This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa File: 3138392e312e3132382e302f32302d3234203d3e203238363635.roa (raw, json) Hash identifier: pcgfR6oHbTTJfj6Ul0lNR1kYjX1rl8UXECYUkJNZsUM= Subject key identifier: D9:96:F7:FA:4D:6E:2D:34:D7:6C:B5:CF:FE:6D:F6:B7:F7:12:A4:36 Certificate issuer: /CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE Certificate serial: 7C9A07ECEEA5D6F5168A0A6A36A883671B088821 Authority key identifier: 5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa Signing time: Thu 27 Nov 2025 01:02:14 +0000 ROA not before: Thu 27 Nov 2025 00:57:14 +0000 ROA not after: Thu 26 Nov 2026 01:02:14 +0000 asID: 28665 IP address blocks: 189.1.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9a:07:ec:ee:a5:d6:f5:16:8a:0a:6a:36:a8:83:67:1b:08:88:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE Validity Not Before: Nov 27 00:57:14 2025 GMT Not After : Nov 26 01:02:14 2026 GMT Subject: CN=D996F7FA4D6E2D34D76CB5CFFE6DF6B7F712A436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:9c:5a:9f:09:b3:31:a5:7a:51:18:8a:5a: 58:9c:a0:28:3a:a0:b9:ca:b1:25:7f:9d:2c:12:8f: 0e:65:84:40:e2:1d:b6:c4:03:87:59:ae:4b:c3:f4: 28:c3:b5:dc:11:b7:70:75:56:7e:e3:34:cb:27:85: 78:a5:e3:48:d1:ec:e2:4b:70:9a:20:6f:de:c2:69: 36:3e:5b:32:e6:14:2e:c5:43:f7:24:fa:7c:55:e0: 4e:ab:11:97:d1:e3:66:e3:85:e5:c1:ac:53:18:63: 6e:0a:71:b1:a3:8c:c6:a9:eb:86:94:ac:86:c5:21: 39:d8:7c:91:33:9f:40:0d:05:93:61:e3:1f:ed:ba: 0c:02:55:52:5a:8b:b5:87:e0:bf:8b:9f:6c:86:0c: fa:22:e3:b0:ff:4b:16:07:68:2c:fe:d3:02:50:b7: 59:5c:95:32:1f:07:a2:d2:f4:52:f2:29:df:2c:33: 03:65:81:7e:79:ec:97:ba:a6:79:9d:33:9c:57:0e: 8a:89:5c:27:95:e5:86:6e:f7:fd:4d:e7:37:8a:0b: 30:41:d9:f6:7b:d4:7e:7c:84:51:72:73:eb:68:31: 0c:03:7e:4d:05:d5:e7:00:dc:4b:d5:25:ee:4e:c3: 1f:d7:8b:86:8f:8c:dc:bf:7f:d5:71:f8:15:0e:70: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:96:F7:FA:4D:6E:2D:34:D7:6C:B5:CF:FE:6D:F6:B7:F7:12:A4:36 X509v3 Authority Key Identifier: keyid:5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.1.128.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:f0:41:53:f5:2e:7d:4f:40:03:c9:b7:e6:7a:df:48:8d:2f: 86:74:e1:f6:90:23:67:b2:55:3f:19:05:5c:5e:c9:73:d1:9a: 6a:5e:94:7a:25:56:06:bd:93:42:fd:03:7c:5a:ce:e2:b8:d1: b2:24:fb:35:36:a8:8d:7d:c8:1a:ea:b8:86:e5:f0:e3:0b:33: a9:32:ed:47:ec:e2:95:3e:63:7f:d2:87:c1:e2:5a:a8:f7:08: a4:9b:74:d6:24:01:31:19:f2:07:54:5e:d4:be:b8:95:aa:ec: 8a:8e:18:d3:28:f2:65:36:63:20:04:b7:dc:17:2e:63:a4:52: 95:65:84:c2:71:47:40:77:30:b5:cf:25:1e:06:3c:9d:d6:c1: ba:05:ad:50:7f:81:cb:0d:34:62:b6:b4:d9:3d:78:cf:ac:63: 42:2c:40:2e:23:64:df:0b:c0:70:8e:73:48:33:9f:27:da:6d: 75:0a:d1:cf:5d:b1:ed:bc:91:86:07:ce:9e:b2:b9:34:00:76: d0:3f:7d:2b:94:2b:a8:19:fd:51:b5:23:59:ee:2c:97:6d:6c: 67:e1:ab:86:45:3d:13:60:cc:c8:8d:d1:e7:49:69:d8:da:3a: 30:d3:0e:ac:86:8f:43:41:58:3c:7e:bf:42:4c:eb:ac:fb:1a: 68:ea:c4:11 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUfJoH7O6l1vUWigpqNqiDZxsIiCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMzk0RDBFNTg3RTlEREY4OTAzM0ZDODAyMkRBQjc0 REY5MEVGRTAeFw0yNTExMjcwMDU3MTRaFw0yNjExMjYwMTAyMTRaMDMxMTAvBgNV BAMTKEQ5OTZGN0ZBNEQ2RTJEMzRENzZDQjVDRkZFNkRGNkI3RjcxMkE0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/5xanwmzMaV6URiKWlicoCg6 oLnKsSV/nSwSjw5lhEDiHbbEA4dZrkvD9CjDtdwRt3B1Vn7jNMsnhXil40jR7OJL cJogb97CaTY+WzLmFC7FQ/ck+nxV4E6rEZfR42bjheXBrFMYY24KcbGjjMap64aU rIbFITnYfJEzn0ANBZNh4x/tugwCVVJai7WH4L+Ln2yGDPoi47D/SxYHaCz+0wJQ t1lclTIfB6LS9FLyKd8sMwNlgX557Je6pnmdM5xXDoqJXCeV5YZu9/1N5zeKCzBB 2fZ71H58hFFyc+toMQwDfk0F1ecA3EvVJe5Owx/Xi4aPjNy/f9Vx+BUOcAWNAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU2Zb3+k1uLTTXbLXP/m32t/cSpDYwHwYDVR0j BBgwFoAUXtOU0OWH6d34kDP8gCLat035Dv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjdCRnZmZnRlTG1SRk5yVGRnM1BNa3BzbVYxUGRyQW50d3d0TUNGR3Fk b3YvMC81RUQzOTREMEU1ODdFOURERjg5MDMzRkM4MDIyREFCNzRERjkwRUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFRDM5NEQwRTU4N0U5RERG ODkwMzNGQzgwMjJEQUI3NERGOTBFRkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY3QkZ2ZmZ0ZUxtUkZOclRkZzNQTWtwc21WMVBkckFudHd3dE1DRkdxZG92LzAv MzEzODM5MmUzMTJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2 MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEBL0BgDANBgkqhkiG9w0BAQsFAAOCAQEAjPBBU/UufU9A A8m35nrfSI0vhnTh9pAjZ7JVPxkFXF7Jc9Gaal6UeiVWBr2TQv0DfFrO4rjRsiT7 NTaojX3IGuq4huXw4wszqTLtR+zilT5jf9KHweJaqPcIpJt01iQBMRnyB1Re1L64 larsio4Y0yjyZTZjIAS33BcuY6RSlWWEwnFHQHcwtc8lHgY8ndbBugWtUH+Byw00 Yra02T14z6xjQixALiNk3wvAcI5zSDOfJ9ptdQrRz12x7byRhgfOnrK5NAB20D99 K5QrqBn9UbUjWe4sl21sZ+GrhkU9E2DMyI3R50lp2No6MNMOrIaPQ0FYPH6/Qkzr rPsaaOrEEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:59 2025 by rpki-client