This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa File: 3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa (raw, json) Hash identifier: Zs4aYDK+aLxoAbSoPwW9MX8do7CMIlIi0x9n4E+/C0o= Subject key identifier: B8:33:B3:04:33:DE:1F:42:43:DC:EF:24:2A:C5:7D:4B:AF:6F:74:A3 Certificate issuer: /CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B Certificate serial: 5AF2F8E65FB96DD48579632A1AB83FBDE0BA5874 Authority key identifier: 14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa Signing time: Mon 24 Nov 2025 16:21:05 +0000 ROA not before: Mon 24 Nov 2025 16:16:05 +0000 ROA not after: Mon 23 Nov 2026 16:21:05 +0000 asID: 266332 IP address blocks: 170.238.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f2:f8:e6:5f:b9:6d:d4:85:79:63:2a:1a:b8:3f:bd:e0:ba:58:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B Validity Not Before: Nov 24 16:16:05 2025 GMT Not After : Nov 23 16:21:05 2026 GMT Subject: CN=B833B30433DE1F4243DCEF242AC57D4BAF6F74A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:bf:5f:08:20:e3:82:d9:cd:05:33:7e:fa: 5e:5a:cb:d9:22:d7:93:ed:a8:b3:ad:20:cf:1d:49: b2:1f:3f:5c:85:ec:6c:fc:30:e8:96:f3:55:8b:56: dc:98:8d:ad:fa:d2:e3:00:56:c3:7a:53:8c:59:dc: f2:6b:08:b3:4a:bb:0d:cb:13:3e:09:86:65:4e:f0: c8:a4:4a:c2:91:b4:9c:d7:41:59:18:17:7e:39:7b: 38:1e:c6:a4:5a:fa:3f:33:8a:1f:10:14:ee:32:12: f7:2b:2e:f1:37:7b:e6:09:ce:a5:1c:19:4c:23:f1: 1a:db:70:a5:7b:dd:19:3f:19:fd:76:17:54:e1:01: 4b:b8:00:41:0c:b8:00:d6:d2:ba:31:32:b2:ab:ea: 5e:3a:6b:7d:fe:20:0a:76:1d:e7:6f:4f:c1:6e:bc: 21:66:29:78:f7:62:d5:75:dc:4d:6d:b9:2f:12:74: 4d:d8:fc:59:06:4b:bc:ae:ec:f8:de:d4:6b:3b:9f: 9f:af:b3:e6:12:5a:0f:a9:33:d4:f9:2d:25:d7:a0: a0:dc:f1:81:3e:33:0a:05:d7:70:a2:ef:7b:4c:a0: 65:24:e7:55:7e:30:03:6a:01:10:c5:c5:37:1f:32: d3:f6:7b:69:80:dc:39:ea:b6:ff:06:88:04:9c:41: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:33:B3:04:33:DE:1F:42:43:DC:EF:24:2A:C5:7D:4B:AF:6F:74:A3 X509v3 Authority Key Identifier: keyid:14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.188.0/22 Signature Algorithm: sha256WithRSAEncryption 76:fa:15:f9:82:ac:f6:13:34:54:81:21:d6:bc:55:cc:5c:33: ce:c6:f4:2f:65:2d:38:93:04:23:b7:f2:8b:db:74:44:87:c1: 37:3f:1c:c1:dd:c2:4c:c7:22:5f:fe:65:f3:30:14:c6:a8:0c: 4a:9e:fc:67:d1:1a:71:91:0f:7a:ad:f8:d2:02:e8:b1:24:b2: bc:7e:7b:3e:9a:06:04:98:6b:12:6f:fb:c8:d0:58:a1:fe:7a: 52:6d:cb:e3:92:b0:7a:8a:dd:45:0d:d1:8f:16:c2:f7:9c:a6: d9:0f:ed:15:aa:7f:2a:75:f4:c5:1f:ec:b9:d0:3a:71:75:3b: 8e:56:b7:26:18:81:5a:f6:9f:e1:ea:03:cd:2e:26:df:20:9b: 49:42:e5:97:f6:a5:80:23:55:e0:2d:98:28:65:d8:43:af:0e: 35:97:e2:e8:b2:88:95:ed:a3:28:58:c5:cc:cd:d9:7d:95:63: d6:ee:08:ab:a2:31:59:8a:48:32:8a:b4:16:b8:8e:c8:90:40: db:1d:8f:5f:93:d6:77:4b:97:6a:17:57:10:e0:bd:c3:d8:f3: 67:32:af:dd:26:d1:81:78:73:15:38:40:f2:e0:e9:f2:7e:88: 80:ab:57:d5:41:b7:0b:96:00:e7:98:94:87:14:19:c7:0d:df: 23:97:be:f5 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUWvL45l+5bdSFeWMqGrg/veC6WHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMUNFMEMxNjQzRENGRDA2NkY2NjJDRTlFMzA3NDM3 OUE2NzMyQjAeFw0yNTExMjQxNjE2MDVaFw0yNjExMjMxNjIxMDVaMDMxMTAvBgNV BAMTKEI4MzNCMzA0MzNERTFGNDI0M0RDRUYyNDJBQzU3RDRCQUY2Rjc0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAL9fCCDjgtnNBTN++l5ay9ki 15PtqLOtIM8dSbIfP1yF7Gz8MOiW81WLVtyYja360uMAVsN6U4xZ3PJrCLNKuw3L Ez4JhmVO8MikSsKRtJzXQVkYF345ezgexqRa+j8zih8QFO4yEvcrLvE3e+YJzqUc GUwj8RrbcKV73Rk/Gf12F1ThAUu4AEEMuADW0roxMrKr6l46a33+IAp2HedvT8Fu vCFmKXj3YtV13E1tuS8SdE3Y/FkGS7yu7Pje1Gs7n5+vs+YSWg+pM9T5LSXXoKDc 8YE+MwoF13Ci73tMoGUk51V+MANqARDFxTcfMtP2e2mA3Dnqtv8GiAScQT6VAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUuDOzBDPeH0JD3O8kKsV9S69vdKMwHwYDVR0j BBgwFoAUFPHODBZD3P0Gb2Ys6eMHQ3mmcyswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2NhTXI2UWY1c1lydFFuaTdKaEM5MTNHMVpQY1Z3eXduQlRpWHdDNFZB a0gvMC8xNEYxQ0UwQzE2NDNEQ0ZEMDY2RjY2MkNFOUUzMDc0Mzc5QTY3MzJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RjFDRTBDMTY0M0RDRkQw NjZGNjYyQ0U5RTMwNzQzNzlBNjczMkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNjYU1yNlFmNXNZcnRRbmk3SmhDOTEzRzFaUGNWd3l3bkJUaVh3QzRWQWtILzAv MzEzNzMwMmUzMjMzMzgyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNjMzMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqruvDANBgkqhkiG9w0BAQsFAAOCAQEAdvoV +YKs9hM0VIEh1rxVzFwzzsb0L2UtOJMEI7fyi9t0RIfBNz8cwd3CTMciX/5l8zAU xqgMSp78Z9EacZEPeq340gLosSSyvH57PpoGBJhrEm/7yNBYof56Um3L45Kweord RQ3RjxbC95ym2Q/tFap/KnX0xR/sudA6cXU7jla3JhiBWvaf4eoDzS4m3yCbSULl l/algCNV4C2YKGXYQ68ONZfi6LKIle2jKFjFzM3ZfZVj1u4Iq6IxWYpIMoq0FriO yJBA2x2PX5PWd0uXahdXEOC9w9jzZzKv3SbRgXhzFThA8uDp8n6IgKtX1UG3C5YA 55iUhxQZxw3fI5e+9Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:15:11 2025 by rpki-client