This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa File: 3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa (raw, json) Hash identifier: s1SGA7erqI+/v/muVqEvraVyD2eLQc0cw+FfBP2CvWg= Subject key identifier: EB:B0:A9:51:4F:02:F9:A5:AC:62:BE:F6:31:37:AE:C8:9A:C2:2D:5B Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 0A87E966C08A45DCCF546A13D7BBD438D9AC5B76 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:38 +0000 ROA not before: Mon 10 Nov 2025 18:33:38 +0000 ROA not after: Mon 09 Nov 2026 18:38:38 +0000 asID: 263059 IP address blocks: 186.232.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:87:e9:66:c0:8a:45:dc:cf:54:6a:13:d7:bb:d4:38:d9:ac:5b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:38 2025 GMT Not After : Nov 9 18:38:38 2026 GMT Subject: CN=EBB0A9514F02F9A5AC62BEF63137AEC89AC22D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:2f:70:44:ee:18:3a:4f:3f:07:b5:54:b3: e2:f4:d4:cc:37:9f:5d:7b:27:57:9d:26:c9:bd:f9: 13:83:b9:2b:f6:2c:42:01:64:bb:95:09:f7:66:7d: 81:33:fc:57:d8:06:ef:12:a0:ea:dd:20:c1:32:5c: 5f:25:b8:7f:99:f6:a4:d9:d9:62:d2:1d:84:0b:b2: d0:46:f4:80:9a:ea:de:4f:31:53:23:52:69:ed:53: 90:41:e9:eb:81:90:00:20:bb:b1:a3:96:14:15:cb: 05:8a:fe:f5:4c:bb:82:08:31:0b:ec:8c:35:5f:d5: d7:ba:f4:24:3a:b4:63:5c:74:a1:3d:9d:8e:8c:35: e9:47:09:ee:a3:2c:1e:8b:97:91:40:58:86:c8:a8: 29:fe:02:d8:33:da:ef:3a:c0:a4:a7:5b:77:e7:64: 74:03:48:9a:99:5e:84:5d:4c:02:04:ff:a6:6f:91: ef:62:89:42:55:b8:3c:f7:b7:d6:a7:7b:27:6a:e3: 6f:50:ca:df:52:b4:d8:f7:19:f0:bd:cd:18:ce:84: bd:cb:10:04:e5:87:38:47:06:90:e0:55:c3:af:08: 40:b8:97:33:d5:76:21:5c:d7:20:1c:bb:82:97:43: 3a:19:17:88:9c:48:f6:82:96:2b:df:02:38:0d:7b: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B0:A9:51:4F:02:F9:A5:AC:62:BE:F6:31:37:AE:C8:9A:C2:2D:5B X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.232.156.0/23 Signature Algorithm: sha256WithRSAEncryption 87:04:dc:a4:fa:da:7a:68:d0:7b:88:ea:4f:b7:aa:e1:3d:8d: ea:a9:85:75:3e:0b:1c:c2:c0:82:91:73:27:57:27:2c:5e:09: 9f:b1:39:48:6f:82:08:3b:b5:d2:76:7b:76:27:25:bf:0a:e6: e5:ce:c8:bd:7b:e1:16:d4:44:5b:9a:cc:c6:32:4f:82:e6:16: ff:a6:88:f7:18:07:ae:da:cf:e7:f5:f3:70:7c:b2:05:6b:df: 12:14:c9:be:cd:25:f2:5e:88:b9:89:c9:2e:f6:dd:5b:4f:6b: 73:d2:11:7e:92:f7:33:66:8d:8b:76:b3:b7:90:72:05:58:82: 27:8f:ad:61:f6:c1:6b:ee:a1:0e:3a:47:09:8c:6a:5e:de:7c: d5:68:34:8c:2d:59:e0:38:8b:ae:23:38:60:15:f1:48:82:c5: 8d:86:03:d2:a5:4f:40:31:fd:32:75:c9:ad:7c:da:9d:a4:9c: 49:97:ba:0c:b2:a7:dc:2a:d7:56:25:cc:a4:cb:b6:1a:dd:3d: 0d:5a:9c:fe:b3:25:58:29:05:1f:a2:06:ed:55:a7:e0:7d:5c: 48:22:0a:a4:48:88:b5:70:de:1a:0f:38:b4:31:c5:d5:ef:64: 9c:2f:73:a8:ec:cd:14:73:11:43:dd:49:13:d2:8c:cd:4c:df: 67:6a:1e:0d -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUCofpZsCKRdzPVGoT17vUONmsW3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzhaFw0yNjExMDkxODM4MzhaMDMxMTAvBgNV BAMTKEVCQjBBOTUxNEYwMkY5QTVBQzYyQkVGNjMxMzdBRUM4OUFDMjJENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOy9wRO4YOk8/B7VUs+L01Mw3 n117J1edJsm9+RODuSv2LEIBZLuVCfdmfYEz/FfYBu8SoOrdIMEyXF8luH+Z9qTZ 2WLSHYQLstBG9ICa6t5PMVMjUmntU5BB6euBkAAgu7GjlhQVywWK/vVMu4IIMQvs jDVf1de69CQ6tGNcdKE9nY6MNelHCe6jLB6Ll5FAWIbIqCn+Atgz2u86wKSnW3fn ZHQDSJqZXoRdTAIE/6Zvke9iiUJVuDz3t9aneydq429Qyt9StNj3GfC9zRjOhL3L EATlhzhHBpDgVcOvCEC4lzPVdiFc1yAcu4KXQzoZF4icSPaClivfAjgNe14JAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU67CpUU8C+aWsYr72MTeuyJrCLVswHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzEzODM2MmUzMjMzMzIyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbronDANBgkqhkiG9w0BAQsFAAOCAQEAhwTc pPraemjQe4jqT7eq4T2N6qmFdT4LHMLAgpFzJ1cnLF4Jn7E5SG+CCDu10nZ7dicl vwrm5c7IvXvhFtREW5rMxjJPguYW/6aI9xgHrtrP5/XzcHyyBWvfEhTJvs0l8l6I uYnJLvbdW09rc9IRfpL3M2aNi3azt5ByBViCJ4+tYfbBa+6hDjpHCYxqXt581Wg0 jC1Z4DiLriM4YBXxSILFjYYD0qVPQDH9MnXJrXzanaScSZe6DLKn3CrXViXMpMu2 Gt09DVqc/rMlWCkFH6IG7VWn4H1cSCIKpEiItXDeGg84tDHF1e9knC9zqOzNFHMR Q91JE9KMzUzfZ2oeDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:24 2025 by rpki-client