This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa File: 3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa (raw, json) Hash identifier: bWmCbVRjOpJpZSoW3Zr9KN6SDFlcKPJnwdqCNIWKs8s= Subject key identifier: 8F:28:7A:DD:12:CF:B3:A8:B1:23:D9:15:D4:BF:C2:C8:77:4C:E6:72 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 638AA75A0E73D7792E57FF8412D888AF421A7810 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:36 +0000 ROA not before: Mon 10 Nov 2025 18:33:36 +0000 ROA not after: Mon 09 Nov 2026 18:38:36 +0000 asID: 263059 IP address blocks: 186.232.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8a:a7:5a:0e:73:d7:79:2e:57:ff:84:12:d8:88:af:42:1a:78:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:36 2025 GMT Not After : Nov 9 18:38:36 2026 GMT Subject: CN=8F287ADD12CFB3A8B123D915D4BFC2C8774CE672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:9a:28:81:c7:65:97:5f:b3:65:e1:a5:0a: 22:fd:5d:59:3d:45:c4:d6:dd:fd:77:2c:8d:5e:60: 54:bb:22:8a:d7:7e:0b:30:60:89:8b:ba:1f:e6:be: e7:d8:5e:50:3a:a8:31:04:37:23:a8:05:e0:29:8e: 08:67:43:5b:6b:cb:42:39:4c:8f:db:dc:9e:2b:2b: 80:5e:c0:93:f7:4b:cb:8c:9f:e7:31:e2:42:65:e4: 12:1c:cd:e9:e2:51:54:da:e2:b0:34:77:29:ed:76: b5:8f:ee:26:69:fc:c8:b7:78:b5:70:44:83:d4:d5: 5e:7b:5b:d3:b7:18:88:f5:5f:b7:b5:75:06:8d:37: a3:85:42:87:2d:78:c6:1d:37:9e:1e:c9:f5:2a:18: d4:a1:19:c1:b8:da:ab:83:30:b4:2c:ca:3f:51:c3: 2e:1f:5c:92:a1:57:1d:b3:8a:db:fe:cd:d9:05:b8: 62:36:c5:e0:ad:1d:f9:09:42:bd:fe:73:6c:61:03: 5f:36:96:8a:d5:9d:41:c0:c2:e5:55:ae:85:ef:c7: 3a:8a:a1:97:a0:4b:d3:71:01:01:fb:bb:57:c4:68: 77:63:c8:78:b9:b5:d3:d7:ad:e2:63:30:63:39:c7: ad:e5:06:86:45:3a:98:91:82:ed:f5:0c:2c:5d:c5: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:7A:DD:12:CF:B3:A8:B1:23:D9:15:D4:BF:C2:C8:77:4C:E6:72 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.232.156.0/22 Signature Algorithm: sha256WithRSAEncryption ab:c8:b1:73:a1:7e:b0:35:12:4f:8a:7d:a2:12:7c:b1:db:88: 34:82:57:cf:c3:69:0a:c9:27:96:50:8d:a8:00:9a:b1:06:25: 42:e8:6f:1a:1d:db:28:14:97:5c:b3:16:7f:a6:c3:68:bf:0a: 7a:11:5b:7f:97:90:98:8c:80:04:cc:dd:7b:39:f9:72:db:99: 4a:fb:1c:ee:26:a8:7d:e1:a0:5e:70:ad:04:c9:25:13:f3:f5: 65:4b:22:53:2e:04:c6:d2:96:26:f7:70:82:70:f2:8e:1a:2e: 27:c9:43:58:77:59:94:4c:47:43:66:7a:f8:b5:e7:fe:77:29: 5f:32:99:b7:d6:20:d6:14:b6:59:51:39:a6:38:fa:7c:de:3c: 69:f8:ba:06:07:fc:cb:6d:d4:08:20:e8:d3:de:0d:a5:77:91: 08:88:d9:e0:a8:0b:57:76:43:2a:b9:ad:4c:c2:07:88:a1:77: ac:1b:e4:99:ee:f1:11:69:67:57:ed:89:5d:b9:5d:52:e2:e8: 38:f3:7a:1b:31:21:04:5c:3a:27:d2:19:d5:7d:58:56:5a:47: e1:da:c7:ff:c1:14:21:8e:92:d9:8f:d2:03:b5:2d:fc:df:21: b8:0d:af:ad:ee:1b:5c:9b:13:8f:b5:fe:b6:a6:01:d3:d2:6a: 75:8a:38:18 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUY4qnWg5z13kuV/+EEtiIr0IaeBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzZaFw0yNjExMDkxODM4MzZaMDMxMTAvBgNV BAMTKDhGMjg3QUREMTJDRkIzQThCMTIzRDkxNUQ0QkZDMkM4Nzc0Q0U2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0Joogcdll1+zZeGlCiL9XVk9 RcTW3f13LI1eYFS7IorXfgswYImLuh/mvufYXlA6qDEENyOoBeApjghnQ1try0I5 TI/b3J4rK4BewJP3S8uMn+cx4kJl5BIczeniUVTa4rA0dyntdrWP7iZp/Mi3eLVw RIPU1V57W9O3GIj1X7e1dQaNN6OFQocteMYdN54eyfUqGNShGcG42quDMLQsyj9R wy4fXJKhVx2zitv+zdkFuGI2xeCtHfkJQr3+c2xhA182lorVnUHAwuVVroXvxzqK oZegS9NxAQH7u1fEaHdjyHi5tdPXreJjMGM5x63lBoZFOpiRgu31DCxdxeVLAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUjyh63RLPs6ixI9kV1L/CyHdM5nIwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzEzODM2MmUzMjMzMzIyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEArronDANBgkqhkiG9w0BAQsFAAOCAQEAq8ix c6F+sDUST4p9ohJ8sduINIJXz8NpCsknllCNqACasQYlQuhvGh3bKBSXXLMWf6bD aL8KehFbf5eQmIyABMzdezn5ctuZSvsc7iaofeGgXnCtBMklE/P1ZUsiUy4ExtKW JvdwgnDyjhouJ8lDWHdZlExHQ2Z6+LXn/ncpXzKZt9Yg1hS2WVE5pjj6fN48afi6 Bgf8y23UCCDo094NpXeRCIjZ4KgLV3ZDKrmtTMIHiKF3rBvkme7xEWlnV+2JXbld UuLoOPN6GzEhBFw6J9IZ1X1YVlpH4drH/8EUIY6S2Y/SA7Ut/N8huA2vre4bXJsT j7X+tqYB09JqdYo4GA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:38 2025 by rpki-client