This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa File: 3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa (raw, json) Hash identifier: SeuIT98fNwXd4i/dckwAJTtDQA8uRgyk/ipvMpmUwDA= Subject key identifier: 2D:B4:08:BA:0A:09:61:62:6D:80:E1:1C:8D:4E:E1:E6:7F:D0:66:A8 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 3A01A7C2286195C2CC53EAFABD421D9B24416456 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:34 +0000 ROA not before: Mon 10 Nov 2025 18:33:34 +0000 ROA not after: Mon 09 Nov 2026 18:38:34 +0000 asID: 263059 IP address blocks: 186.232.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:01:a7:c2:28:61:95:c2:cc:53:ea:fa:bd:42:1d:9b:24:41:64:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:34 2025 GMT Not After : Nov 9 18:38:34 2026 GMT Subject: CN=2DB408BA0A0961626D80E11C8D4EE1E67FD066A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:d8:85:30:66:8d:b7:e1:af:8b:6d:16:79: 70:d1:1e:41:76:c1:d2:ba:83:3d:c2:a4:2a:28:00: 87:03:fa:71:6b:b3:9f:a3:48:c9:62:08:97:aa:20: f4:d1:60:88:c5:28:50:f4:a5:3e:af:4f:da:23:52: db:f0:99:90:38:cd:5c:2d:7e:b4:1e:9e:e4:39:ec: 9c:b5:d5:aa:19:b9:91:4a:1d:e6:74:5d:d8:91:7a: 97:00:e4:23:66:88:99:18:74:69:2a:e1:15:4c:7f: 6f:ab:72:28:08:8f:90:89:ad:6c:10:70:cf:94:4b: 0e:bd:6f:86:04:7c:cc:fe:2e:aa:b1:5a:7d:71:f4: ca:23:0b:ec:a6:00:53:0e:fe:24:fd:18:1e:c1:20: 6c:18:49:87:29:dd:e7:9f:18:29:d6:e9:72:e2:86: be:d8:8e:19:7e:f1:b1:46:20:e9:fb:ea:b1:b4:2d: f7:0b:1e:f6:4d:cc:74:9e:4c:18:40:86:bf:ab:7e: 09:9c:9a:66:a9:49:be:81:78:44:30:a7:93:2c:83: 43:ba:45:86:96:7d:27:3d:db:0f:9f:a1:de:39:36: e2:db:64:fc:18:41:95:81:3f:ad:10:d4:54:d6:c0: d7:ad:62:5a:a1:4a:ca:a1:3b:42:96:88:05:ec:67: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:08:BA:0A:09:61:62:6D:80:E1:1C:8D:4E:E1:E6:7F:D0:66:A8 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32332d3233203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.232.152.0/23 Signature Algorithm: sha256WithRSAEncryption c1:db:4e:fa:66:09:1e:ee:2c:7d:90:b9:f0:7f:07:67:84:64: 96:d0:fb:78:6b:53:f5:29:5d:08:fa:ba:35:c5:cb:37:be:be: 84:3f:6f:e1:1a:52:84:3a:01:d8:df:df:94:60:21:03:ff:91: 64:ac:5e:0c:34:0f:51:96:6a:c8:af:d9:18:89:7f:59:98:fe: db:ba:83:cc:d4:18:3d:0d:db:4e:02:45:9e:b9:ff:e2:88:d7: 18:56:8d:72:7f:59:89:71:75:50:a0:8a:a7:54:54:97:7b:0d: 75:bb:1f:76:bd:be:5c:04:ba:b4:1c:6d:0c:3b:77:63:52:76: 67:02:88:56:61:db:a7:9b:47:15:d6:3b:b6:1d:8f:a6:07:2a: 38:1e:2a:ab:ca:01:88:10:f1:aa:79:3b:a2:76:43:27:e9:e0: bc:53:cb:da:bd:65:a6:1b:6e:22:fb:f2:86:b7:2c:3d:ee:de: 93:6e:0d:62:b4:28:b4:22:b1:f8:b2:b6:01:41:33:39:db:8c: 1a:39:6f:ed:24:d5:e6:6b:71:83:9f:e8:4a:18:c5:d3:d0:5b: 59:cc:84:ea:74:dd:a0:05:1e:47:ee:6a:99:23:c5:30:7f:ab: 43:bb:f3:d9:8a:ee:f2:dd:07:1c:e7:64:a0:32:c6:3f:bd:2b: f8:56:6e:bc -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUOgGnwihhlcLMU+r6vUIdmyRBZFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzRaFw0yNjExMDkxODM4MzRaMDMxMTAvBgNV BAMTKDJEQjQwOEJBMEEwOTYxNjI2RDgwRTExQzhENEVFMUU2N0ZEMDY2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3etiFMGaNt+Gvi20WeXDRHkF2 wdK6gz3CpCooAIcD+nFrs5+jSMliCJeqIPTRYIjFKFD0pT6vT9ojUtvwmZA4zVwt frQenuQ57Jy11aoZuZFKHeZ0XdiRepcA5CNmiJkYdGkq4RVMf2+rcigIj5CJrWwQ cM+USw69b4YEfMz+LqqxWn1x9MojC+ymAFMO/iT9GB7BIGwYSYcp3eefGCnW6XLi hr7Yjhl+8bFGIOn76rG0LfcLHvZNzHSeTBhAhr+rfgmcmmapSb6BeEQwp5Msg0O6 RYaWfSc92w+fod45NuLbZPwYQZWBP60Q1FTWwNetYlqhSsqhO0KWiAXsZz7vAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQULbQIugoJYWJtgOEcjU7h5n/QZqgwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzEzODM2MmUzMjMzMzIyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbromDANBgkqhkiG9w0BAQsFAAOCAQEAwdtO +mYJHu4sfZC58H8HZ4RkltD7eGtT9SldCPq6NcXLN76+hD9v4RpShDoB2N/flGAh A/+RZKxeDDQPUZZqyK/ZGIl/WZj+27qDzNQYPQ3bTgJFnrn/4ojXGFaNcn9ZiXF1 UKCKp1RUl3sNdbsfdr2+XAS6tBxtDDt3Y1J2ZwKIVmHbp5tHFdY7th2PpgcqOB4q q8oBiBDxqnk7onZDJ+ngvFPL2r1lphtuIvvyhrcsPe7ek24NYrQotCKx+LK2AUEz OduMGjlv7STV5mtxg5/oShjF09BbWcyE6nTdoAUeR+5qmSPFMH+rQ7vz2Yru8t0H HOdkoDLGP70r+FZuvA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:50 2025 by rpki-client