This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa File: 3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa (raw, json) Hash identifier: H9dv+DeRya1w3P02U1BRKsbDqLWpgPUpIvV9Tk+fnFM= Subject key identifier: C9:78:BA:42:EE:BA:0D:AC:8B:F2:A2:76:F3:F4:F2:D9:FA:15:17:99 Certificate issuer: /CN=43AAB70BF5D486443B357EA3923B581F0075D23A Certificate serial: 2A26D2038A0B049DBACF9A1BC6334E700AC45C3F Authority key identifier: 43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa Signing time: Fri 28 Nov 2025 00:25:40 +0000 ROA not before: Fri 28 Nov 2025 00:20:40 +0000 ROA not after: Fri 27 Nov 2026 00:25:40 +0000 asID: 266151 IP address blocks: 160.238.104.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:26:d2:03:8a:0b:04:9d:ba:cf:9a:1b:c6:33:4e:70:0a:c4:5c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AAB70BF5D486443B357EA3923B581F0075D23A Validity Not Before: Nov 28 00:20:40 2025 GMT Not After : Nov 27 00:25:40 2026 GMT Subject: CN=C978BA42EEBA0DAC8BF2A276F3F4F2D9FA151799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:ce:63:19:7c:bc:c2:0d:2f:f7:07:44:ec: ce:b7:19:10:a9:ed:8a:0b:19:1f:7b:0a:fb:93:65: 00:dd:bb:5a:b4:71:da:c4:ba:92:86:6b:bd:92:a0: a9:b5:0a:ba:e6:47:f9:c6:a3:18:c2:43:68:b0:a2: f3:a0:29:9e:16:b9:20:13:ff:f4:5d:36:66:cb:1d: 08:8d:7d:dc:35:e0:a9:f3:74:29:89:11:21:62:4a: e1:05:68:c4:19:44:2e:c5:c2:bb:0c:11:84:7f:d9: 58:b9:2b:7c:b7:f1:55:ee:32:8d:96:b0:d6:d6:95: f7:c5:48:5d:f8:c8:39:02:fd:64:98:50:40:d7:f1: 7d:8f:28:71:07:78:ed:fd:6f:40:2c:fd:c6:da:bc: 9d:62:21:49:21:8c:8d:17:25:6f:f0:82:1c:1a:d0: d0:82:74:4e:ea:00:99:bb:ec:a4:7c:1a:56:17:64: c8:83:6b:4b:68:50:16:56:68:b5:3e:74:32:45:27: e1:17:d8:e9:27:03:5f:aa:fb:f9:de:23:04:45:c6: c2:c6:2e:0a:b7:b2:24:e1:cb:18:bb:4c:8f:42:a9: d7:3a:8c:0b:ad:dc:73:c8:c1:24:b6:23:75:40:3e: ad:33:b1:4d:c4:b0:ad:83:73:1c:d2:a6:ad:27:52: 49:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:BA:42:EE:BA:0D:AC:8B:F2:A2:76:F3:F4:F2:D9:FA:15:17:99 X509v3 Authority Key Identifier: keyid:43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.104.0/22 Signature Algorithm: sha256WithRSAEncryption 42:21:72:45:cb:ad:d6:a7:a3:9c:51:cc:95:93:01:12:75:2c: 1d:91:58:c4:4b:fa:52:e7:b3:27:17:7f:95:d8:65:c7:fa:36: 92:83:f2:d1:f4:60:4c:01:46:9a:6d:18:14:07:35:a5:66:55: b1:1a:78:57:69:0c:a7:72:c5:1b:de:e5:90:17:5c:ee:79:ae: 9c:23:ef:85:9e:3c:57:3e:5a:3e:af:54:df:a0:05:8b:66:48: bb:3c:b5:12:2d:fa:1b:13:b2:b0:2c:aa:cf:80:6f:70:85:1c: f8:9c:f9:1d:8e:46:97:49:45:a8:15:74:7a:49:47:83:3e:b5: 5a:be:84:7f:17:5a:ca:f1:69:8b:9e:4f:43:0b:e3:53:6f:7f: 1e:bd:fb:3a:af:5e:64:38:fd:66:4d:78:ae:0c:51:23:60:5d: cc:86:d4:50:1d:58:78:b4:57:51:67:1a:e3:5d:88:63:99:bd: 43:75:38:85:f0:4c:39:c4:56:28:68:e3:55:c8:a3:58:50:0a: 5d:61:25:63:57:18:06:e2:8e:b9:68:93:ce:cc:b1:50:16:61: d5:89:68:21:e9:10:df:6b:3e:46:53:a9:d7:85:cb:e5:6e:7b: 81:4b:17:01:5f:30:78:b6:a9:77:23:48:8f:0d:b4:23:d6:b8: 19:17:0c:0a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUKibSA4oLBJ26z5obxjNOcArEXD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBQUI3MEJGNUQ0ODY0NDNCMzU3RUEzOTIzQjU4MUYw MDc1RDIzQTAeFw0yNTExMjgwMDIwNDBaFw0yNjExMjcwMDI1NDBaMDMxMTAvBgNV BAMTKEM5NzhCQTQyRUVCQTBEQUM4QkYyQTI3NkYzRjRGMkQ5RkExNTE3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQM5jGXy8wg0v9wdE7M63GRCp 7YoLGR97CvuTZQDdu1q0cdrEupKGa72SoKm1CrrmR/nGoxjCQ2iwovOgKZ4WuSAT //RdNmbLHQiNfdw14KnzdCmJESFiSuEFaMQZRC7FwrsMEYR/2Vi5K3y38VXuMo2W sNbWlffFSF34yDkC/WSYUEDX8X2PKHEHeO39b0As/cbavJ1iIUkhjI0XJW/wghwa 0NCCdE7qAJm77KR8GlYXZMiDa0toUBZWaLU+dDJFJ+EX2OknA1+q+/neIwRFxsLG Lgq3siThyxi7TI9Cqdc6jAut3HPIwSS2I3VAPq0zsU3EsK2DcxzSpq0nUknhAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUyXi6Qu66DayL8qJ28/Ty2foVF5kwHwYDVR0j BBgwFoAUQ6q3C/XUhkQ7NX6jkjtYHwB10jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242 S2EvMC80M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUFCNzBCRjVENDg2NDQz QjM1N0VBMzkyM0I1ODFGMDA3NUQyM0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRLS25jU3NRZm9rNHNKcGRITndYWXZoRDZhamJIQ0NxeXYzZTRuRlduNkthLzAv MzEzNjMwMmUzMjMzMzgyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNjMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDuaDANBgkqhkiG9w0BAQsFAAOCAQEAQiFy Rcut1qejnFHMlZMBEnUsHZFYxEv6UuezJxd/ldhlx/o2koPy0fRgTAFGmm0YFAc1 pWZVsRp4V2kMp3LFG97lkBdc7nmunCPvhZ48Vz5aPq9U36AFi2ZIuzy1Ei36GxOy sCyqz4BvcIUc+Jz5HY5Gl0lFqBV0eklHgz61Wr6EfxdayvFpi55PQwvjU29/Hr37 Oq9eZDj9Zk14rgxRI2BdzIbUUB1YeLRXUWca412IY5m9Q3U4hfBMOcRWKGjjVcij WFAKXWElY1cYBuKOuWiTzsyxUBZh1YloIekQ32s+RlOp14XL5W57gUsXAV8weLap dyNIjw20I9a4GRcMCg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:13 2025 by rpki-client