This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e392e302f32342d3234203d3e20323731323633.roa File: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (raw, json) Hash identifier: /0T78rqQobVja0DtJ8HTQAWJNYgm+gpT1gfJ9unfuSY= Subject key identifier: 53:B9:01:38:2D:27:12:EF:F2:BB:BE:4A:6F:20:34:FC:22:8E:C9:69 Certificate issuer: /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994 Certificate serial: 14AAB757B1C50496A565ED322A7A94F9CC3E7D50 Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer Subject info access: rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e392e302f32342d3234203d3e20323731323633.roa Signing time: Thu 13 Nov 2025 18:15:23 +0000 ROA not before: Thu 13 Nov 2025 18:10:23 +0000 ROA not after: Thu 12 Nov 2026 18:15:23 +0000 asID: 271263 IP address blocks: 177.85.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:aa:b7:57:b1:c5:04:96:a5:65:ed:32:2a:7a:94:f9:cc:3e:7d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994 Validity Not Before: Nov 13 18:10:23 2025 GMT Not After : Nov 12 18:15:23 2026 GMT Subject: CN=53B901382D2712EFF2BBBE4A6F2034FC228EC969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:fd:d5:9c:34:ac:5d:8c:ac:7c:87:ce:e0: e8:44:ab:f8:cf:70:67:2e:3c:f6:58:db:29:45:96: a8:76:c9:2a:a9:21:8e:f8:89:4c:e3:a3:05:8f:13: 12:84:cd:e6:d4:36:b1:9b:45:de:4c:83:1c:50:6d: 7b:2a:a8:12:bf:c4:4c:00:40:12:a0:94:bf:b9:82: ce:11:f2:3b:21:56:d8:41:48:dc:b3:1e:12:0c:94: 16:7c:7c:aa:a9:99:93:01:7a:a8:23:7a:c5:41:9a: eb:44:55:e9:b9:37:37:b6:ff:10:b4:d7:e1:ec:c4: 04:5a:ed:35:ec:bf:5a:7a:0d:e2:26:b5:54:3e:95: df:1d:bc:87:f0:1b:1b:dd:22:17:b0:c7:41:a2:8e: b6:94:2c:94:4c:7a:5b:2c:54:a2:77:eb:ec:68:9a: f6:90:5c:20:2d:e4:43:52:8d:80:b6:e0:30:11:ca: 27:1c:c2:08:1a:a3:23:27:54:b0:fd:87:73:98:c1: 69:1c:4a:d9:64:80:c1:1f:8d:bf:b9:03:77:fc:44: b7:9a:4f:55:9a:11:60:cd:2c:2f:d4:83:6f:6a:4f: f6:6d:73:6f:04:a4:34:60:58:8b:ef:dc:53:98:59: 9b:f1:2c:11:03:e5:c9:fe:71:f0:48:0f:d9:be:3a: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B9:01:38:2D:27:12:EF:F2:BB:BE:4A:6F:20:34:FC:22:8E:C9:69 X509v3 Authority Key Identifier: keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e392e302f32342d3234203d3e20323731323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.85.9.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:3e:00:42:ef:9d:3d:27:15:79:ae:8c:3f:e2:60:4d:43:0e: 60:ef:14:b2:f7:37:41:aa:24:78:5a:91:50:47:4e:88:61:f6: 8b:23:28:10:87:68:df:ad:79:62:40:d2:0a:da:29:1b:59:d4: 36:ac:3f:e4:25:1f:83:23:c9:36:a8:81:9b:c9:20:d5:6d:dd: f6:c0:d1:2a:6b:12:3c:13:79:f6:2a:88:fc:15:75:37:60:bd: 28:4d:0a:41:47:f5:31:99:b2:9e:7a:86:46:4e:e8:a0:c9:98: a8:a4:e3:ca:44:b3:f5:bb:18:7b:d7:a1:ba:d8:3d:2b:8c:81: 70:5f:cb:6a:cb:d8:6e:c5:e8:4e:6b:06:a3:28:39:17:a5:4c: 05:61:0f:1c:f2:9e:e5:78:72:43:c8:79:cc:7c:21:7f:17:bf: 33:13:7a:51:80:a1:62:9d:6c:17:14:8a:a0:40:82:29:d7:a0: 61:7f:eb:f9:6b:27:e7:33:2d:f8:ea:88:95:3b:98:47:04:e4: 5b:dc:60:ff:db:a3:b1:c6:8b:21:66:09:8d:00:ff:db:01:fe: 85:68:dc:e6:eb:09:7a:46:4d:ed:ce:20:36:43:fe:46:82:e2: 5c:ce:d8:f0:58:07:c5:19:5f:80:21:c9:a3:65:d6:6e:4f:32: eb:41:84:65 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUFKq3V7HFBJalZe0yKnqU+cw+fVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY0QzhDQTNGREE4QkYzMDY5NDlGODk3OEY2OTA0MUZF NTVCQTk5NDAeFw0yNTExMTMxODEwMjNaFw0yNjExMTIxODE1MjNaMDMxMTAvBgNV BAMTKDUzQjkwMTM4MkQyNzEyRUZGMkJCQkU0QTZGMjAzNEZDMjI4RUM5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Qf3VnDSsXYysfIfO4OhEq/jP cGcuPPZY2ylFlqh2ySqpIY74iUzjowWPExKEzebUNrGbRd5MgxxQbXsqqBK/xEwA QBKglL+5gs4R8jshVthBSNyzHhIMlBZ8fKqpmZMBeqgjesVBmutEVem5Nze2/xC0 1+HsxARa7TXsv1p6DeImtVQ+ld8dvIfwGxvdIhewx0GijraULJRMelssVKJ36+xo mvaQXCAt5ENSjYC24DARyiccwggaoyMnVLD9h3OYwWkcStlkgMEfjb+5A3f8RLea T1WaEWDNLC/Ug29qT/Ztc28EpDRgWIvv3FOYWZvxLBED5cn+cfBID9m+OpyvAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUU7kBOC0nEu/yu75KbyA0/CKOyWkwHwYDVR0j BBgwFoAUj0yMo/2ovzBpSfiXj2kEH+VbqZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHRQbkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4 eksvMC84RjRDOENBM0ZEQThCRjMwNjk0OUY4OTc4RjY5MDQxRkU1NUJBOTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNEM4Q0EzRkRBOEJGMzA2 OTQ5Rjg5NzhGNjkwNDFGRTU1QkE5OTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR0UG5McnREdHFBaUJyQWNucU5Oa294VkoyZ3Y1dmY3RjVzR0Z6WGJzOHpLLzAv MzEzNzM3MmUzODM1MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMy MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEALFVCTANBgkqhkiG9w0BAQsFAAOCAQEALD4AQu+dPScV ea6MP+JgTUMOYO8Usvc3QaokeFqRUEdOiGH2iyMoEIdo3615YkDSCtopG1nUNqw/ 5CUfgyPJNqiBm8kg1W3d9sDRKmsSPBN59iqI/BV1N2C9KE0KQUf1MZmynnqGRk7o oMmYqKTjykSz9bsYe9ehutg9K4yBcF/LasvYbsXoTmsGoyg5F6VMBWEPHPKe5Xhy Q8h5zHwhfxe/MxN6UYChYp1sFxSKoECCKdegYX/r+Wsn5zMt+OqIlTuYRwTkW9xg /9ujscaLIWYJjQD/2wH+hWjc5usJekZN7c4gNkP+RoLiXM7Y8FgHxRlfgCHJo2XW bk8y60GEZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:51 2025 by rpki-client