This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa File: AS28638.roa (raw, json) Hash identifier: yI2/U7CMbqDItBHEJ9HAWfeVK7KiiuNIXggDeSqgqqE= Subject key identifier: C9:2B:05:E3:E4:EE:25:5B:99:3D:19:95:7F:C7:73:0E:E1:0E:8D:A9 Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 4DE59B4DCEA584272A80F596C47CB987D4598B8F Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa Signing time: Tue 02 Dec 2025 23:01:36 +0000 ROA not before: Tue 02 Dec 2025 22:56:36 +0000 ROA not after: Tue 01 Dec 2026 23:01:36 +0000 asID: 28638 IP address blocks: 138.118.160.0/22 maxlen: 24 186.209.216.0/22 maxlen: 24 2804:dcc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e5:9b:4d:ce:a5:84:27:2a:80:f5:96:c4:7c:b9:87:d4:59:8b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Dec 2 22:56:36 2025 GMT Not After : Dec 1 23:01:36 2026 GMT Subject: CN=C92B05E3E4EE255B993D19957FC7730EE10E8DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:e6:ee:eb:4f:8f:93:24:78:0e:2a:04:ee: 83:34:01:74:f7:03:38:3d:3c:62:70:0e:0e:52:dc: 2c:52:d8:83:32:1c:af:59:5a:3a:bf:30:a5:cf:a0: 3e:57:1a:16:c8:0d:2c:fe:ec:06:23:39:bb:5a:6b: b1:3e:d5:b4:f2:94:73:21:27:b8:17:0b:0c:e4:26: 6d:0c:bc:fe:75:41:95:ac:62:47:7e:fe:37:2c:66: c3:85:18:21:7a:f9:17:63:1c:1c:de:c8:13:1a:44: 2e:73:8e:9e:1e:a6:9f:22:86:6a:ef:d4:9c:c3:1b: 84:8e:27:ef:2b:18:44:8d:21:a7:e0:9c:08:fd:0e: fe:d3:d5:bf:06:95:96:65:b0:e8:7c:30:aa:5a:5c: d0:ae:51:b8:3a:58:6b:c2:f0:d7:46:76:7b:0c:1d: f7:e9:20:8a:d2:a8:98:0b:b2:ae:82:f6:6e:71:ab: 05:b8:0d:a4:7a:4a:65:c9:6f:02:32:bf:5b:93:91: 3c:35:6e:b0:9a:c4:e7:48:b0:d9:ff:f3:db:1d:8d: d6:d2:65:13:62:16:bb:53:1f:9e:3a:6a:69:f4:98: ed:c4:c9:86:b8:92:fc:e2:9e:a5:86:cd:0c:cc:40: f9:e2:47:6a:4c:fa:bc:06:38:7b:c8:f1:c3:f9:ac: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:05:E3:E4:EE:25:5B:99:3D:19:95:7F:C7:73:0E:E1:0E:8D:A9 X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.160.0/22 186.209.216.0/22 IPv6: 2804:dcc::/32 Signature Algorithm: sha256WithRSAEncryption 12:a8:7b:27:aa:ba:ac:d2:bf:8e:6d:fc:31:ca:8a:27:76:93: 98:fb:4a:73:b4:97:9a:1f:ca:b1:e2:b8:26:e5:6b:be:e0:11: d0:ff:18:41:5a:e5:fd:a4:bd:1f:5e:27:27:0e:a6:c7:71:84: f7:d5:5f:85:5b:24:3e:f4:45:06:d1:19:9e:96:92:8b:f9:06: 35:be:62:02:80:9a:d0:ac:94:26:2b:c6:d7:a3:42:1c:0f:0f: 91:77:a2:cb:60:27:f4:ed:42:c4:eb:a2:1f:10:95:ab:4f:97: 54:e2:dc:92:0a:10:23:0b:0b:0f:c3:5c:8c:4e:5b:6d:c4:a7: 42:88:0e:b0:3e:77:78:2d:e5:26:ba:e6:29:3b:25:89:79:86: 13:74:89:0e:5f:af:8b:61:1b:e0:df:5d:40:1f:4e:21:34:bd: 9d:2a:58:63:c8:03:df:1f:74:1d:7b:29:5b:17:c5:af:8a:c4: 97:b0:ff:b0:bd:58:33:e9:ed:6e:19:99:3d:c0:52:36:61:e7: 22:02:ea:9c:00:1c:a5:af:87:70:9a:eb:fc:ca:74:5d:c1:28: e3:a9:e3:35:af:87:cc:c7:e7:16:3f:cf:03:90:f3:f8:43:e1: de:ae:da:ee:07:ba:3a:3a:86:8d:51:53:4f:fb:47:68:00:7b: 07:6d:25:6c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTeWbTc6lhCcqgPWWxHy5h9RZi48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNTEyMDIyMjU2MzZaFw0yNjEyMDEyMzAxMzZaMDMxMTAvBgNV BAMTKEM5MkIwNUUzRTRFRTI1NUI5OTNEMTk5NTdGQzc3MzBFRTEwRThEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkubu60+PkyR4DioE7oM0AXT3 Azg9PGJwDg5S3CxS2IMyHK9ZWjq/MKXPoD5XGhbIDSz+7AYjObtaa7E+1bTylHMh J7gXCwzkJm0MvP51QZWsYkd+/jcsZsOFGCF6+RdjHBzeyBMaRC5zjp4epp8ihmrv 1JzDG4SOJ+8rGESNIafgnAj9Dv7T1b8GlZZlsOh8MKpaXNCuUbg6WGvC8NdGdnsM HffpIIrSqJgLsq6C9m5xqwW4DaR6SmXJbwIyv1uTkTw1brCaxOdIsNn/89sdjdbS ZRNiFrtTH546amn0mO3EyYa4kvzinqWGzQzMQPniR2pM+rwGOHvI8cP5rC0jAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUySsF4+TuJVuZPRmVf8dzDuEOjakwHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjg2 Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAKKdqADBAK60dgwDQQCAAIwBwMFACgEDcwwDQYJKoZIhvcN AQELBQADggEBABKoeyequqzSv45t/DHKiid2k5j7SnO0l5ofyrHiuCbla77gEdD/ GEFa5f2kvR9eJycOpsdxhPfVX4VbJD70RQbRGZ6Wkov5BjW+YgKAmtCslCYrxtej QhwPD5F3ostgJ/TtQsTroh8QlatPl1Ti3JIKECMLCw/DXIxOW23Ep0KIDrA+d3gt 5Sa65ik7JYl5hhN0iQ5fr4thG+DfXUAfTiE0vZ0qWGPIA98fdB17KVsXxa+KxJew /7C9WDPp7W4ZmT3AUjZh5yIC6pwAHKWvh3Ca6/zKdF3BKOOp4zWvh8zH5xY/zwOQ 8/hD4d6u2u4Hujo6ho1RU0/7R2gAewdtJWw= -----END CERTIFICATE-----Generated at Sat Dec 6 16:12:21 2025 by rpki-client