This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa File: 3138362e3230392e38382e302f32322d3234203d3e203238363130.roa (raw, json) Hash identifier: Jhfb7/e/5nY5GHcQrZ0hViKV3qlJ5Mu42D3e1gOHxq8= Subject key identifier: BF:4E:70:DC:FA:7E:16:10:6C:94:B2:34:F9:3E:30:D8:D6:A4:59:83 Certificate issuer: /CN=60EEB14366167B3674317BA9E6750B9EE81BFBE9 Certificate serial: 1D3E0B5F3224A61A29D1A76A259327967B9C6FAF Authority key identifier: 60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa Signing time: Tue 18 Nov 2025 11:34:43 +0000 ROA not before: Tue 18 Nov 2025 11:29:43 +0000 ROA not after: Tue 17 Nov 2026 11:34:43 +0000 asID: 28610 IP address blocks: 186.209.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.crl rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3e:0b:5f:32:24:a6:1a:29:d1:a7:6a:25:93:27:96:7b:9c:6f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EEB14366167B3674317BA9E6750B9EE81BFBE9 Validity Not Before: Nov 18 11:29:43 2025 GMT Not After : Nov 17 11:34:43 2026 GMT Subject: CN=BF4E70DCFA7E16106C94B234F93E30D8D6A45983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:a4:6b:b0:b4:82:a6:9b:15:63:ca:8d:22: 08:69:87:b6:0d:4b:e2:9a:85:f4:50:da:d3:70:96: dc:dd:62:4c:06:15:78:4e:2f:9c:12:f8:00:8e:1e: 1c:3c:1a:5b:17:5c:0b:97:5b:08:72:02:f1:14:56: 9e:ea:23:a6:7a:59:73:85:d8:35:30:33:e4:0e:ab: dc:db:18:3e:bd:ac:8e:66:d5:a2:44:bd:77:b9:c5: 65:05:2a:4a:33:0f:7e:c3:a8:92:10:dd:3a:f9:2f: f7:20:b7:78:88:e5:56:dd:4e:ef:09:f0:87:46:98: d7:e4:31:c2:2a:bc:03:54:95:34:6a:70:6c:42:e4: b2:a1:b3:21:a1:5c:bc:3d:30:09:d9:08:f9:75:fa: 86:99:cc:4d:2c:48:70:51:24:c8:65:cf:7e:6a:c3: fc:7d:ff:2d:9f:fd:82:56:32:7d:b2:d7:b1:c2:40: 8d:5c:5e:94:84:fd:90:cf:82:fa:3a:62:7a:fd:5f: 0e:17:06:71:4e:3a:0e:a9:f6:2e:60:e1:59:42:17: d0:01:a7:25:0d:0a:03:4c:7b:14:8a:be:d7:20:62: c5:cd:20:65:47:0e:d0:42:d0:86:c3:96:96:c3:87: 8b:b2:72:29:a1:31:59:33:b7:b1:12:f6:0e:48:1f: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4E:70:DC:FA:7E:16:10:6C:94:B2:34:F9:3E:30:D8:D6:A4:59:83 X509v3 Authority Key Identifier: keyid:60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.209.88.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:b7:84:21:aa:2b:be:00:53:b1:55:50:4f:bf:09:1f:01:c7: 3a:46:41:57:59:a9:ef:28:5b:6a:40:a3:3d:ea:08:3b:32:7d: 4f:0d:20:40:6d:89:de:8d:b4:37:19:39:ae:5f:7f:a0:b8:f7: df:d9:5f:db:96:c1:dd:16:ee:58:ca:1c:e9:a3:ad:de:69:22: 08:6b:a7:a7:3a:a8:ec:be:b1:ff:ac:a4:1d:dc:23:7b:fd:a8: 44:c8:01:4f:30:3b:5f:bc:62:ea:fe:fe:26:07:0a:f6:23:f1: 31:8b:dc:f7:98:51:de:f6:ed:ef:4a:c6:05:fc:82:52:7b:71: 57:cb:b7:1f:61:b0:51:9b:8e:7a:ad:59:81:69:a3:36:bc:0a: 0d:d5:a1:c1:e3:e8:96:6c:63:d9:be:86:31:d8:ad:b4:61:db: 84:32:66:78:3c:4d:f3:4d:bb:db:b4:81:08:82:53:89:68:1b: 84:da:91:1b:80:8c:71:73:9e:d5:32:2a:28:6b:01:66:61:d8: 14:e4:79:eb:3b:8a:7a:fd:ca:90:8f:46:79:f0:86:c0:84:d9: 3e:64:52:54:33:47:bc:82:2c:da:66:2a:a4:08:2b:ec:f3:11: 02:d2:ec:cb:15:9c:99:b9:45:bc:00:09:1c:fb:ed:12:9f:3a: 03:49:76:6d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUHT4LXzIkphop0adqJZMnlnucb68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUIxNDM2NjE2N0IzNjc0MzE3QkE5RTY3NTBCOUVF ODFCRkJFOTAeFw0yNTExMTgxMTI5NDNaFw0yNjExMTcxMTM0NDNaMDMxMTAvBgNV BAMTKEJGNEU3MERDRkE3RTE2MTA2Qzk0QjIzNEY5M0UzMEQ4RDZBNDU5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oKRrsLSCppsVY8qNIghph7YN S+KahfRQ2tNwltzdYkwGFXhOL5wS+ACOHhw8GlsXXAuXWwhyAvEUVp7qI6Z6WXOF 2DUwM+QOq9zbGD69rI5m1aJEvXe5xWUFKkozD37DqJIQ3Tr5L/cgt3iI5VbdTu8J 8IdGmNfkMcIqvANUlTRqcGxC5LKhsyGhXLw9MAnZCPl1+oaZzE0sSHBRJMhlz35q w/x9/y2f/YJWMn2y17HCQI1cXpSE/ZDPgvo6Ynr9Xw4XBnFOOg6p9i5g4VlCF9AB pyUNCgNMexSKvtcgYsXNIGVHDtBC0IbDlpbDh4uycimhMVkzt7ES9g5IH0IHAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUv05w3Pp+FhBslLI0+T4w2NakWYMwHwYDVR0j BBgwFoAUYO6xQ2YWezZ0MXup5nULnugb++kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZNUdLZGk4Nmda a0gvMC82MEVFQjE0MzY2MTY3QjM2NzQzMTdCQTlFNjc1MEI5RUU4MUJGQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRUVCMTQzNjYxNjdCMzY3 NDMxN0JBOUU2NzUwQjlFRTgxQkZCRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJmMndrRjl3WFlhRHBGSmJCWmlmUjI1a0ZHVTZFRGtDWTVHS2RpODZnWmtILzAv MzEzODM2MmUzMjMwMzkyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4 MzYzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCutFYMA0GCSqGSIb3DQEBCwUAA4IBAQAtt4Qhqiu+ AFOxVVBPvwkfAcc6RkFXWanvKFtqQKM96gg7Mn1PDSBAbYnejbQ3GTmuX3+guPff 2V/blsHdFu5Yyhzpo63eaSIIa6enOqjsvrH/rKQd3CN7/ahEyAFPMDtfvGLq/v4m Bwr2I/Exi9z3mFHe9u3vSsYF/IJSe3FXy7cfYbBRm456rVmBaaM2vAoN1aHB4+iW bGPZvoYx2K20YduEMmZ4PE3zTbvbtIEIglOJaBuE2pEbgIxxc57VMiooawFmYdgU 5HnrO4p6/cqQj0Z58IbAhNk+ZFJUM0e8gizaZiqkCCvs8xEC0uzLFZyZuUW8AAkc ++0SnzoDSXZt -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:33 2025 by rpki-client