This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa File: 3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa (raw, json) Hash identifier: YjbHQCtqdEHKdnDqFJLl1erj6fIjkZE+7mxV2OlQ/uE= Subject key identifier: B1:D6:12:41:BA:D2:FD:E9:D8:9A:68:17:83:FD:32:64:E6:06:F0:30 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 6DC247F7564E4D8D959E58D82915BF2E331468D2 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:39 +0000 ROA not before: Mon 10 Nov 2025 18:33:39 +0000 ROA not after: Mon 09 Nov 2026 18:38:39 +0000 asID: 263059 IP address blocks: 186.232.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c2:47:f7:56:4e:4d:8d:95:9e:58:d8:29:15:bf:2e:33:14:68:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:39 2025 GMT Not After : Nov 9 18:38:39 2026 GMT Subject: CN=B1D61241BAD2FDE9D89A681783FD3264E606F030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:1a:19:a2:cd:27:63:b0:ea:b4:a5:65:d1: 1d:4e:ff:e4:7d:73:78:c3:52:18:a8:fc:e2:4a:16: f1:7c:b9:c6:11:8e:29:4d:78:89:d2:1e:17:16:e3: 44:a4:c6:51:2e:7b:b6:27:24:aa:e1:35:05:f8:88: 58:6d:7a:5a:83:ee:a4:69:08:52:2b:2a:28:75:96: cc:79:93:59:ac:b8:c2:60:76:32:8b:79:14:08:b4: 08:8e:a8:5e:75:0a:5f:e6:06:09:09:c4:41:25:ba: 58:a4:e2:00:e4:4a:90:37:4f:da:a9:81:3c:a0:21: 9b:ef:4d:ed:a8:87:a7:af:35:cd:d9:d5:f1:96:bd: 8a:d4:4e:3a:f5:b6:07:40:61:5b:e4:20:ec:f5:27: f3:8e:34:31:e5:86:37:c2:f5:e3:de:14:04:d0:a8: a1:e0:dd:5a:53:d1:12:f6:07:a8:86:92:81:9b:2f: ea:2c:29:7d:40:70:ae:e5:d9:26:48:73:a7:b2:d8: 16:39:1e:62:5d:0a:ef:1a:f9:1f:97:d5:c9:d2:dc: ff:d2:54:af:13:e8:55:ca:94:25:a3:83:ce:a3:c6: 10:df:de:0d:7c:d6:b3:df:2a:39:e4:22:46:63:57: 95:64:f9:1d:91:9c:d3:9b:e2:2b:64:94:07:e5:64: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D6:12:41:BA:D2:FD:E9:D8:9A:68:17:83:FD:32:64:E6:06:F0:30 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.232.152.0/21 Signature Algorithm: sha256WithRSAEncryption 86:7d:72:53:c2:8d:9e:ee:3c:1d:c2:a7:eb:ce:99:87:ae:83: 7f:03:1f:db:93:e4:a4:12:63:ad:02:5a:45:75:15:b0:5e:81: b3:4e:b5:40:67:44:c3:8b:86:a3:6c:00:67:21:1d:62:f5:d2: fe:51:74:f7:b8:07:12:65:8f:87:b2:52:ad:20:d4:f9:23:08: 33:68:7b:4a:5f:5d:1b:56:a0:02:c3:f7:17:11:52:01:bb:f9: 54:d8:17:2b:68:19:7f:64:52:23:5a:bb:02:39:e6:e0:b0:09: fb:73:0e:ea:7d:3d:d2:dd:15:87:19:89:56:00:e5:e4:f6:77: 18:51:0d:6d:fe:b9:3c:74:e2:8e:30:ba:db:a4:11:1b:a8:24: 47:94:5e:4c:37:87:fd:b3:94:4f:ef:f5:d5:3f:7d:35:dc:20: 92:df:f3:84:4a:ae:cf:2f:21:9c:f1:6f:ae:c9:39:72:ea:2b: ac:ee:d6:18:f7:f5:42:72:3d:f2:98:73:2e:9d:b7:ef:52:7b: 7f:e8:da:d6:d1:5c:1e:da:43:5f:d4:4b:25:70:04:9e:f5:1f: b1:a9:d7:04:02:fb:ef:48:5c:79:b9:c2:59:da:5d:a6:ce:af: b1:53:13:2b:c0:61:36:7a:2f:42:9d:57:c2:26:43:da:50:dd: 43:66:27:bd -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUbcJH91ZOTY2VnljYKRW/LjMUaNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzlaFw0yNjExMDkxODM4MzlaMDMxMTAvBgNV BAMTKEIxRDYxMjQxQkFEMkZERTlEODlBNjgxNzgzRkQzMjY0RTYwNkYwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTBoZos0nY7DqtKVl0R1O/+R9 c3jDUhio/OJKFvF8ucYRjilNeInSHhcW40SkxlEue7YnJKrhNQX4iFhtelqD7qRp CFIrKih1lsx5k1msuMJgdjKLeRQItAiOqF51Cl/mBgkJxEElulik4gDkSpA3T9qp gTygIZvvTe2oh6evNc3Z1fGWvYrUTjr1tgdAYVvkIOz1J/OONDHlhjfC9ePeFATQ qKHg3VpT0RL2B6iGkoGbL+osKX1AcK7l2SZIc6ey2BY5HmJdCu8a+R+X1cnS3P/S VK8T6FXKlCWjg86jxhDf3g181rPfKjnkIkZjV5Vk+R2RnNOb4itklAflZHE7AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUsdYSQbrS/enYmmgXg/0yZOYG8DAwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzEzODM2MmUzMjMzMzIyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7romDANBgkqhkiG9w0BAQsFAAOCAQEAhn1y U8KNnu48HcKn686Zh66DfwMf25PkpBJjrQJaRXUVsF6Bs061QGdEw4uGo2wAZyEd YvXS/lF097gHEmWPh7JSrSDU+SMIM2h7Sl9dG1agAsP3FxFSAbv5VNgXK2gZf2RS I1q7Ajnm4LAJ+3MO6n090t0VhxmJVgDl5PZ3GFENbf65PHTijjC626QRG6gkR5Re TDeH/bOUT+/11T99Ndwgkt/zhEquzy8hnPFvrsk5cuorrO7WGPf1QnI98phzLp23 71J7f+ja1tFcHtpDX9RLJXAEnvUfsanXBAL770hcebnCWdpdps6vsVMTK8BhNnov Qp1XwiZD2lDdQ2YnvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:11 2025 by rpki-client