This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa File: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (raw, json) Hash identifier: xGBMD5JN29vWxxKlFBz/jVpLJ/tlOGN+z6CLXCoxFGU= Subject key identifier: 4E:A9:AD:1E:8D:DB:B3:8E:79:4C:93:B5:25:D5:52:F9:D7:2B:F5:6A Certificate issuer: /CN=B0485678AE7155C65290067DA6041EB0A1652E4E Certificate serial: 1F134E38C3367085041E2A7851121F95C9CDCA92 Authority key identifier: B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa Signing time: Fri 21 Nov 2025 16:27:50 +0000 ROA not before: Fri 21 Nov 2025 16:22:50 +0000 ROA not after: Fri 20 Nov 2026 16:27:50 +0000 asID: 262769 IP address blocks: 168.181.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:13:4e:38:c3:36:70:85:04:1e:2a:78:51:12:1f:95:c9:cd:ca:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0485678AE7155C65290067DA6041EB0A1652E4E Validity Not Before: Nov 21 16:22:50 2025 GMT Not After : Nov 20 16:27:50 2026 GMT Subject: CN=4EA9AD1E8DDBB38E794C93B525D552F9D72BF56A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:a8:9e:c8:4a:65:08:6b:c3:01:93:57:55: 04:40:3e:1c:24:01:ba:78:51:c3:71:b7:ce:21:6b: 6b:d1:46:6c:b6:b0:76:1b:e7:30:60:ce:35:71:42: c2:69:d5:67:63:eb:86:8f:c3:a9:ae:a1:b7:bb:ba: 7a:56:e1:a8:36:04:42:d2:b9:38:5d:e1:51:88:95: aa:2f:a7:c6:7c:e0:74:ec:41:6e:e1:cc:92:87:74: 2f:a7:9f:d8:a0:e7:2b:be:3d:1f:28:b3:f1:93:70: 27:43:77:4e:81:bc:e8:2d:f6:c9:8d:15:3c:0a:fb: fe:39:6f:fa:8b:76:e1:c1:b8:fe:32:a9:24:b6:e7: da:d1:e8:a3:c4:a6:a0:61:79:97:1a:21:3e:49:2d: 40:96:f6:93:b9:28:27:bd:0c:69:ca:f9:7b:c6:19: a1:62:fc:f8:32:b7:db:68:b7:e2:8d:65:a2:0d:44: dc:ba:9e:e3:29:1e:e7:8a:52:da:0b:e3:2e:6a:50: 7c:f8:19:3d:b8:99:2d:96:2d:cc:e6:0b:33:ed:00: 89:4a:e0:25:2f:e3:3f:d4:38:16:b3:a1:3d:b7:b4: af:ea:84:ec:43:bb:30:0a:be:62:0d:c4:20:09:48: 90:62:67:60:21:12:83:75:0f:b0:ee:8b:bc:6f:6f: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:AD:1E:8D:DB:B3:8E:79:4C:93:B5:25:D5:52:F9:D7:2B:F5:6A X509v3 Authority Key Identifier: keyid:B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.156.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:e7:3a:db:70:dc:3e:1a:84:ef:1a:85:ba:c2:ed:da:99:08: 8b:3c:86:1d:e4:47:8c:76:a2:d7:94:bf:07:a2:10:93:05:a8: 82:e9:2c:79:47:ab:cd:7f:9a:84:76:88:b8:6a:c4:64:d3:74: 56:2c:0d:9f:d2:a9:96:6a:f5:d2:42:ab:e4:65:a6:1e:bb:e0: d8:10:e5:b8:8d:79:e4:8a:84:e5:e9:fd:aa:e4:b5:2b:ce:43: e4:c4:22:fa:7f:1e:5c:fa:6f:0e:37:9e:c6:fd:49:91:24:ff: d1:40:04:93:60:cd:60:bf:dd:19:92:86:2a:63:07:cf:4c:01: f3:00:3c:0b:1f:80:8b:bd:f6:0e:e9:12:c2:95:e8:c8:89:65: f5:6b:10:fb:64:e6:5a:28:da:bb:48:9e:83:78:f1:72:3e:c2: 58:77:90:5c:06:cd:d6:f5:5d:7a:f7:9f:7a:2b:22:9c:1f:a1: 96:57:6e:b4:78:89:26:62:04:6b:4a:d3:21:bf:f6:36:58:4e: 31:d0:24:ee:ab:ce:66:f2:8a:ea:70:ac:f1:44:39:1a:d3:b0: 33:ad:02:43:5d:17:fa:1c:23:c0:94:f0:15:a2:9a:c9:2c:03: a0:8d:78:af:c6:92:02:dc:66:3c:7a:8c:8d:ab:cf:bc:ca:02: 3e:d4:21:25 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUHxNOOMM2cIUEHip4URIflcnNypIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0ODU2NzhBRTcxNTVDNjUyOTAwNjdEQTYwNDFFQjBB MTY1MkU0RTAeFw0yNTExMjExNjIyNTBaFw0yNjExMjAxNjI3NTBaMDMxMTAvBgNV BAMTKDRFQTlBRDFFOEREQkIzOEU3OTRDOTNCNTI1RDU1MkY5RDcyQkY1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZKieyEplCGvDAZNXVQRAPhwk Abp4UcNxt84ha2vRRmy2sHYb5zBgzjVxQsJp1Wdj64aPw6muobe7unpW4ag2BELS uThd4VGIlaovp8Z84HTsQW7hzJKHdC+nn9ig5yu+PR8os/GTcCdDd06BvOgt9smN FTwK+/45b/qLduHBuP4yqSS259rR6KPEpqBheZcaIT5JLUCW9pO5KCe9DGnK+XvG GaFi/Pgyt9tot+KNZaINRNy6nuMpHueKUtoL4y5qUHz4GT24mS2WLczmCzPtAIlK 4CUv4z/UOBazoT23tK/qhOxDuzAKvmINxCAJSJBiZ2AhEoN1D7Dui7xvbwb9AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUTqmtHo3bs455TJO1JdVS+dcr9WowHwYDVR0j BBgwFoAUsEhWeK5xVcZSkAZ9pgQesKFlLk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFyeVhxUDlYcTRDVFJxNFMydkdIWWZwQmFkUEJ6dDhScTJNVEN5NGRW S3QvMC9CMDQ4NTY3OEFFNzE1NUM2NTI5MDA2N0RBNjA0MUVCMEExNjUyRTRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwNDg1Njc4QUU3MTU1QzY1 MjkwMDY3REE2MDQxRUIwQTE2NTJFNEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRRcnlYcVA5WHE0Q1RScTRTMnZHSFlmcEJhZFBCenQ4UnEyTVRDeTRkVkt0LzAv MzEzNjM4MmUzMTM4MzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMjM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1nDANBgkqhkiG9w0BAQsFAAOCAQEAC+c6 23DcPhqE7xqFusLt2pkIizyGHeRHjHai15S/B6IQkwWogukseUerzX+ahHaIuGrE ZNN0ViwNn9Kplmr10kKr5GWmHrvg2BDluI155IqE5en9quS1K85D5MQi+n8eXPpv Djeexv1JkST/0UAEk2DNYL/dGZKGKmMHz0wB8wA8Cx+Ai732DukSwpXoyIll9WsQ +2TmWijau0ieg3jxcj7CWHeQXAbN1vVdevefeisinB+hlldutHiJJmIEa0rTIb/2 NlhOMdAk7qvOZvKK6nCs8UQ5GtOwM60CQ10X+hwjwJTwFaKaySwDoI14r8aSAtxm PHqMjavPvMoCPtQhJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:47 2025 by rpki-client