This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa File: 3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa (raw, json) Hash identifier: N5XTgzPEmPXmKtlaLzvcPXIGFPUesWDx3NfLWl/vRI4= Subject key identifier: 2F:F0:56:4E:77:57:6E:D2:0D:59:EE:17:12:36:4F:5D:6A:5E:DF:49 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 2BA719E300A8DCD30CDEC672752C075BEDA45C10 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:39 +0000 ROA not before: Mon 10 Nov 2025 18:33:39 +0000 ROA not after: Mon 09 Nov 2026 18:38:39 +0000 asID: 263059 IP address blocks: 186.232.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a7:19:e3:00:a8:dc:d3:0c:de:c6:72:75:2c:07:5b:ed:a4:5c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:39 2025 GMT Not After : Nov 9 18:38:39 2026 GMT Subject: CN=2FF0564E77576ED20D59EE1712364F5D6A5EDF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:82:d6:9f:02:2a:7c:30:f5:7d:25:31:9f: 3b:02:06:23:a6:41:3e:4d:5a:65:c3:2e:ab:ad:d8: b2:93:34:f0:1c:ac:75:12:1c:aa:73:2c:9c:70:92: 6c:ba:c4:9a:04:15:59:38:20:a3:a5:7c:0a:63:d3: bf:ae:ac:a8:23:a7:42:61:1c:36:a5:7b:d3:be:b9: 8e:6f:31:40:ec:fc:00:87:f5:6d:cf:c3:75:90:04: 0f:73:a1:6f:ff:f2:d7:33:61:29:cb:a0:2b:da:c9: 56:eb:8d:47:b7:08:74:f8:fd:62:96:54:b2:bc:d9: 31:a0:c6:f8:3c:7c:d6:ac:9f:b2:ac:15:ab:9c:21: cc:dc:31:7f:99:22:09:33:1d:d6:46:a6:82:6f:1f: 27:16:de:4e:34:73:5e:fe:d4:31:23:a2:e2:54:54: 80:22:b7:7a:6a:5c:f5:0c:3e:a4:28:98:f0:f8:c1: 15:82:44:da:a6:9b:26:d4:ab:27:8b:42:ac:d6:cf: 9f:9e:c6:57:40:59:b8:da:50:bb:07:95:28:20:b2: 99:db:89:23:ac:54:e5:09:fb:1a:a2:fc:8d:70:03: a3:11:93:58:0d:30:e6:f9:93:6b:f6:a4:9d:5f:9e: 66:e2:e0:a5:74:8d:f0:60:b4:cf:86:87:bb:89:3d: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F0:56:4E:77:57:6E:D2:0D:59:EE:17:12:36:4F:5D:6A:5E:DF:49 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.232.159.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:52:a3:60:0d:cd:20:b2:62:7a:ca:6f:85:92:54:c5:fc:c0: fd:92:6b:b0:36:14:83:b9:1f:d7:55:6e:bc:91:fe:f3:29:99: 1c:89:76:44:81:cc:17:0e:f7:1a:57:c8:2c:b4:91:72:bb:ea: 65:51:7c:30:43:11:8a:67:e0:7a:08:b3:64:fa:d6:96:0e:64: 67:ab:7c:e0:7e:db:df:a0:a5:b0:ad:08:a0:05:bb:f0:15:56: 71:4a:dc:31:7d:ac:d1:af:d7:0d:e9:0b:dd:08:bb:f3:91:b3: fa:d8:a7:60:73:bf:36:ad:53:fb:6f:df:db:15:a2:e5:3c:3f: 6a:99:37:98:86:26:b6:c6:11:89:83:57:e0:a3:5c:5b:fe:d3: ae:bd:5e:8a:40:33:a6:cf:f4:8e:63:3d:ca:a4:0f:31:cf:6b: f7:a3:c1:91:00:d7:88:e0:e4:18:8b:03:e6:9a:70:70:bd:90: 83:65:e1:bd:92:69:88:85:ad:20:6f:9e:93:35:66:6a:57:c9: bd:a0:d5:ab:cb:09:0d:2c:7e:71:fc:dc:a1:db:0d:d8:e5:3b: 7e:9a:93:78:80:80:36:d2:5f:5f:10:13:9d:6f:87:03:1a:db: 16:a2:6d:67:d9:fc:1a:89:a1:bf:02:5f:15:2b:53:45:be:ce: d7:0f:fd:67 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUK6cZ4wCo3NMM3sZydSwHW+2kXBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzlaFw0yNjExMDkxODM4MzlaMDMxMTAvBgNV BAMTKDJGRjA1NjRFNzc1NzZFRDIwRDU5RUUxNzEyMzY0RjVENkE1RURGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7joLWnwIqfDD1fSUxnzsCBiOm QT5NWmXDLqut2LKTNPAcrHUSHKpzLJxwkmy6xJoEFVk4IKOlfApj07+urKgjp0Jh HDale9O+uY5vMUDs/ACH9W3Pw3WQBA9zoW//8tczYSnLoCvayVbrjUe3CHT4/WKW VLK82TGgxvg8fNasn7KsFaucIczcMX+ZIgkzHdZGpoJvHycW3k40c17+1DEjouJU VIAit3pqXPUMPqQomPD4wRWCRNqmmybUqyeLQqzWz5+exldAWbjaULsHlSggspnb iSOsVOUJ+xqi/I1wA6MRk1gNMOb5k2v2pJ1fnmbi4KV0jfBgtM+Gh7uJPQYRAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUL/BWTndXbtINWe4XEjZPXWpe30kwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzEzODM2MmUzMjMzMzIyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEALronzANBgkqhkiG9w0BAQsFAAOCAQEAS1Kj YA3NILJiespvhZJUxfzA/ZJrsDYUg7kf11VuvJH+8ymZHIl2RIHMFw73GlfILLSR crvqZVF8MEMRimfgegizZPrWlg5kZ6t84H7b36ClsK0IoAW78BVWcUrcMX2s0a/X DekL3Qi785Gz+tinYHO/Nq1T+2/f2xWi5Tw/apk3mIYmtsYRiYNX4KNcW/7Trr1e ikAzps/0jmM9yqQPMc9r96PBkQDXiODkGIsD5ppwcL2Qg2XhvZJpiIWtIG+ekzVm alfJvaDVq8sJDSx+cfzcodsN2OU7fpqTeICANtJfXxATnW+HAxrbFqJtZ9n8Gomh vwJfFStTRb7O1w/9Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:17 2025 by rpki-client