This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137302e3234342e302e302f32322d3234203d3e203532363939.roa File: 3137302e3234342e302e302f32322d3234203d3e203532363939.roa (raw, json) Hash identifier: 02hcRi0EW2o8dKk9PUBirMsjJW4rpma5NQIzviPsSqc= Subject key identifier: 85:6F:36:CA:BD:F7:F3:C3:73:E3:A0:87:E8:33:DA:61:FA:AF:26:0B Certificate issuer: /CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02 Certificate serial: 355E61DC461B47C9D6E9BE27E00CC8EA7AA399A1 Authority key identifier: ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer Subject info access: rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137302e3234342e302e302f32322d3234203d3e203532363939.roa Signing time: Sat 22 Nov 2025 16:20:59 +0000 ROA not before: Sat 22 Nov 2025 16:15:59 +0000 ROA not after: Sat 21 Nov 2026 16:20:59 +0000 asID: 52699 IP address blocks: 170.244.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 21:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5e:61:dc:46:1b:47:c9:d6:e9:be:27:e0:0c:c8:ea:7a:a3:99:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02 Validity Not Before: Nov 22 16:15:59 2025 GMT Not After : Nov 21 16:20:59 2026 GMT Subject: CN=856F36CABDF7F3C373E3A087E833DA61FAAF260B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:b0:87:e5:b9:41:0e:0c:fe:8c:43:7a:44: e6:5f:97:65:ee:0f:c3:7a:dc:ac:f8:94:78:95:7a: 05:72:ce:30:ae:a9:f1:6d:5b:cd:04:1f:33:a5:4d: 57:a6:57:96:0b:e4:cd:ce:7b:25:8d:58:4b:7c:e3: cb:03:ac:6b:2e:4b:63:93:56:68:c6:22:bd:20:6d: 07:4a:ac:47:d9:72:90:c2:21:46:32:de:12:8a:b5: c7:33:8c:a8:58:31:03:c1:5e:c3:16:d0:78:e9:76: aa:14:93:46:70:0e:fa:45:4f:65:4b:cb:b3:51:5a: de:4b:bf:50:b6:52:7f:f0:2a:fd:45:8f:61:13:14: cf:07:15:82:8a:bf:47:e3:77:d0:37:be:f3:59:ec: 59:84:0e:c6:6b:d4:8f:89:7b:5d:ad:c8:59:88:a6: 52:38:4a:f7:eb:07:af:87:eb:f8:b9:5d:1f:fe:1b: 43:21:97:17:a8:76:97:39:6a:e2:78:aa:a4:78:7c: b9:92:39:f2:fb:b3:4e:e1:4b:42:24:c7:4f:c1:64: 0a:d7:6c:ce:ea:ce:17:39:de:67:e8:d3:27:c3:6a: 0f:04:63:fa:81:fa:10:fb:b5:88:37:9b:33:ec:c5: 62:60:76:72:83:ce:b4:93:45:21:ec:0c:41:f2:3d: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:36:CA:BD:F7:F3:C3:73:E3:A0:87:E8:33:DA:61:FA:AF:26:0B X509v3 Authority Key Identifier: keyid:ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137302e3234342e302e302f32322d3234203d3e203532363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.0.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:de:d9:10:93:54:ca:5a:af:41:21:f2:51:04:91:77:a4:a8: a1:05:91:29:7e:c2:45:29:7f:c8:6b:da:db:ac:8f:6b:f4:3b: 20:c5:28:55:85:79:70:01:f5:40:8b:c0:d3:67:ca:cc:60:65: c9:7a:bb:e1:e1:3d:7e:9b:20:02:48:a4:28:03:82:c0:38:ea: bd:8f:55:d0:cd:03:76:ba:04:ed:94:60:8c:7f:f3:8a:10:74: b1:0a:51:6c:fc:51:17:52:ef:ce:0a:bd:5c:49:59:b2:09:d5: 3c:f9:03:73:fa:95:b2:49:13:3c:73:39:dc:01:7b:9c:94:6b: 40:8d:59:02:8d:96:9c:56:04:ea:d4:ac:f2:4c:72:f0:9e:2d: e9:f3:44:df:13:d5:ce:39:56:c8:83:42:a2:a0:13:00:4c:b9: 4f:b3:32:18:ce:90:b3:50:57:65:40:7f:74:e0:38:a4:ac:ae: c2:fe:70:16:0d:74:ae:f2:3c:8d:fe:48:ef:d1:ac:69:3b:c4: 79:02:98:9e:29:12:bb:77:f7:8c:be:ef:25:40:9a:cf:bc:03: 94:a1:be:4b:22:00:73:47:04:41:15:f2:ae:99:bb:96:5f:90: 5f:2a:af:00:87:c1:3a:11:60:fa:a2:f3:db:2b:ed:bc:f6:73: 1b:10:11:1a -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUNV5h3EYbR8nW6b4n4AzI6nqjmaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ5RkRCODVCRkM4MEMwQTRDQjk0QjAwN0U3NUM2QjQy NzlEQ0IwMjAeFw0yNTExMjIxNjE1NTlaFw0yNjExMjExNjIwNTlaMDMxMTAvBgNV BAMTKDg1NkYzNkNBQkRGN0YzQzM3M0UzQTA4N0U4MzNEQTYxRkFBRjI2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdbCH5blBDgz+jEN6ROZfl2Xu D8N63Kz4lHiVegVyzjCuqfFtW80EHzOlTVemV5YL5M3OeyWNWEt848sDrGsuS2OT VmjGIr0gbQdKrEfZcpDCIUYy3hKKtcczjKhYMQPBXsMW0HjpdqoUk0ZwDvpFT2VL y7NRWt5Lv1C2Un/wKv1Fj2ETFM8HFYKKv0fjd9A3vvNZ7FmEDsZr1I+Je12tyFmI plI4SvfrB6+H6/i5XR/+G0Mhlxeodpc5auJ4qqR4fLmSOfL7s07hS0Ikx0/BZArX bM7qzhc53mfo0yfDag8EY/qB+hD7tYg3mzPsxWJgdnKDzrSTRSHsDEHyPbBRAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUhW82yr3388Nz46CH6DPaYfqvJgswHwYDVR0j BBgwFoAU7Z/bhb/IDApMuUsAfnXGtCedywIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhwbWNIQUpaUENlU2NpOFVjRFhhU01adEtqTTlqejZ3c0t1dndwUGZn MVEvMC9FRDlGREI4NUJGQzgwQzBBNENCOTRCMDA3RTc1QzZCNDI3OURDQjAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEOUZEQjg1QkZDODBDMEE0 Q0I5NEIwMDdFNzVDNkI0Mjc5RENCMDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM4cG1jSEFKWlBDZVNjaThVY0RYYVNNWnRLak05ano2d3NLdXZ3cFBmZzFRLzAv MzEzNzMwMmUzMjM0MzQyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM2 MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAqr0ADANBgkqhkiG9w0BAQsFAAOCAQEALd7ZEJNUylqv QSHyUQSRd6SooQWRKX7CRSl/yGva26yPa/Q7IMUoVYV5cAH1QIvA02fKzGBlyXq7 4eE9fpsgAkikKAOCwDjqvY9V0M0DdroE7ZRgjH/zihB0sQpRbPxRF1Lvzgq9XElZ sgnVPPkDc/qVskkTPHM53AF7nJRrQI1ZAo2WnFYE6tSs8kxy8J4t6fNE3xPVzjlW yINCoqATAEy5T7MyGM6Qs1BXZUB/dOA4pKyuwv5wFg10rvI8jf5I79GsaTvEeQKY nikSu3f3jL7vJUCaz7wDlKG+SyIAc0cEQRXyrpm7ll+QXyqvAIfBOhFg+qLz2yvt vPZzGxARGg== -----END CERTIFICATE-----Generated at Thu Dec 18 00:40:48 2025 by rpki-client