This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32342d3234203d3e203631353837.roa File: 3137302e3235342e3133382e302f32342d3234203d3e203631353837.roa (raw, json) Hash identifier: U7ToujIbehx0G+0ZMB9zIwesYOfJhdbObdNYlyvHr8o= Subject key identifier: B6:C7:8D:06:9D:72:EF:55:66:7D:86:DB:22:CD:81:BC:01:57:04:C1 Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Certificate serial: 1A65EFEA1DE20AED83E2F829871E586D1AA40D9F Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32342d3234203d3e203631353837.roa Signing time: Tue 02 Dec 2025 19:03:44 +0000 ROA not before: Tue 02 Dec 2025 18:58:44 +0000 ROA not after: Tue 01 Dec 2026 19:03:44 +0000 asID: 61587 IP address blocks: 170.254.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 13:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:65:ef:ea:1d:e2:0a:ed:83:e2:f8:29:87:1e:58:6d:1a:a4:0d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Validity Not Before: Dec 2 18:58:44 2025 GMT Not After : Dec 1 19:03:44 2026 GMT Subject: CN=B6C78D069D72EF55667D86DB22CD81BC015704C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:15:0a:3e:68:16:05:09:ea:b8:b1:6c:f3: f9:7b:60:44:65:e4:b5:ca:e2:bd:00:61:59:48:ff: 4f:05:c8:34:48:bf:22:03:a7:34:11:75:47:a5:fc: bd:eb:da:e0:93:70:f9:ae:36:09:be:c4:06:b6:2a: d6:ae:7f:13:ec:5c:cb:37:8d:08:cf:91:ae:0d:dd: a3:6d:29:26:8e:2c:c9:69:e5:4e:9c:f5:b1:82:ac: b2:14:5b:28:8f:fe:22:46:ff:04:b8:9d:db:13:af: 0e:88:5b:aa:01:b3:21:2f:6a:73:ea:a6:14:ce:5f: 55:35:99:b4:7b:8b:0a:b6:d0:bd:3a:f7:69:fc:66: c5:32:2c:e1:4d:01:92:71:72:c8:1e:5d:ec:f8:74: ca:49:19:1f:cb:5e:ad:25:57:01:cd:af:82:9c:fc: 61:35:67:0f:4b:df:85:9e:00:bb:f7:16:70:9d:f5: db:c1:80:0a:5f:1f:1f:2c:77:ff:8c:8f:fa:5a:ad: b4:9a:23:9e:25:8e:06:39:cb:20:e8:e5:e0:fd:df: 63:d5:d2:cb:e4:b8:6c:4e:7f:cf:44:b4:b2:64:1d: 7b:17:98:62:62:b6:f6:aa:3d:7b:75:9b:8f:be:96: 3b:98:e0:72:65:aa:dd:83:c7:5d:43:81:ee:08:15: 71:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C7:8D:06:9D:72:EF:55:66:7D:86:DB:22:CD:81:BC:01:57:04:C1 X509v3 Authority Key Identifier: keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32342d3234203d3e203631353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.138.0/24 Signature Algorithm: sha256WithRSAEncryption a6:d7:f8:59:3c:54:af:01:53:29:ac:98:79:90:3b:dc:54:5f: 8e:01:a9:1f:29:f0:87:9f:ba:30:8a:12:6b:79:2e:65:91:fa: 70:5f:c2:1a:bd:2a:bc:e6:5f:32:e3:5c:95:49:69:f6:dd:a3: 18:5e:6b:d0:95:e5:d5:b4:60:77:a4:b3:fa:bd:d1:a5:9a:d5: df:62:d8:19:9a:1a:df:99:93:51:6d:b4:25:4d:b6:f7:ca:12: f4:76:50:5f:0c:7a:cd:c1:57:f6:3c:c7:1d:71:ec:cf:ba:7d: 02:74:e9:e3:df:1a:d8:5f:6a:f6:5c:0e:df:9b:71:ac:e6:f1: e8:e8:17:dc:62:ee:8e:a9:b1:cb:d1:f4:dc:aa:79:00:f1:16: 8d:c4:fe:a8:6a:22:54:df:61:1f:a7:50:34:da:77:5c:1a:15: 46:52:e7:2e:b1:ee:9d:a6:46:28:9d:8c:c1:2a:8d:c7:ee:59: 3b:a5:16:c0:17:f1:ea:6e:f1:a6:1c:11:7a:22:37:7d:ed:82: 53:d2:8f:e6:b3:5c:40:3f:3d:22:ba:ee:26:0c:b7:10:6a:c6: ff:03:00:f4:73:1a:72:54:07:15:fb:c0:9b:0d:5f:7b:96:8d: 96:9c:6d:f6:5f:50:d6:d7:88:fa:e8:16:35:a5:ea:32:84:33: 9b:a9:41:35 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUGmXv6h3iCu2D4vgphx5YbRqkDZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2 RjVFRjEwQjAeFw0yNTEyMDIxODU4NDRaFw0yNjEyMDExOTAzNDRaMDMxMTAvBgNV BAMTKEI2Qzc4RDA2OUQ3MkVGNTU2NjdEODZEQjIyQ0Q4MUJDMDE1NzA0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHOBUKPmgWBQnquLFs8/l7YERl 5LXK4r0AYVlI/08FyDRIvyIDpzQRdUel/L3r2uCTcPmuNgm+xAa2KtaufxPsXMs3 jQjPka4N3aNtKSaOLMlp5U6c9bGCrLIUWyiP/iJG/wS4ndsTrw6IW6oBsyEvanPq phTOX1U1mbR7iwq20L0692n8ZsUyLOFNAZJxcsgeXez4dMpJGR/LXq0lVwHNr4Kc /GE1Zw9L34WeALv3FnCd9dvBgApfHx8sd/+Mj/parbSaI54ljgY5yyDo5eD932PV 0svkuGxOf89EtLJkHXsXmGJitvaqPXt1m4++ljuY4HJlqt2Dx11Dge4IFXHXAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUtseNBp1y71VmfYbbIs2BvAFXBMEwHwYDVR0j BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv MzEzNzMwMmUzMjM1MzQyZTMxMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2 MzEzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACq/oowDQYJKoZIhvcNAQELBQADggEBAKbX+Fk8 VK8BUymsmHmQO9xUX44BqR8p8IefujCKEmt5LmWR+nBfwhq9KrzmXzLjXJVJafbd oxhea9CV5dW0YHeks/q90aWa1d9i2BmaGt+Zk1FttCVNtvfKEvR2UF8Mes3BV/Y8 xx1x7M+6fQJ06ePfGthfavZcDt+bcazm8ejoF9xi7o6pscvR9NyqeQDxFo3E/qhq IlTfYR+nUDTad1waFUZS5y6x7p2mRiidjMEqjcfuWTulFsAX8epu8aYcEXoiN33t glPSj+azXEA/PSK67iYMtxBqxv8DAPRzGnJUBxX7wJsNX3uWjZacbfZfUNbXiPro FjWl6jKEM5upQTU= -----END CERTIFICATE-----Generated at Sat Dec 6 20:09:29 2025 by rpki-client