8:8d:f5:d3:01:3e:23:41:c6:81:24:b5: 6e:80:bb:29:22:f3:e6:f5:c4:7f:77:57:c2:72:42: 23:f4:2f:e3:e5:bc:a2:ec:04:7d:40:36:62:04:0d: a5:39:b4:3f:dd:33:49:f4:9b:4c:37:eb:2d:3a:63: fb:bd:52:38:55:5f:10:be:e4:21:b6:d0:dc:bb:5e: 96:dc:ce:8b:a3:c0:26:87:51:e5:b4:ea:82:86:6e: 0a:c0:d5:a3:ab:7f:bc:95:82:6e:f8:9d:96:ef:b4: cc:0a:53:f7:e6:bb:14:09:21:34:86:fd:d3:ef:84: d4:78:0a:55:2a:4c:3e:64:d2:cc:ca:ba:41:b1:a0: 95:2e:20:5e:75:a5:4f:50:b2:c8:05:c1:74:fc:9c: 42:b7:0e:35:9b:8e:2c:2a:3d:29:16:6a:12:b7:04: a6:9c:d6:be:c7:9a:b5:54:64:23:68:79:78:a0:b2: 42:fd:00:88:78:3f:68:16:8f:82:8b:70:6c:fd:ca: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:38:5E:E3:73:8F:24:96:7F:4C:BE:B7:DE:F7:3E:54:B6:87:AB:B6 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33342d3334203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:bd8::/34 Signature Algorithm: sha256WithRSAEncryption 95:d2:9a:12:e1:24:11:d2:fb:f4:e2:cf:ec:f6:9f:92:58:2a: 66:65:ea:60:9c:a7:d4:b2:a3:bd:b3:82:36:54:b0:33:0f:65: c5:43:fa:44:e5:43:67:36:b0:50:0e:87:31:fe:de:c5:b0:32: bd:6c:3c:f0:08:23:14:63:2c:34:2c:42:96:c9:b6:52:af:1a: 33:6e:7b:69:77:c1:46:5a:33:ed:50:5a:36:f9:3e:ce:37:9e: ab:69:ab:fe:51:ad:55:2f:cc:5f:4f:6a:e7:25:e3:90:98:da: 6d:56:a9:d2:9a:10:c3:54:e5:d7:19:6d:49:df:0f:4a:64:3a: a9:09:63:4e:23:d4:e2:5b:f0:88:43:46:13:71:ae:68:dd:63: 3f:21:33:da:7e:7a:ba:70:c5:11:6b:7b:16:3c:a8:f4:28:1e: bf:3a:72:72:bf:ef:aa:0d:63:72:c6:ab:ab:81:2e:60:c9:94: ca:3b:cd:96:96:83:c5:b5:69:11:11:cf:fe:3c:f6:bb:d6:38: a5:69:c6:a3:ff:af:af:9c:87:e2:0a:6c:62:89:22:9d:1a:bf: 39:89:ec:12:09:9c:07:ab:3c:96:e7:64:41:10:9d:7f:9b:5a: fd:8a:aa:c3:39:6f:7a:a8:51:f5:cb:1b:7f:56:50:b2:28:51: 92:eb:7b:1c -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUX5sX22JW8nyInhoz9z6dLSR48CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDQyMTNaFw0yNjEyMDIwMDQ3MTNaMDMxMTAvBgNV BAMTKDc5Mzg1RUUzNzM4RjI0OTY3RjRDQkVCN0RFRjczRTU0QjY4N0FCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqEloha3lbz3UGPC0uRFybHn8b Us7+2gZ8kHsSuzBrL64+RcOzpqNnX9WNIHDFHc4DBYANfcMveGx8E7wZGKiN9dMB PiNBxoEktW6Auyki8+b1xH93V8JyQiP0L+PlvKLsBH1ANmIEDaU5tD/dM0n0m0w3 6y06Y/u9UjhVXxC+5CG20Ny7XpbczoujwCaHUeW06oKGbgrA1aOrf7yVgm74nZbv tMwKU/fmuxQJITSG/dPvhNR4ClUqTD5k0szKukGxoJUuIF51pU9QssgFwXT8nEK3 DjWbjiwqPSkWahK3BKac1r7HmrVUZCNoeXigskL9AIh4P2gWj4KLcGz9ygLzAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUeThe43OPJJZ/TL633vc+VLaHq7YwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzIz ODMwMzQzYTYyNjQzODNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDM1MzIzODMzMzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgYoBAvYADANBgkqhkiG9w0BAQsFAAOCAQEAldKaEuEkEdL79OLP 7PafklgqZmXqYJyn1LKjvbOCNlSwMw9lxUP6ROVDZzawUA6HMf7exbAyvWw88Agj FGMsNCxClsm2Uq8aM257aXfBRloz7VBaNvk+zjeeq2mr/lGtVS/MX09q5yXjkJja bVap0poQw1Tl1xltSd8PSmQ6qQljTiPU4lvwiENGE3GuaN1jPyEz2n56unDFEWt7 Fjyo9Cgevzpycr/vqg1jcsarq4EuYMmUyjvNlpaDxbVpERHP/jz2u9Y4pWnGo/+v r5yH4gpsYokinRq/OYnsEgmcB6s8ludkQRCdf5ta/YqqwzlveqhR9csbf1ZQsihR kut7HA== -----END CERTIFICATE-----Generated at Sun Dec 7 17:08:05 2025 by rpki-client