This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa File: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (raw, json) Hash identifier: erRoCXS4iqelx3A7z2b/q9tQEsfBwZglNV4IwQy/+hk= Subject key identifier: 0A:97:55:7C:4B:A0:63:44:F3:29:FC:78:10:F3:2D:6B:1E:B6:6C:6C Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 5FDB01B9B9E03BDBC825E1891F390069A0214ED1 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa Signing time: Sat 06 Dec 2025 12:58:12 +0000 ROA not before: Sat 06 Dec 2025 12:53:12 +0000 ROA not after: Sat 05 Dec 2026 12:58:12 +0000 asID: 270860 IP address blocks: 190.124.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 23:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:db:01:b9:b9:e0:3b:db:c8:25:e1:89:1f:39:00:69:a0:21:4e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Dec 6 12:53:12 2025 GMT Not After : Dec 5 12:58:12 2026 GMT Subject: CN=0A97557C4BA06344F329FC7810F32D6B1EB66C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:e4:ba:76:93:9c:7f:2b:c7:78:69:33:a8: ae:65:ef:71:ce:c5:45:be:13:fa:de:f6:77:4f:a7: 08:d6:54:4c:5e:28:9f:5c:25:ca:3a:4f:82:72:a2: 7d:d9:6c:0f:fc:ce:24:19:c1:7c:4f:75:a8:a0:e1: 22:c1:e2:a9:77:c3:1e:60:18:e6:67:f9:50:97:13: 39:ad:b1:39:a8:08:90:a4:33:b8:84:a7:86:8f:70: b6:76:37:a0:20:84:43:3d:6e:4b:d4:72:96:4c:00: b1:e0:da:7d:0e:01:6c:ec:33:d5:e5:7a:07:f8:95: 46:85:ab:7e:83:1f:a9:0b:eb:e9:7d:78:e2:13:9b: 09:08:21:db:08:8e:70:51:03:ec:b6:76:8c:67:98: b2:f9:00:f1:e9:08:58:ea:14:28:1d:ec:0d:03:f7: d7:ce:de:3f:23:a9:5a:2b:59:c6:19:02:c5:33:cb: 87:4e:56:ca:a5:0e:8c:c1:a7:02:2b:98:52:12:85: 10:7e:1c:cb:0e:21:e8:f6:43:ac:15:5a:85:90:65: b4:2c:e0:cf:1d:bb:fb:5d:8d:08:01:a2:92:43:5c: 68:9d:d9:4c:44:2c:33:0c:b5:a8:d7:18:be:dc:23: 85:b4:4a:69:01:b9:0f:5f:9f:54:48:04:9f:fe:ee: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:97:55:7C:4B:A0:63:44:F3:29:FC:78:10:F3:2D:6B:1E:B6:6C:6C X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.124.244.0/22 Signature Algorithm: sha256WithRSAEncryption 69:a2:94:c9:12:1e:c5:77:7c:8d:ff:06:ce:08:9e:a7:da:0f: a9:c5:38:e9:35:06:2c:f1:24:a2:e8:97:04:dc:00:be:59:c5: 09:90:67:4b:55:52:5e:2b:8e:1a:ab:4a:13:cc:6c:79:14:aa: 63:df:50:81:dd:1b:ad:c2:4f:9b:6e:11:02:b4:dd:1e:0a:01: 6b:8f:c4:86:c4:5d:8f:ee:ed:99:c5:31:48:72:2b:e4:4b:bf: f1:10:97:61:9c:c7:38:d1:be:7d:21:05:e7:bd:18:67:58:d6: 1d:d8:ea:1b:d0:d9:3a:76:70:db:3b:61:1e:ad:fa:b7:59:fa: c0:42:33:8a:f7:ed:28:83:d0:5f:71:ce:63:17:4f:f5:a8:57: 50:67:1a:f1:39:a8:ef:7c:d9:c3:ba:18:df:da:4a:f6:06:1d: 11:c7:75:16:d5:a3:ce:39:d4:ea:e8:6c:78:ce:97:6e:6b:7a: e4:36:cd:7a:33:00:84:34:ae:e8:8c:94:b9:bb:47:23:a9:f8: c0:7c:03:5c:d6:73:5d:3e:c1:e9:ac:13:6c:c7:75:9f:5f:36: df:95:f5:91:48:be:3d:4d:09:56:06:a3:51:63:ae:f8:7c:1a: 10:2a:af:1d:07:f4:f8:29:4a:a0:42:33:a5:79:13:3a:b2:36: d8:11:7b:86 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUX9sBubngO9vIJeGJHzkAaaAhTtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTEyMDYxMjUzMTJaFw0yNjEyMDUxMjU4MTJaMDMxMTAvBgNV BAMTKDBBOTc1NTdDNEJBMDYzNDRGMzI5RkM3ODEwRjMyRDZCMUVCNjZDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3OS6dpOcfyvHeGkzqK5l73HO xUW+E/re9ndPpwjWVExeKJ9cJco6T4Jyon3ZbA/8ziQZwXxPdaig4SLB4ql3wx5g GOZn+VCXEzmtsTmoCJCkM7iEp4aPcLZ2N6AghEM9bkvUcpZMALHg2n0OAWzsM9Xl egf4lUaFq36DH6kL6+l9eOITmwkIIdsIjnBRA+y2doxnmLL5APHpCFjqFCgd7A0D 99fO3j8jqVorWcYZAsUzy4dOVsqlDozBpwIrmFIShRB+HMsOIej2Q6wVWoWQZbQs 4M8du/tdjQgBopJDXGid2UxELDMMtajXGL7cI4W0SmkBuQ9fn1RIBJ/+7k+nAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUCpdVfEugY0TzKfx4EPMtax62bGwwHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv MzEzOTMwMmUzMTMyMzQyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzczMDM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr589DANBgkqhkiG9w0BAQsFAAOCAQEAaaKU yRIexXd8jf8Gzgiep9oPqcU46TUGLPEkouiXBNwAvlnFCZBnS1VSXiuOGqtKE8xs eRSqY99Qgd0brcJPm24RArTdHgoBa4/EhsRdj+7tmcUxSHIr5Eu/8RCXYZzHONG+ fSEF570YZ1jWHdjqG9DZOnZw2zthHq36t1n6wEIzivftKIPQX3HOYxdP9ahXUGca 8Tmo73zZw7oY39pK9gYdEcd1FtWjzjnU6uhseM6Xbmt65DbNejMAhDSu6IyUubtH I6n4wHwDXNZzXT7B6awTbMd1n18235X1kUi+PU0JVgajUWOu+HwaECqvHQf0+ClK oEIzpXkTOrI22BF7hg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:40:25 2025 by rpki-client