This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa File: 3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa (raw, json) Hash identifier: lhgdM6El60Y8BWen8+uwrw2JdaKLj3Nnu2FEMNz3bQg= Subject key identifier: 41:A2:C9:2C:6A:26:FE:18:A7:B2:F6:54:0B:97:1B:6A:25:4C:35:69 Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Certificate serial: 62FCC7E814FC55AF8A9F5B4E34EEB07A40BEBD9F Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa Signing time: Fri 28 Nov 2025 13:22:24 +0000 ROA not before: Fri 28 Nov 2025 13:17:24 +0000 ROA not after: Fri 27 Nov 2026 13:22:24 +0000 asID: 52573 IP address blocks: 177.125.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fc:c7:e8:14:fc:55:af:8a:9f:5b:4e:34:ee:b0:7a:40:be:bd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Validity Not Before: Nov 28 13:17:24 2025 GMT Not After : Nov 27 13:22:24 2026 GMT Subject: CN=41A2C92C6A26FE18A7B2F6540B971B6A254C3569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:0c:79:09:37:7e:13:68:c5:a8:30:4b:08: 49:d3:7e:11:aa:5c:d7:bc:b9:11:fe:cf:24:50:19: 86:3f:0d:ea:ed:af:fb:62:88:c3:2b:c7:72:df:c0: b8:79:d8:ab:9e:fd:c2:d3:fd:08:48:c2:c8:a0:74: 57:8b:02:f5:07:6c:7f:5c:ab:8b:00:d0:f6:14:84: fd:94:93:be:3c:f5:4c:23:99:eb:f0:0d:f1:3e:66: 68:31:46:11:1f:38:dc:6c:83:68:46:f0:a3:77:4a: 1b:ff:62:ff:f9:65:fa:fd:f4:23:89:5a:bb:23:37: 2e:bc:67:da:c0:e9:b2:5b:e0:fc:c1:04:76:da:b2: 70:b5:56:7c:f8:42:54:56:00:18:42:82:34:32:e6: 53:e2:d2:98:3d:d7:7e:24:98:ca:60:41:2e:25:b9: d4:04:47:48:71:32:38:f0:4d:bc:56:af:bd:48:d6: 4e:25:3c:91:0b:68:12:33:ea:da:4d:09:7e:90:3f: 86:2c:7a:c8:2e:a4:30:17:9d:67:85:42:b3:3b:38: 3b:3b:6f:2f:a2:05:ed:e4:f3:3b:f1:17:c9:ef:96: 95:a0:0e:a8:27:cc:99:d0:95:ef:e3:73:ae:da:ad: 53:b9:93:73:0f:31:34:84:18:2d:81:12:cc:ac:1a: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:C9:2C:6A:26:FE:18:A7:B2:F6:54:0B:97:1B:6A:25:4C:35:69 X509v3 Authority Key Identifier: keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.125.108.0/22 Signature Algorithm: sha256WithRSAEncryption 73:6f:75:70:7a:97:cd:84:37:5b:6c:4a:79:fc:e7:3b:17:8d: 9d:71:69:7d:30:3b:e9:a5:cf:3d:46:48:0a:3a:08:ee:51:b9: 0d:a2:a9:b1:b1:32:27:7f:74:31:09:65:34:08:e6:f2:5d:83: 89:dd:b9:a5:08:bb:8f:b0:4b:af:de:44:f7:9c:0d:06:8c:0f: 84:b5:ed:ee:8a:46:df:84:da:98:c5:02:b8:52:67:24:60:b9: 97:0d:8c:6e:7a:d6:03:2c:67:93:35:e9:59:e8:e9:26:ed:fa: 70:23:5a:c2:e0:37:b8:da:4c:aa:33:84:7b:44:fc:45:36:71: 96:15:b7:55:eb:79:c5:18:b4:87:81:b1:ba:e4:3e:c7:0d:73: 4f:2a:d2:04:27:82:8f:1b:76:95:48:07:80:5f:d0:25:c9:e6: 86:2c:ac:72:6a:b5:29:2a:1c:7b:44:de:ab:27:4a:da:a6:2a: 6c:34:94:5b:24:84:7e:8a:87:2e:88:b0:cd:64:db:fa:91:1d: a7:70:8f:1a:76:ac:38:bb:6b:16:97:74:61:24:1e:24:ac:b4: ad:c0:c6:34:e6:01:e4:ac:ee:1e:62:de:56:e1:23:52:97:54: 9a:d4:7a:59:19:25:5f:b1:4d:ee:c3:fd:44:82:f6:c8:5a:b5: 7c:29:6d:3a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUYvzH6BT8Va+Kn1tONO6wekC+vZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4 NjdFMjVDNzAeFw0yNTExMjgxMzE3MjRaFw0yNjExMjcxMzIyMjRaMDMxMTAvBgNV BAMTKDQxQTJDOTJDNkEyNkZFMThBN0IyRjY1NDBCOTcxQjZBMjU0QzM1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPAx5CTd+E2jFqDBLCEnTfhGq XNe8uRH+zyRQGYY/Dertr/tiiMMrx3LfwLh52Kue/cLT/QhIwsigdFeLAvUHbH9c q4sA0PYUhP2Uk7489UwjmevwDfE+ZmgxRhEfONxsg2hG8KN3Shv/Yv/5Zfr99COJ WrsjNy68Z9rA6bJb4PzBBHbasnC1Vnz4QlRWABhCgjQy5lPi0pg9134kmMpgQS4l udQER0hxMjjwTbxWr71I1k4lPJELaBIz6tpNCX6QP4YsesgupDAXnWeFQrM7ODs7 by+iBe3k8zvxF8nvlpWgDqgnzJnQle/jc67arVO5k3MPMTSEGC2BEsysGrSjAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQaLJLGom/hinsvZUC5cbaiVMNWkwHwYDVR0j BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4 MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv MzEzNzM3MmUzMTMyMzUyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKxfWwwDQYJKoZIhvcNAQELBQADggEBAHNvdXB6 l82EN1tsSnn85zsXjZ1xaX0wO+mlzz1GSAo6CO5RuQ2iqbGxMid/dDEJZTQI5vJd g4nduaUIu4+wS6/eRPecDQaMD4S17e6KRt+E2pjFArhSZyRguZcNjG561gMsZ5M1 6Vno6Sbt+nAjWsLgN7jaTKozhHtE/EU2cZYVt1XrecUYtIeBsbrkPscNc08q0gQn go8bdpVIB4Bf0CXJ5oYsrHJqtSkqHHtE3qsnStqmKmw0lFskhH6Khy6IsM1k2/qR Hadwjxp2rDi7axaXdGEkHiSstK3AxjTmAeSs7h5i3lbhI1KXVJrUelkZJV+xTe7D /USC9shatXwpbTo= -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:24 2025 by rpki-client