This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa File: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (raw, json) Hash identifier: pwigmV4qE2OLi/pbIP+sYFzNtIjXCqNJZb3qu6qVJkE= Subject key identifier: 6A:C4:A5:ED:1D:AF:ED:0F:ED:3B:B9:AB:FA:06:AC:DE:7D:A1:AE:A3 Certificate issuer: /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Certificate serial: 1BBE540B162B51C8BD9FE977AC5922BCEFD8BB3E Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa Signing time: Thu 20 Nov 2025 20:20:46 +0000 ROA not before: Thu 20 Nov 2025 20:15:46 +0000 ROA not after: Thu 19 Nov 2026 20:20:46 +0000 asID: 265928 IP address blocks: 131.196.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:be:54:0b:16:2b:51:c8:bd:9f:e9:77:ac:59:22:bc:ef:d8:bb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Validity Not Before: Nov 20 20:15:46 2025 GMT Not After : Nov 19 20:20:46 2026 GMT Subject: CN=6AC4A5ED1DAFED0FED3BB9ABFA06ACDE7DA1AEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e6:36:8d:3f:5a:16:88:c2:97:87:7f:e7:bd: 1a:ca:f7:bf:69:b2:b1:12:c3:f2:f5:c1:3e:b7:b2: 62:b9:d8:1c:05:4f:9c:8b:24:b1:3c:25:d6:57:20: cc:08:9f:43:a9:a1:b1:e9:9a:2b:2c:33:0f:77:50: 2d:de:b0:d5:3c:66:56:cc:78:1b:d5:5b:5e:a5:96: 06:b9:a0:6d:45:d8:e7:18:dd:95:11:95:63:a7:46: cd:59:ce:22:07:cf:e7:7d:3d:03:ac:c5:ae:a9:7f: e9:c6:ea:e5:27:ef:68:c9:65:19:f3:80:29:49:7a: 44:2b:43:17:74:52:76:05:c7:fe:68:13:9d:ae:6a: 4c:95:08:db:49:9b:a2:aa:60:f5:b0:aa:1c:b9:46: 6c:68:ac:6f:ce:4b:15:82:7e:ba:53:a9:55:a4:a2: 7f:77:fe:e2:4d:f5:30:8b:49:9b:1c:73:cb:48:61: a7:0f:8c:98:db:93:f8:c3:05:0b:6b:d3:df:12:1b: e1:7a:c1:b5:a6:23:31:1f:3a:d5:f1:e7:2a:0c:3f: 58:64:dd:47:ed:61:af:60:a3:1f:12:77:0f:a4:10: 3b:a2:0b:1e:16:76:28:3f:de:02:b5:b1:08:83:a4: 8b:09:fe:1b:3a:95:15:b3:83:2a:7d:72:5a:e2:d4: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C4:A5:ED:1D:AF:ED:0F:ED:3B:B9:AB:FA:06:AC:DE:7D:A1:AE:A3 X509v3 Authority Key Identifier: keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.132.0/22 Signature Algorithm: sha256WithRSAEncryption 84:7a:95:e6:59:05:14:5f:1c:6c:93:91:fb:01:fb:83:2d:71: 3f:4f:e4:ba:c1:8d:b4:06:c4:8b:8c:01:63:85:f5:f2:fb:98: 3d:9c:5b:67:f0:9c:41:c7:7a:87:15:c0:1f:95:93:7a:12:7e: 89:e4:ed:7e:9c:28:f4:3a:a2:ef:a1:99:b1:0f:52:53:7f:ca: a9:2b:5d:bb:f2:b2:77:d2:3b:af:be:f3:a0:59:79:55:19:2a: ec:f3:ad:7d:7c:d3:c0:37:3a:c3:76:8b:2e:44:8e:91:00:94: 14:3d:64:17:3b:8f:2e:8a:1c:04:65:5d:08:c2:42:22:c2:83: 3a:b7:67:ee:30:63:6f:1b:66:53:4f:24:ca:18:d8:a5:71:68: 2c:42:71:67:50:aa:20:f3:91:ed:0a:aa:cf:84:d4:3a:b7:d2: 44:70:eb:83:be:1a:ac:7f:f0:19:d6:2b:99:f3:05:6f:bc:2e: 1d:2f:80:35:93:01:aa:63:cd:ca:f9:80:5d:f6:50:03:d5:6e: 54:fa:3f:3b:7a:0c:42:96:d7:81:87:67:bf:38:c3:9d:b8:16: ea:c4:d3:87:4f:eb:35:74:af:39:f8:bb:b2:fc:84:fa:09:86: eb:2f:98:85:b0:4d:c9:ad:e1:55:8d:48:0f:c8:53:5d:27:30: 28:c5:49:c4 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUG75UCxYrUci9n+l3rFkivO/Yuz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENTlGNEI1NkJCNTRGQzMxQ0Q5QkYxQzdGREREQTE5 RDNCMDM2OTAeFw0yNTExMjAyMDE1NDZaFw0yNjExMTkyMDIwNDZaMDMxMTAvBgNV BAMTKDZBQzRBNUVEMURBRkVEMEZFRDNCQjlBQkZBMDZBQ0RFN0RBMUFFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq5jaNP1oWiMKXh3/nvRrK979p srESw/L1wT63smK52BwFT5yLJLE8JdZXIMwIn0OpobHpmissMw93UC3esNU8ZlbM eBvVW16llga5oG1F2OcY3ZURlWOnRs1ZziIHz+d9PQOsxa6pf+nG6uUn72jJZRnz gClJekQrQxd0UnYFx/5oE52uakyVCNtJm6KqYPWwqhy5RmxorG/OSxWCfrpTqVWk on93/uJN9TCLSZscc8tIYacPjJjbk/jDBQtr098SG+F6wbWmIzEfOtXx5yoMP1hk 3UftYa9gox8Sdw+kEDuiCx4Wdig/3gK1sQiDpIsJ/hs6lRWzgyp9clri1EXlAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUasSl7R2v7Q/tO7mr+gas3n2hrqMwHwYDVR0j BBgwFoAUuNWfS1a7VPwxzZvxx/3doZ07A2kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNa SmkvMC9COEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDU5RjRCNTZCQjU0RkMz MUNEOUJGMUM3RkREREExOUQzQjAzNjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZIWkJGa1lKUmpjSHQ4QmFKd2pXRzlwd1VUWkRLNXBHejRRSlRxWkZTWkppLzAv MzEzMzMxMmUzMTM5MzYyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNTM5MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPEhDANBgkqhkiG9w0BAQsFAAOCAQEAhHqV 5lkFFF8cbJOR+wH7gy1xP0/kusGNtAbEi4wBY4X18vuYPZxbZ/CcQcd6hxXAH5WT ehJ+ieTtfpwo9Dqi76GZsQ9SU3/KqStdu/Kyd9I7r77zoFl5VRkq7POtfXzTwDc6 w3aLLkSOkQCUFD1kFzuPLoocBGVdCMJCIsKDOrdn7jBjbxtmU08kyhjYpXFoLEJx Z1CqIPOR7Qqqz4TUOrfSRHDrg74arH/wGdYrmfMFb7wuHS+ANZMBqmPNyvmAXfZQ A9VuVPo/O3oMQpbXgYdnvzjDnbgW6sTTh0/rNXSvOfi7svyE+gmG6y+YhbBNya3h VY1ID8hTXScwKMVJxA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:56 2025 by rpki-client