This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa File: 3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa (raw, json) Hash identifier: Lv8IB6MxS3zZY970VSs1/QE+KDiXToMn7abPfrcD5lo= Subject key identifier: D1:83:A5:E9:B5:02:3D:3E:4C:22:C5:C7:6A:BA:C7:1E:6B:5F:7C:9E Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 3AA32008A005FF5C50A30700ADAB486368065DAD Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:35 +0000 ROA not before: Mon 10 Nov 2025 18:33:35 +0000 ROA not after: Mon 09 Nov 2026 18:38:35 +0000 asID: 263059 IP address blocks: 186.232.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:20:08:a0:05:ff:5c:50:a3:07:00:ad:ab:48:63:68:06:5d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:35 2025 GMT Not After : Nov 9 18:38:35 2026 GMT Subject: CN=D183A5E9B5023D3E4C22C5C76ABAC71E6B5F7C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:c5:9f:b5:39:90:9a:ef:57:bb:d2:35:07: 6a:1f:75:05:c6:b3:65:45:d5:37:09:1e:f3:93:81: 4d:6c:d2:bf:3a:15:d6:ac:65:35:11:2b:0b:27:19: 93:50:e3:0d:21:20:e6:b2:da:22:b3:68:68:0f:f3: 9a:77:db:20:ce:7f:0b:f5:5d:34:97:47:6e:bc:c1: 04:7d:d1:1d:28:d7:a6:7f:aa:ec:d6:ba:52:ac:fb: 73:c3:b0:c5:84:d2:1e:dd:1a:5b:55:9c:de:61:6f: e8:af:d6:35:d4:1f:76:cf:26:23:d9:5d:3d:56:74: 27:f7:44:e4:b1:13:d7:54:d1:50:4a:8c:cb:c5:1e: 24:a0:a7:61:60:7b:30:1d:4b:29:53:2e:26:13:52: 8f:6c:9d:e6:5a:86:fe:87:2d:0c:cc:bf:c3:a0:13: 9e:a3:55:b4:c3:d6:9d:44:87:0b:14:3c:31:92:4f: 1e:00:fb:bb:f6:4a:1c:b7:24:33:e0:a2:b0:0e:17: 6f:c8:f7:d2:58:a4:cd:d2:ea:1f:84:18:a0:72:25: 14:5c:ac:e3:ae:26:6c:31:ff:1e:1f:44:45:ab:a2: 19:d9:b2:2d:f9:b4:f0:78:cf:a5:2c:46:a7:69:9f: ef:b9:26:75:c3:30:43:4c:e7:b3:d9:96:f9:64:9b: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:A5:E9:B5:02:3D:3E:4C:22:C5:C7:6A:BA:C7:1E:6B:5F:7C:9E X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.232.154.0/23 Signature Algorithm: sha256WithRSAEncryption 52:88:f9:c5:e8:0d:5c:17:1f:fb:a3:6a:fe:58:0b:11:cc:b3: e8:08:42:51:32:f3:97:d6:84:c1:4b:aa:19:22:ec:ca:f5:f2: c3:65:5c:56:90:75:66:47:12:86:ae:6a:05:d3:5b:be:7d:63: 70:b3:1b:bd:7f:13:5e:87:a1:3f:4e:cc:79:29:46:da:27:da: 6e:25:88:9b:eb:b3:ef:aa:88:a0:64:fc:0a:08:69:31:41:3e: f9:30:9f:86:91:d7:f7:2b:f4:24:22:7e:88:67:70:9a:0a:da: 3d:ce:8d:60:04:c1:cf:2e:dc:1f:1b:d4:62:d4:30:88:c0:1b: 91:46:5d:6f:5c:af:10:55:98:1f:d4:24:c6:32:74:4f:c5:17: cb:a4:32:3d:54:8b:4d:23:00:84:a1:d4:67:a7:46:9d:b4:5e: bb:67:5f:a7:f5:f9:da:df:4f:d9:d7:7a:7b:75:70:f7:64:d4: b3:6f:ef:c4:91:35:58:bc:39:41:f1:1a:ef:1f:6c:29:48:66: 60:33:fd:9a:9b:e4:ef:5b:8b:aa:bd:8f:f6:f9:0e:23:a8:e7: 36:70:7c:13:fb:c2:65:48:f8:9b:71:aa:63:85:4e:37:70:c8: f1:ef:cd:04:27:97:24:35:70:b3:42:6c:27:23:6d:9d:8c:1c: ab:9a:79:01 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUOqMgCKAF/1xQowcAratIY2gGXa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzVaFw0yNjExMDkxODM4MzVaMDMxMTAvBgNV BAMTKEQxODNBNUU5QjUwMjNEM0U0QzIyQzVDNzZBQkFDNzFFNkI1RjdDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpMWftTmQmu9Xu9I1B2ofdQXG s2VF1TcJHvOTgU1s0r86FdasZTURKwsnGZNQ4w0hIOay2iKzaGgP85p32yDOfwv1 XTSXR268wQR90R0o16Z/quzWulKs+3PDsMWE0h7dGltVnN5hb+iv1jXUH3bPJiPZ XT1WdCf3ROSxE9dU0VBKjMvFHiSgp2FgezAdSylTLiYTUo9sneZahv6HLQzMv8Og E56jVbTD1p1EhwsUPDGSTx4A+7v2Shy3JDPgorAOF2/I99JYpM3S6h+EGKByJRRc rOOuJmwx/x4fREWrohnZsi35tPB4z6UsRqdpn++5JnXDMENM57PZlvlkmwbTAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU0YOl6bUCPT5MIsXHarrHHmtffJ4wHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzEzODM2MmUzMjMzMzIyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbromjANBgkqhkiG9w0BAQsFAAOCAQEAUoj5 xegNXBcf+6Nq/lgLEcyz6AhCUTLzl9aEwUuqGSLsyvXyw2VcVpB1ZkcShq5qBdNb vn1jcLMbvX8TXoehP07MeSlG2ifabiWIm+uz76qIoGT8CghpMUE++TCfhpHX9yv0 JCJ+iGdwmgraPc6NYATBzy7cHxvUYtQwiMAbkUZdb1yvEFWYH9QkxjJ0T8UXy6Qy PVSLTSMAhKHUZ6dGnbReu2dfp/X52t9P2dd6e3Vw92TUs2/vxJE1WLw5QfEa7x9s KUhmYDP9mpvk71uLqr2P9vkOI6jnNnB8E/vCZUj4m3GqY4VON3DI8e/NBCeXJDVw s0JsJyNtnYwcq5p5AQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:12 2025 by rpki-client