This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa File: 3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa (raw, json) Hash identifier: XUOumE/I+IimOMk3GJCfiVX5mMNBIDT0de4zXxRbt4Y= Subject key identifier: 00:0C:DC:16:41:72:81:FF:1F:7E:83:12:A2:28:54:68:33:17:7B:33 Certificate issuer: /CN=22F9EC8EF5C308D20DE0899FD2022E6A462A6271 Certificate serial: 54248D087A774BE421C6BB1F32BA3033D7C9BCB9 Authority key identifier: 22:F9:EC:8E:F5:C3:08:D2:0D:E0:89:9F:D2:02:2E:6A:46:2A:62:71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.cer Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa Signing time: Sat 08 Nov 2025 13:38:51 +0000 ROA not before: Sat 08 Nov 2025 13:33:51 +0000 ROA not after: Sat 07 Nov 2026 13:38:51 +0000 asID: 262675 IP address blocks: 190.111.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.crl rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:24:8d:08:7a:77:4b:e4:21:c6:bb:1f:32:ba:30:33:d7:c9:bc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22F9EC8EF5C308D20DE0899FD2022E6A462A6271 Validity Not Before: Nov 8 13:33:51 2025 GMT Not After : Nov 7 13:38:51 2026 GMT Subject: CN=000CDC16417281FF1F7E8312A228546833177B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:92:3a:96:2d:c4:a0:2c:4d:62:80:b1:6a: 79:23:25:29:f7:36:81:6f:03:56:a6:f8:88:6b:a5: 2e:c9:e5:06:16:2d:d0:50:39:61:09:d3:27:7c:f5: 39:49:f3:af:a8:28:48:91:fe:18:81:c1:80:98:c2: 81:02:dc:b0:df:c5:37:d2:e9:ce:3f:16:64:f3:ce: ca:f1:00:be:8c:7f:ca:4c:6f:0c:16:a0:c1:90:48: 7f:6f:b2:c2:80:9b:7a:45:09:71:27:19:33:a1:fd: 2b:6f:2e:c1:8d:15:e4:78:4a:46:4b:5e:72:b3:bd: 88:80:a7:3d:02:89:c5:43:0a:d9:46:1b:6e:01:1c: 02:86:e1:ff:2b:22:d1:78:1b:5b:f1:fa:b3:2b:d1: 0f:6d:cc:19:91:a1:9d:e7:56:b4:ee:bc:a4:9b:eb: a1:39:42:89:b0:f0:0d:5a:8e:ad:7e:0d:98:b4:01: a2:bf:72:0a:f6:7b:49:44:91:02:04:d8:f1:f5:a1: 9a:0f:2e:cc:59:2e:bf:f7:82:30:bb:02:86:84:d6: 63:62:b9:10:94:5c:8e:20:aa:8a:c3:49:e1:2e:0e: 31:4c:c6:27:41:f4:c3:64:95:37:84:17:64:e6:4c: 22:76:1c:83:07:74:71:25:01:fc:98:f9:37:08:6e: 56:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0C:DC:16:41:72:81:FF:1F:7E:83:12:A2:28:54:68:33:17:7B:33 X509v3 Authority Key Identifier: keyid:22:F9:EC:8E:F5:C3:08:D2:0D:E0:89:9F:D2:02:2E:6A:46:2A:62:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.128.0/22 Signature Algorithm: sha256WithRSAEncryption 48:38:5c:b8:58:e5:8c:95:b1:bd:09:08:04:26:c6:2a:dc:56: 98:87:cf:c2:f4:b6:ee:77:d7:ab:ec:20:36:38:79:e4:fa:dc: 08:c9:25:87:31:21:64:90:f4:a3:7a:dd:3c:6a:ef:75:14:16: a9:ca:2d:4e:d1:d1:5b:d5:73:28:29:a1:0b:43:df:51:be:7c: 3b:80:f5:37:3b:1c:c5:f7:15:5c:c8:e5:74:24:ca:ef:6f:80: 90:d4:e3:6e:42:07:3c:eb:99:f9:41:09:ee:a4:27:d1:d7:b7: c3:ae:9d:43:cd:e9:51:89:6f:fe:b3:49:ac:8b:7c:a7:67:0b: 2f:0d:75:a3:d0:ee:aa:85:83:3c:e8:9a:64:e9:df:ba:23:d8: c8:38:f7:89:82:8c:82:3e:d4:f1:68:b9:75:3b:fb:d6:c5:dc: 8f:26:89:85:8f:95:d3:b4:5c:0d:b3:80:ef:30:fa:23:3b:ed: 84:2c:b1:1a:6e:36:26:08:37:82:34:0f:77:80:c8:2f:28:dc: 41:f9:65:78:c4:a4:47:1b:49:d8:3f:02:25:ae:0d:f8:a6:ca: 7b:92:d3:27:5a:5b:ac:cf:29:e2:0a:b8:29:65:c6:53:7d:a6: 13:69:08:86:ff:73:b3:fb:4a:55:15:ea:49:51:00:d9:99:73: bd:c4:7a:71 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUVCSNCHp3S+QhxrsfMrowM9fJvLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJGOUVDOEVGNUMzMDhEMjBERTA4OTlGRDIwMjJFNkE0 NjJBNjI3MTAeFw0yNTExMDgxMzMzNTFaFw0yNjExMDcxMzM4NTFaMDMxMTAvBgNV BAMTKDAwMENEQzE2NDE3MjgxRkYxRjdFODMxMkEyMjg1NDY4MzMxNzdCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowZI6li3EoCxNYoCxankjJSn3 NoFvA1am+IhrpS7J5QYWLdBQOWEJ0yd89TlJ86+oKEiR/hiBwYCYwoEC3LDfxTfS 6c4/FmTzzsrxAL6Mf8pMbwwWoMGQSH9vssKAm3pFCXEnGTOh/StvLsGNFeR4SkZL XnKzvYiApz0CicVDCtlGG24BHAKG4f8rItF4G1vx+rMr0Q9tzBmRoZ3nVrTuvKSb 66E5Qomw8A1ajq1+DZi0AaK/cgr2e0lEkQIE2PH1oZoPLsxZLr/3gjC7AoaE1mNi uRCUXI4gqorDSeEuDjFMxidB9MNklTeEF2TmTCJ2HIMHdHElAfyY+TcIblbfAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUAAzcFkFygf8ffoMSoihUaDMXezMwHwYDVR0j BBgwFoAUIvnsjvXDCNIN4Imf0gIuakYqYnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr dzIvMC8yMkY5RUM4RUY1QzMwOEQyMERFMDg5OUZEMjAyMkU2QTQ2MkE2MjcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyRjlFQzhFRjVDMzA4RDIw REUwODk5RkQyMDIyRTZBNDYyQTYyNzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM1TGtkdDlTZExFWjl2NXNVRVp6dmtHTXdSVDR4QjluTVZMZmdpcmpHa3cyLzAv MzEzOTMwMmUzMTMxMzEyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMjM2MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5vgDANBgkqhkiG9w0BAQsFAAOCAQEASDhc uFjljJWxvQkIBCbGKtxWmIfPwvS27nfXq+wgNjh55PrcCMklhzEhZJD0o3rdPGrv dRQWqcotTtHRW9VzKCmhC0PfUb58O4D1NzscxfcVXMjldCTK72+AkNTjbkIHPOuZ +UEJ7qQn0de3w66dQ83pUYlv/rNJrIt8p2cLLw11o9DuqoWDPOiaZOnfuiPYyDj3 iYKMgj7U8Wi5dTv71sXcjyaJhY+V07RcDbOA7zD6IzvthCyxGm42Jgg3gjQPd4DI LyjcQflleMSkRxtJ2D8CJa4N+KbKe5LTJ1pbrM8p4gq4KWXGU32mE2kIhv9zs/tK VRXqSVEA2ZlzvcR6cQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:47 2025 by rpki-client