This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135382e302f32342d3234203d3e20323633303539.roa File: 3138362e3233322e3135382e302f32342d3234203d3e20323633303539.roa (raw, json) Hash identifier: 7Ntu1yxaXI/F1CoppnHShDLrfITlu8v+WnRyg593I0A= Subject key identifier: E6:21:81:FF:92:1A:E5:E4:75:BA:7E:93:D9:05:EA:00:33:E9:B1:35 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 5B8FDBEDCA4A08486B17F85A6BED90773889B35A Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135382e302f32342d3234203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:36 +0000 ROA not before: Mon 10 Nov 2025 18:33:36 +0000 ROA not after: Mon 09 Nov 2026 18:38:36 +0000 asID: 263059 IP address blocks: 186.232.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8f:db:ed:ca:4a:08:48:6b:17:f8:5a:6b:ed:90:77:38:89:b3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:36 2025 GMT Not After : Nov 9 18:38:36 2026 GMT Subject: CN=E62181FF921AE5E475BA7E93D905EA0033E9B135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:9a:54:f2:c7:84:0e:c5:51:74:b7:57:a7: 3d:19:50:e0:b1:9a:86:22:7b:48:70:c3:76:1e:59: 82:cd:8b:d8:0f:9f:65:4b:36:b0:79:94:54:fc:e0: 6b:5d:e9:3d:b5:e0:40:b5:23:a7:09:c4:f0:b2:09: fb:13:9a:69:d9:aa:37:48:e9:c9:3d:39:09:88:b1: 25:a1:c2:1d:dc:1c:ab:c1:df:bd:d7:c4:a9:8d:6d: cf:a0:74:dc:22:51:d9:c3:f5:31:eb:b7:2b:c6:51: 5b:68:0d:6c:75:ee:d5:b9:ab:34:58:50:c4:23:a4: 03:13:0f:46:45:1e:33:6f:4b:1f:e4:85:f6:df:61: f0:2f:9f:1f:b3:ab:c3:39:00:7b:e9:42:2c:6a:18: 60:c9:ca:cf:11:73:bd:e0:5e:90:51:64:97:50:a3: 21:c2:83:f2:fc:c4:f4:7b:d0:39:94:fe:39:49:55: dc:5d:88:d3:e6:99:07:dc:bd:5f:09:b3:b6:f2:bd: 59:68:d8:5f:85:d7:d6:a0:f2:bf:54:45:bd:d9:71: 35:23:36:0c:ee:b2:0b:08:20:79:17:46:29:82:54: b8:42:72:aa:95:0e:54:48:f7:6e:c2:2e:f6:1f:cb: 5a:e6:cd:f1:af:a1:90:06:1d:37:0c:b0:b6:68:7a: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:21:81:FF:92:1A:E5:E4:75:BA:7E:93:D9:05:EA:00:33:E9:B1:35 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135382e302f32342d3234203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.232.158.0/24 Signature Algorithm: sha256WithRSAEncryption cd:52:bb:7c:1d:6b:fa:de:89:b5:d4:96:06:99:2b:5d:0d:af: d3:2f:d6:15:0c:61:73:b2:a8:b1:e6:bb:41:a9:c9:56:0f:5e: 3f:14:99:69:b8:39:75:22:3e:fb:c8:cc:bd:33:3f:ab:79:00: 91:67:b5:15:3f:62:6c:38:0c:91:c9:f1:d0:c7:22:3b:8a:a8: 2e:fa:3d:c1:cc:be:00:93:6e:b6:ba:b8:27:2a:2b:8f:cf:97: 19:eb:bb:5e:04:d6:a2:f9:af:65:c3:71:ab:40:6c:7b:a1:d6: 25:c7:6c:c3:92:76:38:66:04:57:1f:ba:ed:f3:0c:7b:bf:75: ea:61:27:57:c9:0d:23:46:b7:fa:35:b8:97:ce:a2:cd:33:93: 7e:1b:a2:4e:c1:7b:02:d3:6e:06:0b:4f:3b:b6:b8:e9:45:8e: af:78:f2:1c:cc:01:f1:ed:c9:2a:65:1a:a7:65:d1:99:70:2d: 44:ef:1f:ab:90:03:c6:9c:48:bd:03:f3:78:b5:76:f9:0c:5d: 9d:2f:2d:fd:33:db:a9:0f:e1:83:72:62:75:f0:b4:26:2f:b9: 96:3d:fc:bd:88:7d:54:6d:87:5a:ef:84:06:48:ff:8a:62:3f: 4a:c6:40:bd:28:fb:e2:75:1a:33:53:e2:8e:59:45:14:07:be: e9:e9:90:c9 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUW4/b7cpKCEhrF/haa+2QdziJs1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzZaFw0yNjExMDkxODM4MzZaMDMxMTAvBgNV BAMTKEU2MjE4MUZGOTIxQUU1RTQ3NUJBN0U5M0Q5MDVFQTAwMzNFOUIxMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKJpU8seEDsVRdLdXpz0ZUOCx moYie0hww3YeWYLNi9gPn2VLNrB5lFT84Gtd6T214EC1I6cJxPCyCfsTmmnZqjdI 6ck9OQmIsSWhwh3cHKvB373XxKmNbc+gdNwiUdnD9THrtyvGUVtoDWx17tW5qzRY UMQjpAMTD0ZFHjNvSx/khfbfYfAvnx+zq8M5AHvpQixqGGDJys8Rc73gXpBRZJdQ oyHCg/L8xPR70DmU/jlJVdxdiNPmmQfcvV8Js7byvVlo2F+F19ag8r9URb3ZcTUj NgzusgsIIHkXRimCVLhCcqqVDlRI927CLvYfy1rmzfGvoZAGHTcMsLZoer6hAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU5iGB/5Ia5eR1un6T2QXqADPpsTUwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzEzODM2MmUzMjMzMzIyZTMxMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEALronjANBgkqhkiG9w0BAQsFAAOCAQEAzVK7 fB1r+t6JtdSWBpkrXQ2v0y/WFQxhc7Kosea7QanJVg9ePxSZabg5dSI++8jMvTM/ q3kAkWe1FT9ibDgMkcnx0MciO4qoLvo9wcy+AJNutrq4Jyorj8+XGeu7XgTWovmv ZcNxq0Bse6HWJcdsw5J2OGYEVx+67fMMe7916mEnV8kNI0a3+jW4l86izTOTfhui TsF7AtNuBgtPO7a46UWOr3jyHMwB8e3JKmUap2XRmXAtRO8fq5ADxpxIvQPzeLV2 +QxdnS8t/TPbqQ/hg3JidfC0Ji+5lj38vYh9VG2HWu+EBkj/imI/SsZAvSj74nUa M1PijllFFAe+6emQyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:31 2025 by rpki-client