This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa File: 3137302e3233382e36302e302f32322d3234203d3e203631363439.roa (raw, json) Hash identifier: c2mYOm88qvas0Czc/NY0UPvvGUH20wFoS40N1/RODGU= Subject key identifier: 79:DD:82:5C:BA:7B:8B:EA:02:37:E0:CD:1D:06:87:2E:27:62:08:D9 Certificate issuer: /CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713 Certificate serial: 4CF0886287F69248817717BE02071162BA1EB55D Authority key identifier: D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer Subject info access: rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa Signing time: Wed 03 Dec 2025 17:38:00 +0000 ROA not before: Wed 03 Dec 2025 17:33:00 +0000 ROA not after: Wed 02 Dec 2026 17:38:00 +0000 asID: 61649 IP address blocks: 170.238.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f0:88:62:87:f6:92:48:81:77:17:be:02:07:11:62:ba:1e:b5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713 Validity Not Before: Dec 3 17:33:00 2025 GMT Not After : Dec 2 17:38:00 2026 GMT Subject: CN=79DD825CBA7B8BEA0237E0CD1D06872E276208D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:75:5e:d7:49:aa:85:af:e4:0c:f4:c8:ec: 1f:d7:8b:14:57:42:76:ef:d4:75:55:37:bb:38:79: 2e:27:da:f2:b3:c6:d1:06:a1:30:71:cb:1e:19:37: 07:68:5c:66:bb:7e:82:f7:a1:88:fe:0c:2e:7e:a3: 0f:6e:ae:2b:41:a6:80:5b:f2:f5:79:22:be:ba:52: ff:50:f0:b4:ba:18:29:69:d6:2d:46:4d:be:da:d9: 59:c2:dd:6a:c2:fe:fd:47:cc:2e:24:05:e2:12:de: 17:5b:77:55:7c:35:b2:84:b9:bd:4d:dd:11:1d:55: 73:c9:14:76:74:6b:21:19:1d:74:ba:84:f9:ce:2b: cb:2f:3d:ab:00:78:62:c9:7d:fa:08:48:e3:cd:44: a3:29:8a:7e:fc:0d:fa:35:b9:35:b0:e1:63:4c:c1: 80:df:4f:0c:d2:57:43:02:2d:69:29:2d:97:16:9e: 4a:2a:c1:1c:3c:b4:a3:3c:4d:89:79:86:16:2e:67: fb:dc:a5:93:a0:44:a4:2c:74:74:07:1a:22:f0:d6: b6:bf:85:7d:be:82:7e:84:eb:87:4b:f2:65:e6:9f: 3e:98:33:00:9f:1f:c8:fe:11:7c:08:a3:12:3f:09: 10:b9:42:a0:c3:ed:93:66:ee:b1:d0:26:54:4d:29: ef:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DD:82:5C:BA:7B:8B:EA:02:37:E0:CD:1D:06:87:2E:27:62:08:D9 X509v3 Authority Key Identifier: keyid:D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.60.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:f9:41:8c:c6:e0:a3:1b:c3:e7:e4:2e:5b:93:99:1a:87:90: 21:b8:ab:ba:ba:06:81:71:61:1d:12:c2:d1:12:7c:72:77:b8: 2f:1d:6a:7c:f2:22:34:c7:8c:a2:a8:90:e2:c4:69:66:24:75: 1e:4a:fb:16:b6:a6:24:2f:f3:93:8e:76:95:d2:68:8d:b5:6b: 50:57:15:3e:85:57:65:91:c9:0d:fc:c6:b7:96:0f:9e:46:c8: f8:f6:b7:80:70:a5:6c:88:1a:02:3b:5b:2d:6e:cb:ca:6a:60: 41:3c:86:e9:ba:db:c4:ce:ca:b7:72:5d:ad:a7:86:fb:84:46: f6:90:5c:76:0c:c1:b0:ec:55:d5:7c:04:3b:85:50:6d:ca:96: e3:2d:3d:34:52:f7:ba:33:22:93:9b:90:fb:31:a4:31:18:d6: 88:62:c7:d0:f2:2d:50:bd:09:a4:7c:1e:2b:cd:bb:9e:52:ed: 73:ec:d7:6b:a4:8f:4e:27:5a:ce:20:5a:6e:57:68:31:70:63: d2:92:92:8d:e1:46:86:c6:c9:d3:24:ed:c6:dd:e2:a5:93:b1: b6:89:87:ff:87:45:a5:2f:06:03:72:cf:e5:b8:ed:3a:30:2a: 6b:e0:70:af:88:3b:d1:51:00:d5:72:c3:fe:42:86:f6:bc:e2: a9:d4:da:69 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUTPCIYof2kkiBdxe+AgcRYroetV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0QzU1M0MwMjhCRjA0RkE5MjY5NkM4MzYzREM4RDVC RTdCMzcxMzAeFw0yNTEyMDMxNzMzMDBaFw0yNjEyMDIxNzM4MDBaMDMxMTAvBgNV BAMTKDc5REQ4MjVDQkE3QjhCRUEwMjM3RTBDRDFEMDY4NzJFMjc2MjA4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVX3Ve10mqha/kDPTI7B/XixRX Qnbv1HVVN7s4eS4n2vKzxtEGoTBxyx4ZNwdoXGa7foL3oYj+DC5+ow9uritBpoBb 8vV5Ir66Uv9Q8LS6GClp1i1GTb7a2VnC3WrC/v1HzC4kBeIS3hdbd1V8NbKEub1N 3REdVXPJFHZ0ayEZHXS6hPnOK8svPasAeGLJffoISOPNRKMpin78Dfo1uTWw4WNM wYDfTwzSV0MCLWkpLZcWnkoqwRw8tKM8TYl5hhYuZ/vcpZOgRKQsdHQHGiLw1ra/ hX2+gn6E64dL8mXmnz6YMwCfH8j+EXwIoxI/CRC5QqDD7ZNm7rHQJlRNKe+lAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUed2CXLp7i+oCN+DNHQaHLidiCNkwHwYDVR0j BBgwFoAU0UxVPAKL8E+pJpbINj3I1b57NxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlZKZWZod0NuREJhaUVEYnVuN3JnUjJ6V3dYaTFxb2J6SGtaR2lKcTFK SHcvMC9EMTRDNTUzQzAyOEJGMDRGQTkyNjk2QzgzNjNEQzhENUJFN0IzNzEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNEM1NTNDMDI4QkYwNEZB OTI2OTZDODM2M0RDOEQ1QkU3QjM3MTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZWSmVmaHdDbkRCYWlFRGJ1bjdyZ1Iyeld3WGkxcW9iekhrWkdpSnExSkh3LzAv MzEzNzMwMmUzMjMzMzgyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqu48MA0GCSqGSIb3DQEBCwUAA4IBAQAe+UGMxuCj G8Pn5C5bk5kah5AhuKu6ugaBcWEdEsLREnxyd7gvHWp88iI0x4yiqJDixGlmJHUe SvsWtqYkL/OTjnaV0miNtWtQVxU+hVdlkckN/Ma3lg+eRsj49reAcKVsiBoCO1st bsvKamBBPIbputvEzsq3cl2tp4b7hEb2kFx2DMGw7FXVfAQ7hVBtypbjLT00Uve6 MyKTm5D7MaQxGNaIYsfQ8i1QvQmkfB4rzbueUu1z7NdrpI9OJ1rOIFpuV2gxcGPS kpKN4UaGxsnTJO3G3eKlk7G2iYf/h0WlLwYDcs/luO06MCpr4HCviDvRUQDVcsP+ Qob2vOKp1Npp -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:18 2025 by rpki-client