This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa File: 3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa (raw, json) Hash identifier: wHZYkF+0Pnvu2N041VpW9Zt63iCtp6QlOdcU9AjKi2Q= Subject key identifier: DD:5E:A0:25:8A:40:1F:4E:9B:DE:A2:B6:2F:B3:83:E3:55:66:59:AF Certificate issuer: /CN=C6F2F168722913092426893B17EE2FFE4B78B63A Certificate serial: 6A2A9A7802DD5F5088D8721A2547FA26FCCFA55E Authority key identifier: C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa Signing time: Thu 20 Nov 2025 15:08:58 +0000 ROA not before: Thu 20 Nov 2025 15:03:58 +0000 ROA not after: Thu 19 Nov 2026 15:08:58 +0000 asID: 265178 IP address blocks: 167.249.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:9a:78:02:dd:5f:50:88:d8:72:1a:25:47:fa:26:fc:cf:a5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6F2F168722913092426893B17EE2FFE4B78B63A Validity Not Before: Nov 20 15:03:58 2025 GMT Not After : Nov 19 15:08:58 2026 GMT Subject: CN=DD5EA0258A401F4E9BDEA2B62FB383E3556659AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:cd:21:db:41:85:88:0b:82:77:dd:44:39: 9d:d6:36:b4:87:d7:38:cb:10:be:40:a7:42:d3:17: 15:a7:37:54:1f:ae:d5:a0:32:7d:46:2f:a7:63:37: 8e:5f:dc:bc:eb:1c:33:0f:73:ba:83:bc:fe:c9:75: 6f:ef:0b:b8:a3:1e:13:ea:ab:77:4a:53:c1:da:55: 52:1b:33:59:1d:a6:55:0e:0e:96:61:78:fb:c2:31: 26:77:4e:be:41:3e:e1:ab:f1:3b:5e:85:e7:c2:f8: e1:01:aa:50:03:75:d7:ef:65:04:55:8e:32:c2:da: e4:32:ab:44:b1:a3:02:78:f2:e0:34:58:43:12:59: 78:2b:78:9e:0d:e8:3c:46:23:eb:08:4a:27:05:c1: be:2a:bf:b8:cd:1d:35:18:f7:65:dc:f6:8d:87:b9: 3a:fe:b7:22:8e:89:db:a7:0b:6a:43:cf:aa:3f:a9: 5f:0f:de:9e:cb:fc:58:67:97:00:f1:34:4d:e0:a0: d8:25:b8:e4:53:20:88:f7:a5:38:90:91:2c:a9:6a: 02:e7:b8:fa:84:15:91:90:de:53:66:d2:f9:e9:61: 82:b8:05:e5:39:8b:98:db:c1:d2:d1:e9:09:60:b1: a7:77:f0:d2:e9:05:7c:5c:0d:8a:ad:38:9a:33:7c: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:A0:25:8A:40:1F:4E:9B:DE:A2:B6:2F:B3:83:E3:55:66:59:AF X509v3 Authority Key Identifier: keyid:C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.128.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:2a:4a:41:89:82:ef:4e:18:4d:89:17:52:29:48:a0:ee:05: 0e:51:85:7b:5f:6c:0c:64:e4:3a:0e:e8:a3:9e:09:30:03:7e: e3:cd:c5:52:2e:d2:57:c4:08:10:ac:28:0a:86:4a:7a:87:a8: 77:bc:09:cc:c5:1e:e5:8f:0a:c8:97:64:74:0b:55:49:c2:a2: c5:5d:ac:34:0a:17:7c:ac:02:ca:58:e5:8d:09:8f:10:39:52: ee:91:72:a1:6c:89:23:d7:db:5a:e1:87:2c:f6:06:a6:c5:a1: cc:13:75:62:59:3b:05:56:95:5c:3a:54:c1:74:12:1d:8c:8d: 34:ea:52:66:39:05:b6:ab:18:b7:be:b4:a0:47:69:2d:f6:79: df:37:6c:26:54:4a:2b:65:a0:5d:48:72:15:fd:f5:9d:19:73: e6:b5:94:e3:d8:2b:5b:da:86:0f:54:ea:d8:3c:da:d3:59:5a: 42:24:d5:8c:d9:5b:b9:92:dd:80:85:d8:1d:fd:1e:1c:40:c3: 7a:1f:f7:06:88:9b:ad:3b:a5:3d:77:bb:c4:8b:1e:36:b4:fa: 19:e9:fb:19:2e:b9:c6:5e:c9:37:ce:ec:7c:2d:f4:e9:4f:17: fa:38:f4:2b:52:af:48:ae:27:8e:d2:e3:9e:33:f0:a3:78:12: cb:d7:27:51 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUaiqaeALdX1CI2HIaJUf6JvzPpV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGMkYxNjg3MjI5MTMwOTI0MjY4OTNCMTdFRTJGRkU0 Qjc4QjYzQTAeFw0yNTExMjAxNTAzNThaFw0yNjExMTkxNTA4NThaMDMxMTAvBgNV BAMTKERENUVBMDI1OEE0MDFGNEU5QkRFQTJCNjJGQjM4M0UzNTU2NjU5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIs0h20GFiAuCd91EOZ3WNrSH 1zjLEL5Ap0LTFxWnN1QfrtWgMn1GL6djN45f3LzrHDMPc7qDvP7JdW/vC7ijHhPq q3dKU8HaVVIbM1kdplUODpZhePvCMSZ3Tr5BPuGr8TtehefC+OEBqlADddfvZQRV jjLC2uQyq0SxowJ48uA0WEMSWXgreJ4N6DxGI+sISicFwb4qv7jNHTUY92Xc9o2H uTr+tyKOidunC2pDz6o/qV8P3p7L/FhnlwDxNE3goNgluORTIIj3pTiQkSypagLn uPqEFZGQ3lNm0vnpYYK4BeU5i5jbwdLR6Qlgsad38NLpBXxcDYqtOJozfAF9AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU3V6gJYpAH06b3qK2L7OD41VmWa8wHwYDVR0j BBgwFoAUxvLxaHIpEwkkJok7F+4v/kt4tjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JHclZpaDlCU1J3eUwyVWZlNW1UN3RYaXNhdzFjQWpNWFdqTHVVeGc2 Y20vMC9DNkYyRjE2ODcyMjkxMzA5MjQyNjg5M0IxN0VFMkZGRTRCNzhCNjNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2RjJGMTY4NzIyOTEzMDky NDI2ODkzQjE3RUUyRkZFNEI3OEI2M0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNSR3JWaWg5QlNSd3lMMlVmZTVtVDd0WGlzYXcxY0FqTVhXakx1VXhnNmNtLzAv MzEzNjM3MmUzMjM0MzkyZTMxMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNTMxMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf5gDANBgkqhkiG9w0BAQsFAAOCAQEAXSpK QYmC704YTYkXUilIoO4FDlGFe19sDGTkOg7oo54JMAN+483FUi7SV8QIEKwoCoZK eoeod7wJzMUe5Y8KyJdkdAtVScKixV2sNAoXfKwCyljljQmPEDlS7pFyoWyJI9fb WuGHLPYGpsWhzBN1Ylk7BVaVXDpUwXQSHYyNNOpSZjkFtqsYt760oEdpLfZ53zds JlRKK2WgXUhyFf31nRlz5rWU49grW9qGD1Tq2Dza01laQiTVjNlbuZLdgIXYHf0e HEDDeh/3BoibrTulPXe7xIseNrT6Gen7GS65xl7JN87sfC306U8X+jj0K1KvSK4n jtLjnjPwo3gSy9cnUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:12 2025 by rpki-client