This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/323830343a343537383a3a2f33332d3333203d3e20323636393238.roa File: 323830343a343537383a3a2f33332d3333203d3e20323636393238.roa (raw, json) Hash identifier: IpkZ+8FOXgzVMt2jz/II2Po1NbhK7Qjrpx77wg1tboQ= Subject key identifier: B6:A3:DD:79:BF:48:6F:6E:6B:DD:E0:05:F2:F6:68:1D:AC:A6:40:2B Certificate issuer: /CN=6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A Certificate serial: 4C4885650273405A40E7FD85C719D046F64B7448 Authority key identifier: 6A:39:87:EE:9B:CC:77:9A:F7:F1:2E:B0:5A:91:DC:AC:02:CB:61:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.cer Subject info access: rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/323830343a343537383a3a2f33332d3333203d3e20323636393238.roa Signing time: Mon 26 Jun 2023 11:53:43 +0000 ROA not before: Mon 26 Jun 2023 11:48:43 +0000 ROA not after: Mon 24 Jun 2024 11:53:43 +0000 asID: 266928 IP address blocks: 2804:4578::/33 maxlen: 33 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4c:48:85:65:02:73:40:5a:40:e7:fd:85:c7:19:d0:46:f6:4b:74:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A Validity Not Before: Jun 26 11:48:43 2023 GMT Not After : Jun 24 11:53:43 2024 GMT Subject: CN=B6A3DD79BF486F6E6BDDE005F2F6681DACA6402B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:eb:2a:30:88:9a:2b:6e:91:7c:49:97:eb: ca:b9:4f:2c:f6:42:d1:cf:8e:93:79:93:9b:a5:71: ae:2c:97:46:9a:69:37:79:28:c1:7f:b5:09:e2:eb: a6:39:bc:fb:02:18:4d:d5:60:b1:38:8d:c1:e1:f0: 36:d8:51:45:a0:32:61:e9:50:04:35:1e:36:d3:f5: 56:7c:2f:88:87:f6:35:f7:7c:72:91:61:3d:9e:18: 7b:cb:5d:c2:29:23:e8:86:e8:23:33:79:4f:ab:ea: 70:bc:90:e2:3e:07:05:63:fc:80:0b:b7:f7:95:10: 23:ba:08:a0:12:b8:1f:c8:c0:6d:05:54:dd:1b:ba: 67:29:39:7c:86:54:48:4a:f9:d1:50:5d:6a:1e:62: f3:ab:5c:ef:7f:c7:eb:de:bd:a4:47:cb:05:12:6d: 63:1f:19:b4:4a:db:6f:6e:71:d6:58:47:68:7a:fb: dc:94:cd:37:52:98:47:c3:e5:7f:6c:17:0a:20:6a: 3a:34:b7:b6:fb:aa:d2:a9:2c:37:69:ef:cd:0e:6a: 60:6b:fd:ab:a3:1d:cc:f1:e7:3a:8b:5f:30:09:e6: 47:01:cb:30:4f:49:62:44:77:41:ae:72:69:af:89: e0:90:35:35:d3:50:f8:a5:13:6c:a3:b4:74:2f:0a: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A3:DD:79:BF:48:6F:6E:6B:DD:E0:05:F2:F6:68:1D:AC:A6:40:2B X509v3 Authority Key Identifier: keyid:6A:39:87:EE:9B:CC:77:9A:F7:F1:2E:B0:5A:91:DC:AC:02:CB:61:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/323830343a343537383a3a2f33332d3333203d3e20323636393238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4578::/33 Signature Algorithm: sha256WithRSAEncryption 1f:90:cb:2a:59:13:d9:3a:41:88:7c:d5:e2:17:cd:3a:0a:e9: 6f:8d:bb:6e:2a:d5:20:f7:70:b3:94:5b:ac:2c:d5:d6:83:61: 99:47:89:05:d7:67:8d:66:2e:e0:b4:ce:38:22:31:0e:d4:72: 85:e2:a1:a2:0e:b6:3c:8d:85:5a:29:57:38:6d:da:3d:57:95: 91:6e:f3:57:21:c6:75:5c:25:88:73:9b:d6:17:8d:99:97:56: b9:44:22:90:cf:9a:4f:3e:ec:42:fb:4c:d9:08:b4:7d:9c:5b: 58:5c:16:4b:2e:fb:31:ea:59:8b:e3:3a:7e:d9:00:5a:45:7c: b3:29:ed:f5:f0:98:5e:a1:e2:f2:be:f8:70:ad:9f:af:72:14: 39:f9:8e:ec:0d:1b:b6:de:df:de:76:12:2a:44:83:27:b1:44: 0e:31:3f:94:23:9c:e8:df:2a:cc:a6:99:4f:7a:21:fb:fa:e6: 4a:0d:47:6a:a8:08:5c:b2:ab:bd:f9:38:5a:80:f8:6e:08:02: 8e:3e:60:e5:9f:1d:70:50:d3:6c:b7:ce:ea:d8:d6:c3:f0:66: 65:08:b9:2c:67:6a:f9:32:60:13:81:5e:2a:ea:f0:df:ab:1e: bb:64:d7:75:c9:4d:68:49:5e:71:c8:64:18:2d:cb:9f:52:e3: b2:c4:b3:57 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUTEiFZQJzQFpA5/2FxxnQRvZLdEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTg3RUU5QkNDNzc5QUY3RjEyRUIwNUE5MURDQUMw MkNCNjExQTAeFw0yMzA2MjYxMTQ4NDNaFw0yNDA2MjQxMTUzNDNaMDMxMTAvBgNV BAMTKEI2QTNERDc5QkY0ODZGNkU2QkRERTAwNUYyRjY2ODFEQUNBNjQwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2+sqMIiaK26RfEmX68q5Tyz2 QtHPjpN5k5ulca4sl0aaaTd5KMF/tQni66Y5vPsCGE3VYLE4jcHh8DbYUUWgMmHp UAQ1HjbT9VZ8L4iH9jX3fHKRYT2eGHvLXcIpI+iG6CMzeU+r6nC8kOI+BwVj/IAL t/eVECO6CKASuB/IwG0FVN0bumcpOXyGVEhK+dFQXWoeYvOrXO9/x+vevaRHywUS bWMfGbRK229ucdZYR2h6+9yUzTdSmEfD5X9sFwogajo0t7b7qtKpLDdp780OamBr /aujHczx5zqLXzAJ5kcByzBPSWJEd0GucmmvieCQNTXTUPilE2yjtHQvCoEDAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUtqPdeb9Ib25r3eAF8vZoHaymQCswHwYDVR0j BBgwFoAUajmH7pvMd5r38S6wWpHcrALLYRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9kak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1 LzEvNkEzOTg3RUU5QkNDNzc5QUY3RjEyRUIwNUE5MURDQUMwMkNCNjExQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82QTM5ODdFRTlCQ0M3NzlBRjdG MTJFQjA1QTkxRENBQzAyQ0I2MTFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k ak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1LzEvMzIz ODMwMzQzYTM0MzUzNzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2Mzkz MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYHKARFeAAwDQYJKoZIhvcNAQELBQADggEBAB+QyypZE9k6 QYh81eIXzToK6W+Nu24q1SD3cLOUW6ws1daDYZlHiQXXZ41mLuC0zjgiMQ7UcoXi oaIOtjyNhVopVzht2j1XlZFu81chxnVcJYhzm9YXjZmXVrlEIpDPmk8+7EL7TNkI tH2cW1hcFksu+zHqWYvjOn7ZAFpFfLMp7fXwmF6h4vK++HCtn69yFDn5juwNG7be 3952EipEgyexRA4xP5QjnOjfKsymmU96Ifv65koNR2qoCFyyq735OFqA+G4IAo4+ YOWfHXBQ02y3zurY1sPwZmUIuSxnavkyYBOBXirq8N+rHrtk13XJTWhJXnHIZBgt y59S47LEs1c= -----END CERTIFICATE-----Generated at Tue Dec 23 08:20:15 2025 by rpki-client