This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa File: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (raw, json) Hash identifier: nlTw0GIIpp6SyPsVEPHRac40g2ydnw4rzlurpGEhgGU= Subject key identifier: F1:70:76:1C:B5:AB:CC:84:A1:A4:0E:67:48:59:DB:FF:94:DF:08:F9 Certificate issuer: /CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560 Certificate serial: 29B5C4A9DA24A98A383EC25288D62B7FD4036CD4 Authority key identifier: 34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa Signing time: Mon 01 Dec 2025 18:53:26 +0000 ROA not before: Mon 01 Dec 2025 18:48:26 +0000 ROA not after: Mon 30 Nov 2026 18:53:26 +0000 asID: 263468 IP address blocks: 131.255.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b5:c4:a9:da:24:a9:8a:38:3e:c2:52:88:d6:2b:7f:d4:03:6c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560 Validity Not Before: Dec 1 18:48:26 2025 GMT Not After : Nov 30 18:53:26 2026 GMT Subject: CN=F170761CB5ABCC84A1A40E674859DBFF94DF08F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:9d:25:68:ff:ab:72:73:c0:b5:e1:5f:2b: fc:67:38:c5:bc:b2:56:83:d4:a2:d4:a7:ba:98:01: aa:5f:e7:78:d4:90:9e:17:71:0e:e3:10:c2:1f:ee: 42:34:38:6c:cc:a2:e6:c9:3f:4c:c6:ee:3f:5c:d9: 48:82:99:0d:7b:d0:d9:83:dc:d8:b0:6e:4f:4f:38: de:7b:13:16:51:ec:99:ab:a3:ec:82:c4:a5:a3:2c: 2c:c5:b7:19:cb:e9:a6:c2:c0:e6:58:f3:5a:0f:4f: f4:28:b2:7c:16:d5:00:b9:7f:62:e9:9d:cc:ac:65: 77:a5:ec:2e:ff:ab:bf:b3:4e:2f:53:76:d2:30:e2: 35:d3:59:2f:75:36:ae:e7:dd:4a:2f:56:48:9e:eb: 16:72:dd:94:cf:55:eb:17:f1:af:9c:06:59:f8:91: 06:fd:15:49:23:90:57:47:3f:d8:af:f0:b0:8d:df: ee:ea:1a:37:0d:0d:91:92:cf:de:f1:65:75:8c:cc: e5:22:38:c0:63:cc:d4:ac:f4:c8:92:a3:b1:f0:1c: 11:3e:6d:e8:2d:56:82:7d:02:2e:4f:a3:e3:b3:05: 4a:a7:55:fa:94:90:08:cf:a6:32:a2:37:c1:ed:12: 82:e9:b1:e3:43:09:1b:a6:4d:18:73:d4:6b:b4:06: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:76:1C:B5:AB:CC:84:A1:A4:0E:67:48:59:DB:FF:94:DF:08:F9 X509v3 Authority Key Identifier: keyid:34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.96.0/22 Signature Algorithm: sha256WithRSAEncryption b4:26:fd:07:8b:1e:ae:08:b7:1f:e8:b8:24:06:2b:27:cd:82: 88:7c:08:b0:20:94:4a:27:4e:15:6b:90:94:82:6b:d3:c9:96: 83:28:8f:ff:9c:92:9a:e5:9f:1c:04:05:c5:0a:bd:7c:cd:60: 7d:7e:56:da:00:31:ce:a3:df:14:f5:5a:ac:49:39:6d:81:40: ec:78:2d:31:b7:75:58:e0:a1:c0:f3:bf:de:53:16:07:4b:1d: 5f:a8:f6:97:d7:f2:37:ad:fe:00:b9:7b:9d:da:42:b3:c3:58: 99:cf:d0:42:1e:50:81:c2:f7:0c:99:ed:1a:4e:90:48:78:d4: 10:05:c8:5c:61:15:56:c0:c2:ff:74:83:0d:53:29:56:8f:e1: f7:dd:eb:ac:47:ac:71:f1:cb:57:26:d7:97:64:e7:82:74:d0: c7:eb:c7:3e:e6:46:66:5f:68:e3:68:3f:7b:96:15:e3:fd:4a: 05:7b:19:a3:e7:f8:df:ba:ca:c5:8b:b5:42:19:2c:88:a7:40: aa:11:2c:66:d9:be:12:ee:84:ad:18:ed:43:61:22:e7:d2:c0: e9:3a:15:97:ae:ee:19:f7:49:c8:0c:94:e6:e3:04:c5:54:5e: 66:d7:b4:05:fc:35:cb:e4:65:7d:7d:89:bd:0b:c2:0c:07:1d: 82:9c:54:81 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUKbXEqdokqYo4PsJSiNYrf9QDbNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3N0YxQTM0RUM0QTU3MEQ5MjM2MkEzQjE2NUNCMDNG QTFBODU2MDAeFw0yNTEyMDExODQ4MjZaFw0yNjExMzAxODUzMjZaMDMxMTAvBgNV BAMTKEYxNzA3NjFDQjVBQkNDODRBMUE0MEU2NzQ4NTlEQkZGOTRERjA4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacp0laP+rcnPAteFfK/xnOMW8 slaD1KLUp7qYAapf53jUkJ4XcQ7jEMIf7kI0OGzMoubJP0zG7j9c2UiCmQ170NmD 3Niwbk9PON57ExZR7Jmro+yCxKWjLCzFtxnL6abCwOZY81oPT/QosnwW1QC5f2Lp ncysZXel7C7/q7+zTi9TdtIw4jXTWS91Nq7n3UovVkie6xZy3ZTPVesX8a+cBln4 kQb9FUkjkFdHP9iv8LCN3+7qGjcNDZGSz97xZXWMzOUiOMBjzNSs9MiSo7HwHBE+ begtVoJ9Ai5Po+OzBUqnVfqUkAjPpjKiN8HtEoLpseNDCRumTRhz1Gu0Bhq9AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU8XB2HLWrzIShpA5nSFnb/5TfCPkwHwYDVR0j BBgwFoAUNHfxo07EpXDZI2KjsWXLA/oahWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC8zNDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0NzdGMUEzNEVDNEE1NzBE OTIzNjJBM0IxNjVDQjAzRkExQTg1NjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJONVk2MjVnblRBTlBpVm1UTHROeDVQNlJKSHRNRVJjZXNLY2czcWNFYW5ZLzAv MzEzMzMxMmUzMjM1MzUyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzMzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKD/2AwDQYJKoZIhvcNAQELBQADggEBALQm/QeL Hq4Itx/ouCQGKyfNgoh8CLAglEonThVrkJSCa9PJloMoj/+ckprlnxwEBcUKvXzN YH1+VtoAMc6j3xT1WqxJOW2BQOx4LTG3dVjgocDzv95TFgdLHV+o9pfX8jet/gC5 e53aQrPDWJnP0EIeUIHC9wyZ7RpOkEh41BAFyFxhFVbAwv90gw1TKVaP4ffd66xH rHHxy1cm15dk54J00Mfrxz7mRmZfaONoP3uWFeP9SgV7GaPn+N+6ysWLtUIZLIin QKoRLGbZvhLuhK0Y7UNhIufSwOk6FZeu7hn3ScgMlObjBMVUXmbXtAX8NcvkZX19 ib0LwgwHHYKcVIE= -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:21 2025 by rpki-client