This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa File: 3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa (raw, json) Hash identifier: jBBZb3j6mzQ0vSxvLhtWMTEujFoXu9nq7NgVguhq+Eg= Subject key identifier: D4:23:08:8F:80:0E:6B:C8:5A:57:DD:16:54:28:08:59:2E:EB:7C:7C Certificate issuer: /CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8 Certificate serial: 58EC99873B3F7096A9ACAF3013B78CFFAA047170 Authority key identifier: F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa Signing time: Tue 11 Nov 2025 18:07:17 +0000 ROA not before: Tue 11 Nov 2025 18:02:17 +0000 ROA not after: Tue 10 Nov 2026 18:07:17 +0000 asID: 264103 IP address blocks: 138.59.188.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ec:99:87:3b:3f:70:96:a9:ac:af:30:13:b7:8c:ff:aa:04:71:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8 Validity Not Before: Nov 11 18:02:17 2025 GMT Not After : Nov 10 18:07:17 2026 GMT Subject: CN=D423088F800E6BC85A57DD16542808592EEB7C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:f5:c9:0b:58:14:0c:a3:99:1c:e5:b1:d1: 94:2f:84:0a:cc:83:88:00:e5:c6:7e:b0:8b:f8:fb: 95:9d:13:c4:43:55:e1:e5:86:a8:e6:06:94:6d:1e: 53:9a:ae:09:4c:e5:97:02:56:2d:c6:75:22:31:bb: 2d:da:ca:7d:06:83:f4:15:0c:6d:a3:30:15:53:3d: c5:0d:e0:a0:86:d1:64:fa:c2:dd:aa:11:fc:14:dd: 6a:cf:29:c2:c2:6d:50:2a:05:5a:0c:30:6a:45:69: 56:6f:95:99:64:d9:2a:f5:af:1d:6d:a4:0b:41:0a: b2:ec:76:b1:db:a2:a0:2a:66:67:75:9c:bd:c0:71: 72:9f:54:db:6a:ff:d4:93:10:64:ad:01:7d:d5:be: 4e:fe:89:d3:dc:d4:24:23:b6:bc:b0:7c:bd:39:07: 84:e9:b8:69:fa:10:1a:af:42:9d:f7:b8:7c:85:4a: 15:91:00:2f:77:45:ea:c1:fa:20:0b:7b:58:6f:fa: cc:8c:ec:79:f0:bf:93:5f:62:8a:c3:67:b7:1d:b4: 01:90:18:3b:58:26:bc:7e:12:ca:b7:dd:3f:f8:02: 37:3f:f7:83:e4:a1:12:f3:f4:cc:71:90:06:ba:52: 16:65:a2:49:ad:79:8f:a4:e2:6c:43:84:c0:57:dd: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:23:08:8F:80:0E:6B:C8:5A:57:DD:16:54:28:08:59:2E:EB:7C:7C X509v3 Authority Key Identifier: keyid:F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.188.0/22 Signature Algorithm: sha256WithRSAEncryption cd:53:12:f6:f1:a6:26:5a:bb:7b:05:69:bc:03:68:61:c4:ca: 4a:47:a5:2e:ee:0e:cf:a3:50:c1:1a:61:85:2f:ac:63:85:38: 54:c5:0d:e0:06:de:5f:a6:09:27:f7:37:10:b4:7c:88:24:60: a4:8f:09:d1:a6:aa:d1:d4:e4:ed:2f:75:b0:bb:73:96:ff:b1: 68:62:09:82:80:9c:a7:cd:86:03:43:23:37:7c:17:c6:8a:f9: 0b:86:ed:c7:04:dc:77:77:8d:2a:96:bb:76:fa:ff:f1:de:b1: bc:cb:61:b1:20:76:e9:0f:a1:e3:a2:6e:48:0e:3e:05:79:ad: b4:72:02:dc:6f:4b:8e:98:ae:2f:42:e1:bc:4d:dd:90:42:e8: 49:45:ca:3c:0e:c5:38:c0:0b:2e:76:23:9b:f7:36:b1:e7:16: b5:0b:44:c9:4e:c5:e1:af:09:16:a9:a6:85:db:47:f3:00:e7: 01:30:15:7c:64:0a:6d:d3:e6:c1:af:0a:c7:d5:0a:7c:15:c7: 27:a5:05:3b:51:f5:01:c7:c6:34:c5:5e:3c:3b:5c:d2:85:e7: f9:c9:a9:be:8d:2e:2d:0e:80:ec:3a:d2:9f:34:92:fe:1c:9b: 49:3a:48:90:9a:14:b3:13:d3:ee:d8:f9:d8:c8:fa:44:52:22: e5:c0:6e:52 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUWOyZhzs/cJaprK8wE7eM/6oEcXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjExQkZGOTZFNTQ0OUVFOEQ5RkQ5OEEwRkE0Q0I5MzNB QkFCNzhEODAeFw0yNTExMTExODAyMTdaFw0yNjExMTAxODA3MTdaMDMxMTAvBgNV BAMTKEQ0MjMwODhGODAwRTZCQzg1QTU3REQxNjU0MjgwODU5MkVFQjdDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0PXJC1gUDKOZHOWx0ZQvhArM g4gA5cZ+sIv4+5WdE8RDVeHlhqjmBpRtHlOarglM5ZcCVi3GdSIxuy3ayn0Gg/QV DG2jMBVTPcUN4KCG0WT6wt2qEfwU3WrPKcLCbVAqBVoMMGpFaVZvlZlk2Sr1rx1t pAtBCrLsdrHboqAqZmd1nL3AcXKfVNtq/9STEGStAX3Vvk7+idPc1CQjtrywfL05 B4TpuGn6EBqvQp33uHyFShWRAC93RerB+iALe1hv+syM7Hnwv5NfYorDZ7cdtAGQ GDtYJrx+Esq33T/4Ajc/94PkoRLz9MxxkAa6UhZlokmteY+k4mxDhMBX3SAjAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU1CMIj4AOa8haV90WVCgIWS7rfHwwHwYDVR0j BBgwFoAU8Rv/luVEnujZ/Zig+ky5M6ureNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRVbk5kVnFyM2oyZlB5aVZ4ZDlXZG9YNmhGTk5EWEpGaG9DdlhSSGdk SmIvMC9GMTFCRkY5NkU1NDQ5RUU4RDlGRDk4QTBGQTRDQjkzM0FCQUI3OEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMUJGRjk2RTU0NDlFRThE OUZEOThBMEZBNENCOTMzQUJBQjc4RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJEVW5OZFZxcjNqMmZQeWlWeGQ5V2RvWDZoRk5ORFhKRmhvQ3ZYUkhnZEpiLzAv MzEzMzM4MmUzNTM5MmUzMTM4MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzQzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKO7wwDQYJKoZIhvcNAQELBQADggEBAM1TEvbx piZau3sFabwDaGHEykpHpS7uDs+jUMEaYYUvrGOFOFTFDeAG3l+mCSf3NxC0fIgk YKSPCdGmqtHU5O0vdbC7c5b/sWhiCYKAnKfNhgNDIzd8F8aK+QuG7ccE3Hd3jSqW u3b6//HesbzLYbEgdukPoeOibkgOPgV5rbRyAtxvS46Yri9C4bxN3ZBC6ElFyjwO xTjACy52I5v3NrHnFrULRMlOxeGvCRappoXbR/MA5wEwFXxkCm3T5sGvCsfVCnwV xyelBTtR9QHHxjTFXjw7XNKF5/nJqb6NLi0OgOw60p80kv4cm0k6SJCaFLMT0+7Y +djI+kRSIuXAblI= -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:20 2025 by rpki-client