This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa File: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (raw, json) Hash identifier: SxLydP1ukGSzGHXOiuYXuCRXNw1G+x/PyOeKcjdByH8= Subject key identifier: BC:98:26:FE:1F:98:64:D6:B7:B8:2A:26:3B:2D:93:E1:76:AB:DD:60 Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 09B008C1BC41BA3534DFDEF074AC75F8828CE249 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa Signing time: Sat 06 Dec 2025 12:58:10 +0000 ROA not before: Sat 06 Dec 2025 12:53:10 +0000 ROA not after: Sat 05 Dec 2026 12:58:10 +0000 asID: 270860 IP address blocks: 190.124.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 23:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b0:08:c1:bc:41:ba:35:34:df:de:f0:74:ac:75:f8:82:8c:e2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Dec 6 12:53:10 2025 GMT Not After : Dec 5 12:58:10 2026 GMT Subject: CN=BC9826FE1F9864D6B7B82A263B2D93E176ABDD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:59:1a:af:09:60:ed:b0:f4:49:d6:7c:78: b6:b6:5c:4c:69:22:de:d0:90:49:b4:0d:b3:06:cb: 98:e6:93:81:90:7b:7f:6a:56:75:ba:cc:22:22:c6: 7b:ee:f9:1c:60:c8:dc:05:6e:aa:8f:3e:c3:c0:53: bd:03:5d:45:b1:8a:e1:e6:fb:6a:8f:2b:22:76:0a: b0:5a:4c:ee:ce:3f:e8:b0:b7:34:48:13:45:f0:c7: 7a:64:1f:b7:89:b5:50:b4:aa:32:2b:a9:2e:ea:f1: d2:64:b8:9e:ef:8e:4a:b6:78:b8:8f:e1:42:ae:9a: 64:e7:07:d0:5a:d4:88:1c:9a:7d:b4:bf:22:d0:fc: 8d:ee:07:50:99:9a:64:50:0f:6e:0e:3b:46:cf:4b: d9:4e:3f:0e:62:4f:f5:4e:c8:fd:33:c9:ed:d9:f8: 11:40:35:01:0d:fb:52:2e:e3:c9:60:b1:4e:c0:cb: 47:a7:b4:5c:42:5d:d1:00:90:eb:13:13:29:f7:ad: f3:02:92:21:4b:18:22:62:c2:b9:83:10:d0:c8:8d: 3d:7e:96:90:81:ae:6d:c5:42:8d:be:21:c5:68:33: 39:1d:17:1f:40:d7:99:5a:a5:a7:68:77:da:5d:5a: fd:8e:90:a3:7d:68:ad:e5:8d:7c:ed:c0:f8:c5:13: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:98:26:FE:1F:98:64:D6:B7:B8:2A:26:3B:2D:93:E1:76:AB:DD:60 X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.124.244.0/24 Signature Algorithm: sha256WithRSAEncryption 89:27:26:0f:5a:e2:8f:e3:65:00:e6:5a:d1:73:98:5a:25:fc: 42:79:db:e3:ff:f4:28:ae:76:4d:1c:54:e8:3b:66:4e:d7:9a: 13:5f:ed:eb:a0:be:5e:74:8f:82:73:61:8c:88:af:d9:b9:23: c1:70:ed:c2:82:cb:f5:ea:e9:bc:6a:52:10:8e:1e:82:63:1b: 1a:cf:09:47:5a:38:ad:e1:08:b3:6e:cf:03:f5:dd:a4:3b:fa: 3b:e3:cd:ff:1a:b5:5e:5a:61:a7:fd:2e:e0:2d:0a:7b:c7:16: 83:6d:d0:fe:0f:31:c1:1c:d8:0e:9a:40:01:2e:67:b6:40:ff: a2:f5:ec:9e:5a:dc:b8:59:ba:b3:8d:e6:68:70:a4:c2:57:bb: 22:84:0e:ab:72:99:e9:55:76:04:31:f5:de:a9:38:05:72:54: a5:c1:2a:80:26:3c:8f:ac:6e:d5:a5:b0:7a:76:40:1d:3b:86: b8:6c:6a:d1:68:41:a3:81:24:79:2e:00:99:f1:26:33:f4:0f: d5:96:bd:4d:41:70:e5:37:4f:a9:97:8b:15:84:66:83:f9:7b: 26:2c:5a:12:ac:d0:1c:0a:8e:16:15:db:ee:31:21:26:a2:1f: 70:36:38:6d:ba:e8:d1:a7:3e:02:ac:6d:e8:df:27:46:90:2d: d9:49:fb:72 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUCbAIwbxBujU0397wdKx1+IKM4kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTEyMDYxMjUzMTBaFw0yNjEyMDUxMjU4MTBaMDMxMTAvBgNV BAMTKEJDOTgyNkZFMUY5ODY0RDZCN0I4MkEyNjNCMkQ5M0UxNzZBQkRENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMFkarwlg7bD0SdZ8eLa2XExp It7QkEm0DbMGy5jmk4GQe39qVnW6zCIixnvu+RxgyNwFbqqPPsPAU70DXUWxiuHm +2qPKyJ2CrBaTO7OP+iwtzRIE0Xwx3pkH7eJtVC0qjIrqS7q8dJkuJ7vjkq2eLiP 4UKummTnB9Ba1Igcmn20vyLQ/I3uB1CZmmRQD24OO0bPS9lOPw5iT/VOyP0zye3Z +BFANQEN+1Iu48lgsU7Ay0entFxCXdEAkOsTEyn3rfMCkiFLGCJiwrmDENDIjT1+ lpCBrm3FQo2+IcVoMzkdFx9A15lapadod9pdWv2OkKN9aK3ljXztwPjFE1FnAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUvJgm/h+YZNa3uComOy2T4Xar3WAwHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv MzEzOTMwMmUzMTMyMzQyZTMyMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMDM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL589DANBgkqhkiG9w0BAQsFAAOCAQEAiScm D1rij+NlAOZa0XOYWiX8Qnnb4//0KK52TRxU6DtmTteaE1/t66C+XnSPgnNhjIiv 2bkjwXDtwoLL9erpvGpSEI4egmMbGs8JR1o4reEIs27PA/XdpDv6O+PN/xq1Xlph p/0u4C0Ke8cWg23Q/g8xwRzYDppAAS5ntkD/ovXsnlrcuFm6s43maHCkwle7IoQO q3KZ6VV2BDH13qk4BXJUpcEqgCY8j6xu1aWwenZAHTuGuGxq0WhBo4EkeS4AmfEm M/QP1Za9TUFw5TdPqZeLFYRmg/l7JixaEqzQHAqOFhXb7jEhJqIfcDY4bbro0ac+ Aqxt6N8nRpAt2Un7cg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:40:22 2025 by rpki-client