This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa File: 3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa (raw, json) Hash identifier: /EhnGrakY8m4PN/AOoem8HYpimJgLfikgYXM2RQeYbA= Subject key identifier: 15:B5:BC:AD:CD:B4:02:86:E9:A0:8B:64:83:2C:C6:DC:9B:51:7D:3A Certificate issuer: /CN=B0485678AE7155C65290067DA6041EB0A1652E4E Certificate serial: 1058D5515B896C37ADD1DFC7BFC50D830D4B534F Authority key identifier: B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa Signing time: Fri 21 Nov 2025 16:27:41 +0000 ROA not before: Fri 21 Nov 2025 16:22:41 +0000 ROA not after: Fri 20 Nov 2026 16:27:41 +0000 asID: 262769 IP address blocks: 177.128.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:58:d5:51:5b:89:6c:37:ad:d1:df:c7:bf:c5:0d:83:0d:4b:53:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0485678AE7155C65290067DA6041EB0A1652E4E Validity Not Before: Nov 21 16:22:41 2025 GMT Not After : Nov 20 16:27:41 2026 GMT Subject: CN=15B5BCADCDB40286E9A08B64832CC6DC9B517D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:45:84:46:78:8b:89:46:1e:93:bc:47:5b: 4a:0e:f0:1c:05:8b:a2:86:2a:3b:c2:81:31:af:48: 77:dc:96:40:fe:75:1b:9a:90:a3:4b:4b:84:f5:07: b6:e6:64:64:f5:a8:65:5d:e0:bc:d5:db:b4:c2:b5: f2:14:51:20:81:ab:77:4d:f6:28:3a:8a:eb:7b:82: 37:07:3e:bd:78:f6:cc:9b:b6:e4:5c:23:b9:3a:4b: 05:23:f5:03:ce:1e:38:0d:ee:1e:24:12:e9:bb:91: 92:2a:88:bd:32:bd:55:ed:63:2c:fe:27:87:f2:19: 6a:47:3a:e5:d3:2f:dd:85:78:d1:3b:ef:ab:82:de: d1:10:ec:06:25:77:d6:3d:07:89:38:58:2a:be:f5: fb:40:65:cd:b7:09:1f:b4:10:3f:30:74:5b:8a:01: 8c:48:1f:c7:4f:52:e4:4e:0f:db:eb:63:0f:c4:53: af:8a:8c:ec:92:d1:df:14:cd:cc:4a:ae:c8:f3:97: 75:3f:00:fc:1a:57:d8:58:03:62:34:f5:ca:79:1f: 45:73:f9:ca:d1:be:b8:0c:45:b4:dc:39:f6:b9:53: 40:ae:e8:dc:05:e5:4d:eb:b8:34:9e:92:5e:0e:61: fc:5b:44:a7:58:6d:d4:cb:cd:90:47:7b:cf:50:0f: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B5:BC:AD:CD:B4:02:86:E9:A0:8B:64:83:2C:C6:DC:9B:51:7D:3A X509v3 Authority Key Identifier: keyid:B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:b5:97:1d:a7:e2:51:b0:c6:e6:5f:44:f6:f5:1b:fd:2c:f0: 77:c7:08:d4:4b:1e:ec:66:b7:e3:31:3a:1e:1a:75:fc:4e:b5: 14:6f:ca:cc:ff:80:eb:1f:12:94:c0:83:f0:b6:86:80:8b:b9: 66:b4:cb:40:92:d2:b7:ad:89:79:69:55:6f:de:10:77:77:7b: f2:8f:9c:e6:a2:18:51:5b:f5:2f:55:e5:dd:28:4c:31:c9:15: f5:98:24:cc:4c:df:03:26:cb:71:1a:63:cc:58:23:8a:4b:21: 0f:e5:23:79:12:d7:bb:12:2d:35:cf:37:c0:8a:62:0b:9b:c6: b3:71:9a:7f:cf:fe:f5:4e:bd:c9:1b:19:29:f0:61:0c:3b:b3: b8:ee:7e:8f:43:b0:9e:9f:04:4a:c9:33:6c:38:73:55:24:f1: fd:b3:c8:1c:a2:a4:6b:5c:0d:5a:19:99:a9:96:3d:e0:3a:71: a6:f8:d9:cd:56:3f:e4:74:b5:b1:f2:55:67:1d:44:3e:95:60: 30:02:df:27:d7:38:9a:e0:36:19:0e:a1:dd:32:8c:09:c6:d2: 16:72:49:9b:c8:12:c9:07:13:43:b2:98:42:4e:94:dd:2f:15: c3:55:d9:13:7d:bc:d8:fb:ff:46:31:e5:32:bb:26:59:25:2f: 8c:d8:74:28 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUEFjVUVuJbDet0d/Hv8UNgw1LU08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0ODU2NzhBRTcxNTVDNjUyOTAwNjdEQTYwNDFFQjBB MTY1MkU0RTAeFw0yNTExMjExNjIyNDFaFw0yNjExMjAxNjI3NDFaMDMxMTAvBgNV BAMTKDE1QjVCQ0FEQ0RCNDAyODZFOUEwOEI2NDgzMkNDNkRDOUI1MTdEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoykWERniLiUYek7xHW0oO8BwF i6KGKjvCgTGvSHfclkD+dRuakKNLS4T1B7bmZGT1qGVd4LzV27TCtfIUUSCBq3dN 9ig6iut7gjcHPr149sybtuRcI7k6SwUj9QPOHjgN7h4kEum7kZIqiL0yvVXtYyz+ J4fyGWpHOuXTL92FeNE776uC3tEQ7AYld9Y9B4k4WCq+9ftAZc23CR+0ED8wdFuK AYxIH8dPUuROD9vrYw/EU6+KjOyS0d8UzcxKrsjzl3U/APwaV9hYA2I09cp5H0Vz +crRvrgMRbTcOfa5U0Cu6NwF5U3ruDSekl4OYfxbRKdYbdTLzZBHe89QDwsdAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUFbW8rc20AobpoItkgyzG3JtRfTowHwYDVR0j BBgwFoAUsEhWeK5xVcZSkAZ9pgQesKFlLk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFyeVhxUDlYcTRDVFJxNFMydkdIWWZwQmFkUEJ6dDhScTJNVEN5NGRW S3QvMC9CMDQ4NTY3OEFFNzE1NUM2NTI5MDA2N0RBNjA0MUVCMEExNjUyRTRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwNDg1Njc4QUU3MTU1QzY1 MjkwMDY3REE2MDQxRUIwQTE2NTJFNEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRRcnlYcVA5WHE0Q1RScTRTMnZHSFlmcEJhZFBCenQ4UnEyTVRDeTRkVkt0LzAv MzEzNzM3MmUzMTMyMzgyZTM5MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2 MzIzNzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOxgGAwDQYJKoZIhvcNAQELBQADggEBAHq1lx2n 4lGwxuZfRPb1G/0s8HfHCNRLHuxmt+MxOh4adfxOtRRvysz/gOsfEpTAg/C2hoCL uWa0y0CS0retiXlpVW/eEHd3e/KPnOaiGFFb9S9V5d0oTDHJFfWYJMxM3wMmy3Ea Y8xYI4pLIQ/lI3kS17sSLTXPN8CKYgubxrNxmn/P/vVOvckbGSnwYQw7s7jufo9D sJ6fBErJM2w4c1Uk8f2zyByipGtcDVoZmamWPeA6cab42c1WP+R0tbHyVWcdRD6V YDAC3yfXOJrgNhkOod0yjAnG0hZySZvIEskHE0OymEJOlN0vFcNV2RN9vNj7/0Yx 5TK7JlklL4zYdCg= -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:05 2025 by rpki-client