This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133312e302e31322e302f32322d3234203d3e203532353733.roa File: 3133312e302e31322e302f32322d3234203d3e203532353733.roa (raw, json) Hash identifier: Vy8LCIusmoV2b/ZGxjzyKb15jNhNszZFb3JAw+iL4LE= Subject key identifier: 62:6F:32:2A:54:98:22:61:07:E1:3E:F9:0C:38:69:5D:71:B1:D2:54 Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Certificate serial: 100E75940E79A2832BD7D5D613CFAAE8D876F7B5 Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133312e302e31322e302f32322d3234203d3e203532353733.roa Signing time: Fri 28 Nov 2025 13:22:24 +0000 ROA not before: Fri 28 Nov 2025 13:17:24 +0000 ROA not after: Fri 27 Nov 2026 13:22:24 +0000 asID: 52573 IP address blocks: 131.0.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0e:75:94:0e:79:a2:83:2b:d7:d5:d6:13:cf:aa:e8:d8:76:f7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Validity Not Before: Nov 28 13:17:24 2025 GMT Not After : Nov 27 13:22:24 2026 GMT Subject: CN=626F322A5498226107E13EF90C38695D71B1D254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:55:0b:af:8a:4d:7b:f1:8c:a2:28:ca:3e: 72:16:4d:7e:fb:51:d0:03:ba:97:85:d3:a5:91:c0: b4:d4:55:7b:ab:98:0e:ac:3a:9b:de:f3:5a:ff:7e: 70:22:92:4b:77:38:68:65:33:28:22:05:26:6a:75: fb:32:d3:a5:b5:43:04:ca:50:5a:4f:84:b7:29:d2: 64:ce:cd:0a:f7:c5:97:33:b6:cd:97:ef:56:2b:ff: c1:73:73:4a:2b:ff:3b:de:aa:97:5b:12:37:20:d6: fa:e2:de:fd:89:38:13:db:97:db:91:78:54:9e:b7: a0:61:ae:f7:18:ce:44:9d:6e:0e:56:fd:33:69:a1: 9d:97:f3:ad:c5:5b:72:f0:27:3d:07:46:db:71:3d: 01:0b:90:2a:a8:45:93:f3:15:e6:3b:ad:98:33:65: 04:cd:7f:d3:48:2d:cd:15:c2:42:03:2a:32:55:cd: f4:bc:4f:f2:f7:13:d8:38:be:4b:ad:f4:45:3e:ec: d9:a1:13:d0:55:5c:8f:44:e2:f2:54:e1:c7:0b:b9: b6:ce:94:ae:92:c8:5a:cb:12:a3:f5:45:74:84:70: f8:9d:33:29:58:d5:49:5c:0d:53:55:98:b0:db:e4: a7:39:5d:db:1a:a8:b7:90:d3:44:62:6b:86:fa:e8: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6F:32:2A:54:98:22:61:07:E1:3E:F9:0C:38:69:5D:71:B1:D2:54 X509v3 Authority Key Identifier: keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133312e302e31322e302f32322d3234203d3e203532353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.12.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:21:95:a1:27:7c:a9:68:51:cc:68:ee:11:82:02:76:16:e9: 82:56:f9:3a:bc:aa:b4:18:0b:5b:28:a1:43:c2:ab:8c:98:8b: b8:7d:f6:91:5e:37:95:d0:77:a2:31:66:a2:2f:14:28:6c:c9: ce:4a:d4:2a:d5:30:50:24:d6:91:51:c9:97:6f:55:4b:00:c3: 62:09:25:ce:1a:3a:4f:3a:0c:38:9e:b2:7a:fa:79:49:00:73: 47:2f:6d:17:9f:2e:1a:58:11:02:ca:df:e1:ae:75:db:3e:61: 34:1d:54:7c:27:70:e8:7b:2d:08:81:62:75:b6:02:94:bb:57: 67:5d:79:2c:34:e3:86:66:f0:84:1e:fd:3e:e0:7d:00:13:6e: 2a:6a:94:9d:a0:44:75:d8:1f:2e:07:20:46:60:8a:89:88:7b: 6d:51:36:67:4e:7a:8a:86:c5:38:c0:7b:a6:96:b0:a3:d5:04: 1d:b9:b2:b5:75:e7:11:bc:0a:e7:5f:7c:96:ad:85:8f:3d:8e: ce:32:95:14:9e:3d:21:c5:64:62:35:af:8f:33:09:c7:28:ed: f8:79:d5:91:a0:08:37:7b:cd:f6:03:a0:75:28:bd:68:33:ac: be:29:cf:3b:b2:85:91:55:df:d4:5e:c2:47:31:74:fa:d4:31: 64:14:bb:79 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUEA51lA55ooMr19XWE8+q6Nh297UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4 NjdFMjVDNzAeFw0yNTExMjgxMzE3MjRaFw0yNjExMjcxMzIyMjRaMDMxMTAvBgNV BAMTKDYyNkYzMjJBNTQ5ODIyNjEwN0UxM0VGOTBDMzg2OTVENzFCMUQyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnslULr4pNe/GMoijKPnIWTX77 UdADupeF06WRwLTUVXurmA6sOpve81r/fnAikkt3OGhlMygiBSZqdfsy06W1QwTK UFpPhLcp0mTOzQr3xZczts2X71Yr/8Fzc0or/zveqpdbEjcg1vri3v2JOBPbl9uR eFSet6BhrvcYzkSdbg5W/TNpoZ2X863FW3LwJz0HRttxPQELkCqoRZPzFeY7rZgz ZQTNf9NILc0VwkIDKjJVzfS8T/L3E9g4vkut9EU+7NmhE9BVXI9E4vJU4ccLubbO lK6SyFrLEqP1RXSEcPidMylY1UlcDVNVmLDb5Kc5XdsaqLeQ00Ria4b66GVxAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUYm8yKlSYImEH4T75DDhpXXGx0lQwHwYDVR0j BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4 MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv MzEzMzMxMmUzMDJlMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzNTM3 MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKDAAwwDQYJKoZIhvcNAQELBQADggEBADwhlaEnfKloUcxo 7hGCAnYW6YJW+Tq8qrQYC1sooUPCq4yYi7h99pFeN5XQd6IxZqIvFChsyc5K1CrV MFAk1pFRyZdvVUsAw2IJJc4aOk86DDiesnr6eUkAc0cvbRefLhpYEQLK3+Gudds+ YTQdVHwncOh7LQiBYnW2ApS7V2ddeSw044Zm8IQe/T7gfQATbipqlJ2gRHXYHy4H IEZgiomIe21RNmdOeoqGxTjAe6aWsKPVBB25srV15xG8CudffJathY89js4ylRSe PSHFZGI1r48zCcco7fh51ZGgCDd7zfYDoHUovWgzrL4pzzuyhZFV39RewkcxdPrU MWQUu3k= -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:31 2025 by rpki-client