This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/3133382e3230342e37362e302f32322d3332203d3e20323633383739.roa File: 3133382e3230342e37362e302f32322d3332203d3e20323633383739.roa (raw, json) Hash identifier: RBWA0DttCBheUahPHI7Grx0i0emmO+yvUfbknZ//MRY= Subject key identifier: E7:E5:49:90:26:5A:5D:06:E3:A3:64:D2:9C:6A:C0:5D:CA:77:4E:F2 Certificate issuer: /CN=35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730 Certificate serial: 2E73DD432CF0966527B9D6E9FF0A51AFB82F26ED Authority key identifier: 35:D4:CF:6A:90:41:F5:3C:30:68:E2:1E:AE:DA:C0:AC:9C:48:C7:30 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.cer Subject info access: rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/3133382e3230342e37362e302f32322d3332203d3e20323633383739.roa Signing time: Thu 06 Nov 2025 18:40:57 +0000 ROA not before: Thu 06 Nov 2025 18:35:57 +0000 ROA not after: Thu 05 Nov 2026 18:40:57 +0000 asID: 263879 IP address blocks: 138.204.76.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.crl rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:73:dd:43:2c:f0:96:65:27:b9:d6:e9:ff:0a:51:af:b8:2f:26:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730 Validity Not Before: Nov 6 18:35:57 2025 GMT Not After : Nov 5 18:40:57 2026 GMT Subject: CN=E7E54990265A5D06E3A364D29C6AC05DCA774EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4c:02:6c:d3:f5:37:90:5f:bc:6a:fd:ce:bf: 63:6b:77:f6:bd:73:48:38:4f:99:0a:ff:be:20:2f: a1:69:b8:3c:5f:06:b4:b3:16:86:f0:20:55:fa:d7: 00:32:bc:84:04:54:00:19:47:37:5a:26:bb:48:bb: cf:d3:8b:5c:50:09:5e:80:a6:bb:84:1b:95:53:c9: a5:ef:8c:5b:f3:7c:2f:68:8c:cb:41:aa:2a:fd:75: b5:2a:2a:e7:08:33:f7:86:16:1b:c2:2c:b7:32:18: 80:db:4e:c2:34:bb:27:fa:37:91:b8:4b:d0:a6:1e: b1:63:11:93:e4:d4:b3:c9:3d:1c:fb:0f:fc:76:d1: e8:e6:85:d0:a9:35:e7:34:87:67:e4:5f:1f:09:b1: a0:4b:53:41:de:62:a3:ad:9e:f1:9c:d2:cb:f9:9e: e9:13:7a:5d:8b:2a:34:1b:46:49:70:54:46:2d:5a: fe:d4:ba:ad:1e:99:bb:2b:5a:69:4f:0a:4a:2c:c1: 34:b0:57:37:f4:e7:4c:09:e0:9f:6b:ef:6c:e3:08: 92:58:e6:18:98:3d:95:cf:16:41:cd:d5:ff:b9:27: 82:d5:55:10:8f:77:07:58:d0:60:09:6e:1d:29:e1: 1d:b4:5c:a1:b5:47:1a:9c:52:b7:f0:05:ff:88:e2: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E5:49:90:26:5A:5D:06:E3:A3:64:D2:9C:6A:C0:5D:CA:77:4E:F2 X509v3 Authority Key Identifier: keyid:35:D4:CF:6A:90:41:F5:3C:30:68:E2:1E:AE:DA:C0:AC:9C:48:C7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/3133382e3230342e37362e302f32322d3332203d3e20323633383739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.76.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:ee:e2:d7:71:c7:4d:01:a0:bc:3a:1f:17:d4:a9:df:c0:16: 3c:9c:e0:01:75:7d:62:b1:9c:3e:44:d2:5c:e7:e5:72:a8:ba: d2:bb:4f:ab:86:ad:4e:76:ee:2e:e0:d9:ce:8b:ff:d5:b3:b2: 71:1d:ef:dc:04:a5:a5:a1:25:ae:3a:80:41:57:37:8e:1a:d3: 15:c9:ed:b8:6c:52:ae:74:24:41:a5:87:6e:72:e2:0c:ff:1c: 64:d5:59:9a:ca:8b:13:f7:85:24:69:4a:d8:f5:c7:07:0f:b1: 8f:2f:e7:8d:bf:d4:17:fa:a4:d8:28:f1:58:0a:51:2c:4f:65: 17:47:76:1c:1d:79:de:a2:bd:55:d1:2c:8f:ce:f9:3a:3c:17: dc:da:57:a1:ef:31:b6:2e:92:48:8e:38:84:dc:47:36:56:a1: c7:de:b6:4c:88:41:c8:b7:1e:0c:f7:01:75:97:54:43:dd:ed: 7a:8f:4c:4d:4f:ad:44:81:07:3b:73:91:bf:75:bc:4a:b2:da: 30:e5:aa:a1:7f:69:c9:74:f2:ce:d6:70:63:c7:c6:dd:04:4f: 69:1f:9f:c8:9a:83:7f:d5:b5:b3:3b:5f:98:3e:36:7f:ea:5a: f6:8b:c3:f0:a9:33:34:db:7e:23:0b:16:dd:fa:5a:60:db:e1: 75:b8:a9:90 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULnPdQyzwlmUnudbp/wpRr7gvJu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVENENGNkE5MDQxRjUzQzMwNjhFMjFFQUVEQUMwQUM5 QzQ4QzczMDAeFw0yNTExMDYxODM1NTdaFw0yNjExMDUxODQwNTdaMDMxMTAvBgNV BAMTKEU3RTU0OTkwMjY1QTVEMDZFM0EzNjREMjlDNkFDMDVEQ0E3NzRFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTAJs0/U3kF+8av3Ov2Nrd/a9 c0g4T5kK/74gL6FpuDxfBrSzFobwIFX61wAyvIQEVAAZRzdaJrtIu8/Ti1xQCV6A pruEG5VTyaXvjFvzfC9ojMtBqir9dbUqKucIM/eGFhvCLLcyGIDbTsI0uyf6N5G4 S9CmHrFjEZPk1LPJPRz7D/x20ejmhdCpNec0h2fkXx8JsaBLU0HeYqOtnvGc0sv5 nukTel2LKjQbRklwVEYtWv7Uuq0embsrWmlPCkoswTSwVzf050wJ4J9r72zjCJJY 5hiYPZXPFkHN1f+5J4LVVRCPdwdY0GAJbh0p4R20XKG1RxqcUrfwBf+I4vq9AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU5+VJkCZaXQbjo2TSnGrAXcp3TvIwHwYDVR0j BBgwFoAUNdTPapBB9TwwaOIertrArJxIxzAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjR0TTFHMml2TFVXdnQ2aEVBd0ZRYk5UWjRWaFRGY2ExSGptOGtHd3R5 aWMvMC8zNUQ0Q0Y2QTkwNDFGNTNDMzA2OEUyMUVBRURBQzBBQzlDNDhDNzMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1RDRDRjZBOTA0MUY1M0Mz MDY4RTIxRUFFREFDMEFDOUM0OEM3MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY0dE0xRzJpdkxVV3Z0NmhFQXdGUWJOVFo0VmhURmNhMUhqbThrR3d0eWljLzAv MzEzMzM4MmUzMjMwMzQyZTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzMzODM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKzEwwDQYJKoZIhvcNAQELBQADggEBAG/u4tdx x00BoLw6HxfUqd/AFjyc4AF1fWKxnD5E0lzn5XKoutK7T6uGrU527i7g2c6L/9Wz snEd79wEpaWhJa46gEFXN44a0xXJ7bhsUq50JEGlh25y4gz/HGTVWZrKixP3hSRp Stj1xwcPsY8v542/1Bf6pNgo8VgKUSxPZRdHdhwded6ivVXRLI/O+To8F9zaV6Hv MbYukkiOOITcRzZWocfetkyIQci3Hgz3AXWXVEPd7XqPTE1PrUSBBztzkb91vEqy 2jDlqqF/acl08s7WcGPHxt0ET2kfn8iag3/VtbM7X5g+Nn/qWvaLw/CpMzTbfiML Ft36WmDb4XW4qZA= -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:44 2025 by rpki-client