This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa File: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (raw, json) Hash identifier: 5L94fU1eW2N8OJJy5XdX8sulVnpAlAmfp800rgkZdUY= Subject key identifier: D0:D5:FD:58:61:D4:7A:7D:47:6B:79:DF:A6:B7:32:B2:66:BB:D0:59 Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 21C3C471ACF3974F2CDCC2F50F2617ADDC76CFA1 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa Signing time: Sat 06 Dec 2025 12:58:09 +0000 ROA not before: Sat 06 Dec 2025 12:53:09 +0000 ROA not after: Sat 05 Dec 2026 12:58:09 +0000 asID: 270860 IP address blocks: 190.124.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 23:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:c4:71:ac:f3:97:4f:2c:dc:c2:f5:0f:26:17:ad:dc:76:cf:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Dec 6 12:53:09 2025 GMT Not After : Dec 5 12:58:09 2026 GMT Subject: CN=D0D5FD5861D47A7D476B79DFA6B732B266BBD059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:4e:77:ee:16:79:22:30:e9:f1:3f:c1:d9: b1:6b:13:74:a7:7e:2b:b2:dd:ab:cf:49:eb:9a:ab: b7:5a:15:f3:db:d8:43:e7:4d:98:dd:8a:35:08:01: b2:d8:15:33:58:4d:82:14:48:29:8e:bb:4d:48:7a: 77:02:db:93:5b:07:c8:88:42:28:10:7b:77:1a:65: f9:40:65:31:9c:66:e7:89:e7:76:fa:be:9a:0a:02: 4d:f8:c6:79:c3:c4:fa:0b:5d:6d:cd:92:76:d1:03: db:ec:30:30:46:62:51:49:e1:9e:3a:ed:ea:ff:d2: f5:d1:dd:91:4e:43:a5:ce:3e:30:8d:4e:bd:b1:e5: 02:56:a3:32:8a:2f:63:f2:e9:c5:10:1d:02:ae:7f: dd:a5:85:81:7f:f2:50:c4:12:17:db:7e:61:40:1a: bc:3a:03:ba:b2:fa:7a:e3:24:2c:32:f2:ea:ce:36: 65:06:3d:18:ac:79:9c:f0:17:e3:da:5c:79:0d:3e: 7e:81:59:05:28:65:51:dc:c5:81:68:45:66:4a:4f: 49:d3:51:2f:17:b5:da:4a:41:94:ab:1f:3f:dd:33: ce:03:ff:11:01:55:63:59:62:dd:b5:80:0d:10:71: 2c:7c:4f:ea:cf:a8:eb:61:78:84:fa:b5:26:80:6c: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D5:FD:58:61:D4:7A:7D:47:6B:79:DF:A6:B7:32:B2:66:BB:D0:59 X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.124.244.0/23 Signature Algorithm: sha256WithRSAEncryption 56:77:2a:4f:59:07:48:ec:2e:d7:6d:7d:a4:c5:21:92:76:bc: 4b:86:2c:b2:4c:4f:74:0b:43:3f:a9:43:72:63:1e:cd:52:94: 62:bb:42:4a:8e:4f:0a:f0:1e:94:e3:fa:93:5c:77:0e:2f:d7: 21:dd:18:a7:bd:5d:11:31:73:8c:26:c6:44:cf:d7:79:b2:dc: 43:4e:fd:a1:ea:4a:e2:47:4f:41:12:3f:f8:08:06:7f:99:d4: 76:32:96:71:d8:f4:2f:a4:19:61:96:eb:52:04:e4:02:ce:90: bc:66:31:ef:77:5c:85:59:77:5b:16:6a:78:ec:a7:2e:03:7b: 0e:e7:93:59:39:60:ee:07:6f:81:78:04:05:dd:c7:92:1b:15: bf:bd:54:f3:6b:5b:2b:4d:d8:d5:59:6c:7f:93:e5:85:69:ae: 18:42:c9:7b:74:14:12:20:6d:cd:f7:34:a2:91:87:c0:c3:bd: ea:6a:d5:98:69:97:53:65:32:3a:a9:b2:10:37:f1:0f:ff:70: 63:f1:3c:3d:e2:5f:c9:ed:da:7c:9d:b6:ed:7a:1e:f9:21:1f: 2c:6f:5b:eb:d0:ef:4b:df:e4:e9:59:36:ad:ee:76:6f:d1:af: bd:14:1e:ee:87:4c:5c:cc:b4:c7:46:13:df:0d:fa:d3:3e:46: de:0f:67:0a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUIcPEcazzl08s3ML1DyYXrdx2z6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTEyMDYxMjUzMDlaFw0yNjEyMDUxMjU4MDlaMDMxMTAvBgNV BAMTKEQwRDVGRDU4NjFENDdBN0Q0NzZCNzlERkE2QjczMkIyNjZCQkQwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsO0537hZ5IjDp8T/B2bFrE3Sn fiuy3avPSeuaq7daFfPb2EPnTZjdijUIAbLYFTNYTYIUSCmOu01IencC25NbB8iI QigQe3caZflAZTGcZueJ53b6vpoKAk34xnnDxPoLXW3NknbRA9vsMDBGYlFJ4Z46 7er/0vXR3ZFOQ6XOPjCNTr2x5QJWozKKL2Py6cUQHQKuf92lhYF/8lDEEhfbfmFA Grw6A7qy+nrjJCwy8urONmUGPRiseZzwF+PaXHkNPn6BWQUoZVHcxYFoRWZKT0nT US8XtdpKQZSrHz/dM84D/xEBVWNZYt21gA0QcSx8T+rPqOtheIT6tSaAbK1rAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU0NX9WGHUen1Ha3nfprcysma70FkwHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv MzEzOTMwMmUzMTMyMzQyZTMyMzQzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzczMDM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb589DANBgkqhkiG9w0BAQsFAAOCAQEAVncq T1kHSOwu1219pMUhkna8S4YsskxPdAtDP6lDcmMezVKUYrtCSo5PCvAelOP6k1x3 Di/XId0Yp71dETFzjCbGRM/XebLcQ079oepK4kdPQRI/+AgGf5nUdjKWcdj0L6QZ YZbrUgTkAs6QvGYx73dchVl3WxZqeOynLgN7DueTWTlg7gdvgXgEBd3HkhsVv71U 82tbK03Y1Vlsf5PlhWmuGELJe3QUEiBtzfc0opGHwMO96mrVmGmXU2UyOqmyEDfx D/9wY/E8PeJfye3afJ227Xoe+SEfLG9b69DvS9/k6Vk2re52b9GvvRQe7odMXMy0 x0YT3w360z5G3g9nCg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:40:25 2025 by rpki-client