This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa File: 3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa (raw, json) Hash identifier: /yl/fehTaorJcnkCXcMPUzU2/rpH51PjwzoUj8hnc9g= Subject key identifier: 84:55:D1:11:22:58:CD:AF:8F:5B:C7:90:A2:51:88:B7:B5:8C:9D:96 Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Certificate serial: 73BD80E01AB92AE4BD85E73943ABF38D20F49C95 Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa Signing time: Fri 28 Nov 2025 13:22:24 +0000 ROA not before: Fri 28 Nov 2025 13:17:24 +0000 ROA not after: Fri 27 Nov 2026 13:22:24 +0000 asID: 52573 IP address blocks: 143.255.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bd:80:e0:1a:b9:2a:e4:bd:85:e7:39:43:ab:f3:8d:20:f4:9c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Validity Not Before: Nov 28 13:17:24 2025 GMT Not After : Nov 27 13:22:24 2026 GMT Subject: CN=8455D1112258CDAF8F5BC790A25188B7B58C9D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:21:85:8b:88:b1:5d:a3:5e:bd:5a:e1:50: 76:3a:9e:b7:e2:10:51:2d:10:0b:0b:84:3f:fd:a4: 22:5d:7b:98:17:16:4a:80:a0:f6:17:e8:96:f0:d0: 7a:e5:0f:97:49:0f:93:f5:aa:c3:c0:31:27:ae:db: 7e:21:c6:33:0b:bf:37:e6:0d:82:8d:8d:cc:e5:41: 56:81:b3:b3:61:e2:ed:0d:bf:4e:3e:5b:03:d3:67: cc:6d:65:2d:d5:6b:5c:85:7b:34:9a:73:d1:2f:21: 88:9d:0b:f9:f8:ed:22:c0:ef:da:6e:11:99:b7:bf: 7c:e3:ea:83:83:e5:fe:42:aa:f2:72:90:c8:80:69: 47:fa:10:c9:d3:f5:e8:ef:ab:bc:dc:e9:78:03:bc: 97:ba:c2:54:4c:e0:e5:4c:d4:2c:26:3b:c7:20:94: e2:4d:ca:03:3e:e0:2f:d9:2d:47:c5:d5:ab:d5:5a: fc:d1:97:68:dd:3f:4b:d7:1c:73:9d:5a:65:3c:05: 42:b9:d2:65:de:4a:9d:bc:fc:d7:d7:12:09:bd:c7: c0:fd:17:50:e1:25:5a:5f:4c:e7:01:ef:84:42:71: 4f:ba:7e:41:83:b5:c0:40:60:f0:a6:ef:96:a4:2e: 92:1f:70:2e:93:4a:0a:52:7b:72:76:14:56:2f:94: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:55:D1:11:22:58:CD:AF:8F:5B:C7:90:A2:51:88:B7:B5:8C:9D:96 X509v3 Authority Key Identifier: keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.148.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:d6:5b:a9:c2:22:38:ea:28:b4:d6:cd:87:d3:7a:2d:7c:d4: 82:10:1d:03:ac:06:6d:2c:94:23:3a:d5:77:f3:6a:02:14:16: 62:b4:45:47:b4:26:aa:03:c9:6e:aa:0d:33:43:2a:72:f3:1e: 8b:c5:ae:c0:e7:b8:9b:fa:68:7a:51:20:55:9d:2e:e9:d0:aa: 4a:d9:6c:99:f4:41:59:e2:95:b5:e6:19:9d:a4:51:64:f1:2c: ee:99:e4:9b:3f:fa:ed:f5:c6:ae:a5:21:11:4e:0a:ce:31:5c: 8c:13:b5:c4:9a:eb:86:02:19:b4:4c:64:69:93:24:21:2d:3a: 03:76:cd:14:10:dc:9b:55:a4:ca:2b:ca:35:e5:db:8c:f2:be: eb:74:2b:03:77:55:6b:14:8c:ab:43:29:82:f2:5f:7c:45:83: 01:c0:11:7d:db:98:e2:96:82:2a:0f:3c:d8:6e:39:47:21:25: 47:76:f7:0a:b6:56:96:95:5c:7b:ab:d7:08:58:64:1a:d1:86: 7c:81:82:a1:19:6c:13:17:21:09:e3:24:92:38:19:6b:43:a1: 2b:9a:ee:cf:52:ff:04:ca:25:7f:10:ec:90:ed:53:55:44:69: 28:4c:44:2c:43:ba:41:cf:eb:be:51:0d:f4:f6:1b:8a:44:1f: 79:d8:6c:c5 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUc72A4Bq5KuS9hec5Q6vzjSD0nJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4 NjdFMjVDNzAeFw0yNTExMjgxMzE3MjRaFw0yNjExMjcxMzIyMjRaMDMxMTAvBgNV BAMTKDg0NTVEMTExMjI1OENEQUY4RjVCQzc5MEEyNTE4OEI3QjU4QzlEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7CGFi4ixXaNevVrhUHY6nrfi EFEtEAsLhD/9pCJde5gXFkqAoPYX6Jbw0HrlD5dJD5P1qsPAMSeu234hxjMLvzfm DYKNjczlQVaBs7Nh4u0Nv04+WwPTZ8xtZS3Va1yFezSac9EvIYidC/n47SLA79pu EZm3v3zj6oOD5f5CqvJykMiAaUf6EMnT9ejvq7zc6XgDvJe6wlRM4OVM1CwmO8cg lOJNygM+4C/ZLUfF1avVWvzRl2jdP0vXHHOdWmU8BUK50mXeSp28/NfXEgm9x8D9 F1DhJVpfTOcB74RCcU+6fkGDtcBAYPCm75akLpIfcC6TSgpSe3J2FFYvlAaTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUhFXRESJYza+PW8eQolGIt7WMnZYwHwYDVR0j BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4 MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv MzEzNDMzMmUzMjM1MzUyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKP/5QwDQYJKoZIhvcNAQELBQADggEBAG3WW6nC IjjqKLTWzYfTei181IIQHQOsBm0slCM61XfzagIUFmK0RUe0JqoDyW6qDTNDKnLz HovFrsDnuJv6aHpRIFWdLunQqkrZbJn0QVnilbXmGZ2kUWTxLO6Z5Js/+u31xq6l IRFOCs4xXIwTtcSa64YCGbRMZGmTJCEtOgN2zRQQ3JtVpMoryjXl24zyvut0KwN3 VWsUjKtDKYLyX3xFgwHAEX3bmOKWgioPPNhuOUchJUd29wq2VpaVXHur1whYZBrR hnyBgqEZbBMXIQnjJJI4GWtDoSua7s9S/wTKJX8Q7JDtU1VEaShMRCxDukHP675R DfT2G4pEH3nYbMU= -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:10 2025 by rpki-client