This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa File: 3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa (raw, json) Hash identifier: EW2E4E5WIDd137zwaveg6i3PysO/ZF+wb8Sk02S96C8= Subject key identifier: C4:F1:29:18:BA:82:8F:62:11:4B:D2:A0:1F:FB:BA:29:7C:FE:11:1A Certificate issuer: /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0 Certificate serial: 2B1BEFC8C254C47B53D69E517F2DE3936C1F4624 Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa Signing time: Fri 05 Dec 2025 18:03:41 +0000 ROA not before: Fri 05 Dec 2025 17:58:41 +0000 ROA not after: Fri 04 Dec 2026 18:03:41 +0000 asID: 268257 IP address blocks: 138.185.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 12:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1b:ef:c8:c2:54:c4:7b:53:d6:9e:51:7f:2d:e3:93:6c:1f:46:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0 Validity Not Before: Dec 5 17:58:41 2025 GMT Not After : Dec 4 18:03:41 2026 GMT Subject: CN=C4F12918BA828F62114BD2A01FFBBA297CFE111A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:7d:16:9d:7a:0b:ed:6d:de:b2:5f:2f:7d: fa:23:35:42:1f:3c:30:bb:10:e9:93:01:47:80:7b: 2c:f5:eb:1a:57:6a:40:ff:32:4a:28:07:f2:8d:41: 26:92:05:7c:cf:31:96:3e:e8:92:25:5c:62:a9:ad: 9b:d4:2f:e9:74:61:9a:a5:be:a3:9f:b9:c0:6b:4c: ac:5f:b4:e0:fb:a6:41:19:49:c6:f6:c3:d0:ba:7a: 5a:4a:ec:d1:a0:69:5a:04:5f:a0:d4:e6:b8:99:40: 01:05:71:ed:31:1b:74:65:dd:62:00:9e:66:ae:2b: 39:a2:55:ec:2a:4d:67:ad:69:4a:08:ce:1d:16:b3: f9:f1:ed:3e:fa:69:44:17:b0:38:07:4f:8d:2c:64: 45:d0:b1:cb:58:ae:61:b6:bc:c5:b1:96:07:49:1b: 85:24:88:83:23:d5:95:72:85:a1:e9:72:2e:4b:a6: 70:5d:d9:56:1e:8a:4b:45:1c:11:3e:0c:4c:6e:8c: 7d:e2:f1:29:b2:8e:50:ba:7f:50:f9:f7:44:96:35: 9c:c0:7c:d1:ec:29:99:6f:11:ec:16:71:10:31:cc: 1e:f0:c4:ae:4e:3d:71:3d:43:64:85:14:9e:25:d5: 0d:e8:44:dd:dd:17:4c:7f:0c:20:e2:ee:7e:bc:9a: a5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F1:29:18:BA:82:8F:62:11:4B:D2:A0:1F:FB:BA:29:7C:FE:11:1A X509v3 Authority Key Identifier: keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.154.0/23 Signature Algorithm: sha256WithRSAEncryption 79:f6:88:59:d0:00:5a:72:c1:79:95:9d:bc:ba:19:e0:d0:c1: c5:bf:40:89:62:ed:0e:f9:a0:2b:f7:73:ff:82:40:ac:d6:63: a9:96:c5:91:84:fc:50:c9:2e:7f:66:b1:b8:e2:1b:fa:6d:50: b3:31:03:4a:6a:fa:5f:cd:5c:b9:a8:3c:e4:12:27:f8:58:7e: 2a:8c:0a:a6:24:f2:dd:23:2d:d2:85:3c:bc:98:8b:e8:b7:e6: 06:0f:7c:b3:ae:02:6d:e3:fd:fb:ff:a1:19:d9:1b:81:b2:54: cf:ad:bc:a0:18:37:23:62:80:1f:75:1e:c9:04:7a:9d:d3:2e: 13:da:f6:15:e6:b0:d8:2e:67:63:07:bc:7c:a7:e6:2a:cc:3f: 2c:f3:d8:b4:9f:c2:09:cb:01:79:c9:0c:f3:8c:8a:05:e4:ab: 81:4a:07:40:1d:3d:a8:d6:ec:3c:b5:e9:2c:a9:9c:65:9f:75: 0a:74:90:29:0e:1e:70:1e:d5:ae:e9:d2:8a:10:86:24:fd:26: 7c:65:e3:c5:17:c4:89:7f:9c:3e:89:9a:4f:e9:e9:78:21:88: e0:70:1a:c3:bd:5b:77:1e:7a:2b:fa:f3:04:a8:ad:57:7a:e0: 9c:52:58:b2:32:ee:bb:fa:30:70:56:8b:7c:5a:32:62:c9:0c: 1b:06:8e:0e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUKxvvyMJUxHtT1p5Rfy3jk2wfRiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzOTVDMDE4NUZCMjhFMEZEQTM1NjFGREVFMjAyMjI3 QzFDQzhEMDAeFw0yNTEyMDUxNzU4NDFaFw0yNjEyMDQxODAzNDFaMDMxMTAvBgNV BAMTKEM0RjEyOTE4QkE4MjhGNjIxMTRCRDJBMDFGRkJCQTI5N0NGRTExMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+s30WnXoL7W3esl8vffojNUIf PDC7EOmTAUeAeyz16xpXakD/MkooB/KNQSaSBXzPMZY+6JIlXGKprZvUL+l0YZql vqOfucBrTKxftOD7pkEZScb2w9C6elpK7NGgaVoEX6DU5riZQAEFce0xG3Rl3WIA nmauKzmiVewqTWetaUoIzh0Ws/nx7T76aUQXsDgHT40sZEXQsctYrmG2vMWxlgdJ G4UkiIMj1ZVyhaHpci5LpnBd2VYeiktFHBE+DExujH3i8SmyjlC6f1D590SWNZzA fNHsKZlvEewWcRAxzB7wxK5OPXE9Q2SFFJ4l1Q3oRN3dF0x/DCDi7n68mqWpAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUxPEpGLqCj2IRS9KgH/u6KXz+ERowHwYDVR0j BBgwFoAUlTlcAYX7KOD9o1Yf3uICInwcyNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTFlNEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxR blgvMC85NTM5NUMwMTg1RkIyOEUwRkRBMzU2MUZERUUyMDIyMjdDMUNDOEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1Mzk1QzAxODVGQjI4RTBG REEzNTYxRkRFRTIwMjIyN0MxQ0M4RDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzUxZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAv MzEzMzM4MmUzMTM4MzUyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzODMyMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq5mjANBgkqhkiG9w0BAQsFAAOCAQEAefaI WdAAWnLBeZWdvLoZ4NDBxb9AiWLtDvmgK/dz/4JArNZjqZbFkYT8UMkuf2axuOIb +m1QszEDSmr6X81cuag85BIn+Fh+KowKpiTy3SMt0oU8vJiL6LfmBg98s64CbeP9 +/+hGdkbgbJUz628oBg3I2KAH3UeyQR6ndMuE9r2Feaw2C5nYwe8fKfmKsw/LPPY tJ/CCcsBeckM84yKBeSrgUoHQB09qNbsPLXpLKmcZZ91CnSQKQ4ecB7VrunSihCG JP0mfGXjxRfEiX+cPomaT+npeCGI4HAaw71bdx56K/rzBKitV3rgnFJYsjLuu/ow cFaLfFoyYskMGwaODg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:41 2025 by rpki-client