This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32322d3232203d3e20323633393530.roa File: 3133382e3235352e302e302f32322d3232203d3e20323633393530.roa (raw, json) Hash identifier: N5Ov20kQQV3Voj51ATerUtGT+zaXU4lF5AgkR5X11JE= Subject key identifier: E6:FC:1B:C9:A4:E4:E0:6D:01:8F:EF:0B:AD:5D:7E:BD:E3:66:21:3A Certificate issuer: /CN=17E4F0D3C469415DC7E16F41B958536392F1E579 Certificate serial: 1E4F6593081BBD1AB8632AC040C127A2550B4A9D Authority key identifier: 17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer Subject info access: rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32322d3232203d3e20323633393530.roa Signing time: Tue 11 Mar 2025 14:21:08 +0000 ROA not before: Tue 11 Mar 2025 14:16:08 +0000 ROA not after: Tue 10 Mar 2026 14:21:08 +0000 asID: 263950 IP address blocks: 138.255.0.0/22 maxlen: 22 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4f:65:93:08:1b:bd:1a:b8:63:2a:c0:40:c1:27:a2:55:0b:4a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17E4F0D3C469415DC7E16F41B958536392F1E579 Validity Not Before: Mar 11 14:16:08 2025 GMT Not After : Mar 10 14:21:08 2026 GMT Subject: CN=E6FC1BC9A4E4E06D018FEF0BAD5D7EBDE366213A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:90:4f:29:19:81:6e:ec:73:88:e9:4b:50: 1c:3b:2d:39:a3:69:ab:7a:14:39:79:48:bc:f3:7b: 52:8b:60:42:95:81:18:12:d3:23:75:f0:a6:be:7b: 37:44:41:39:1a:32:9c:e4:08:73:10:f2:ea:0f:9f: 9d:61:16:04:fe:b4:c1:76:be:cc:0d:7d:de:83:ab: 9c:76:3e:10:05:75:1d:d5:90:8d:87:1d:18:2b:0e: e5:77:3d:bb:46:4c:3d:a5:ea:6a:dc:74:de:81:6c: c1:d2:b3:bf:bc:41:72:76:10:af:28:11:ca:ae:d7: 24:82:56:b7:1b:e1:9c:d8:61:01:32:cd:b1:cc:aa: 75:55:ce:4e:9c:71:62:4f:74:bb:dd:31:8b:7b:09: fc:9a:23:b6:8e:74:fb:02:72:3c:f3:9c:5d:76:b1: 12:13:f8:35:d1:0e:d2:18:7d:9c:78:f8:25:c7:fd: 65:10:57:57:41:47:bb:f6:0e:52:6c:ed:c9:27:1f: 2e:da:14:14:8c:17:e6:bb:f1:bb:3b:2c:94:77:30: 76:85:f8:7f:07:e0:df:51:49:a4:e9:3b:6e:fb:04: 65:bc:3d:e6:f6:26:85:62:93:d8:2c:f9:7a:c4:36: 40:4f:02:db:00:7a:8f:48:ee:ed:c4:71:ce:a4:c7: 60:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FC:1B:C9:A4:E4:E0:6D:01:8F:EF:0B:AD:5D:7E:BD:E3:66:21:3A X509v3 Authority Key Identifier: keyid:17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32322d3232203d3e20323633393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.0.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:e1:19:fe:5a:14:9f:92:84:b3:e1:19:a4:6b:16:b9:f6:9a: 03:fb:53:d9:be:1e:4c:95:1b:66:eb:de:b6:ca:1e:4a:ef:bb: 4f:d0:dc:c1:20:68:61:90:ee:31:8c:ee:c7:a0:3f:4e:1b:f6: 63:e7:10:96:6c:bb:71:a1:e0:e2:c2:08:eb:c5:81:c8:e4:4d: 61:aa:02:5c:92:93:bc:97:4b:19:d3:bb:c5:7f:c7:c4:e7:02: 7e:a4:d7:22:be:23:6c:f4:b6:1e:40:d7:a9:ff:32:e9:ac:63: c8:19:d9:fb:84:94:37:b5:63:47:39:c3:dd:e0:54:0f:0e:88: 27:ce:78:b6:6f:58:de:cc:ef:95:03:ff:68:0d:05:78:ae:53: 9f:bf:b5:7a:e3:ab:d2:a0:df:d6:63:b6:62:4a:c9:69:fa:e1: 90:d4:e0:d2:1e:95:f4:88:f7:15:38:61:db:11:ec:ec:c7:e1: 50:c1:90:f6:8b:cf:8b:f0:0b:79:0d:49:48:3c:80:f0:73:f7: d8:28:53:13:22:e6:97:e7:84:b6:f5:d8:05:bd:59:76:3b:3c: 01:cd:01:0b:e4:6a:6d:bc:31:f7:79:02:e4:67:88:53:6b:db: bb:87:f3:a0:0b:55:e5:7e:e8:a3:42:02:2b:57:dd:b4:8f:11: d8:25:65:cf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUHk9lkwgbvRq4YyrAQMEnolULSp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdFNEYwRDNDNDY5NDE1REM3RTE2RjQxQjk1ODUzNjM5 MkYxRTU3OTAeFw0yNTAzMTExNDE2MDhaFw0yNjAzMTAxNDIxMDhaMDMxMTAvBgNV BAMTKEU2RkMxQkM5QTRFNEUwNkQwMThGRUYwQkFENUQ3RUJERTM2NjIxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rpBPKRmBbuxziOlLUBw7LTmj aat6FDl5SLzze1KLYEKVgRgS0yN18Ka+ezdEQTkaMpzkCHMQ8uoPn51hFgT+tMF2 vswNfd6Dq5x2PhAFdR3VkI2HHRgrDuV3PbtGTD2l6mrcdN6BbMHSs7+8QXJ2EK8o Ecqu1ySCVrcb4ZzYYQEyzbHMqnVVzk6ccWJPdLvdMYt7CfyaI7aOdPsCcjzznF12 sRIT+DXRDtIYfZx4+CXH/WUQV1dBR7v2DlJs7cknHy7aFBSMF+a78bs7LJR3MHaF +H8H4N9RSaTpO277BGW8Peb2JoVik9gs+XrENkBPAtsAeo9I7u3Ecc6kx2AbAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU5vwbyaTk4G0Bj+8LrV1+veNmITowHwYDVR0j BBgwFoAUF+Tw08RpQV3H4W9BuVhTY5Lx5XkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby8xcmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1JaQ05ib2l5RDNj LzAvMTdFNEYwRDNDNDY5NDE1REM3RTE2RjQxQjk1ODUzNjM5MkYxRTU3OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xN0U0RjBEM0M0Njk0MTVEQzdF MTZGNDFCOTU4NTM2MzkyRjFFNTc5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x cmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1JaQ05ib2l5RDNjLzAvMzEz MzM4MmUzMjM1MzUyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzkz NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCiv8AMA0GCSqGSIb3DQEBCwUAA4IBAQAM4Rn+WhSfkoSz 4Rmkaxa59poD+1PZvh5MlRtm6962yh5K77tP0NzBIGhhkO4xjO7HoD9OG/Zj5xCW bLtxoeDiwgjrxYHI5E1hqgJckpO8l0sZ07vFf8fE5wJ+pNciviNs9LYeQNep/zLp rGPIGdn7hJQ3tWNHOcPd4FQPDognzni2b1jezO+VA/9oDQV4rlOfv7V646vSoN/W Y7ZiSslp+uGQ1ODSHpX0iPcVOGHbEezsx+FQwZD2i8+L8At5DUlIPIDwc/fYKFMT IuaX54S29dgFvVl2OzwBzQEL5GptvDH3eQLkZ4hTa9u7h/OgC1XlfuijQgIrV920 jxHYJWXP -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:55 2025 by rpki-client