This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e302e302f32302d3234203d3e203238333036.roa File: 3138392e33382e302e302f32302d3234203d3e203238333036.roa (raw, json) Hash identifier: IiVDGigZQjG4RbD51dKXqDMZp37q1FdaC3TRMM/Srcg= Subject key identifier: B9:86:EB:2A:4C:61:75:98:BE:FD:04:77:D6:83:21:31:05:B9:21:F8 Certificate issuer: /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Certificate serial: 675DC4A51285AC37B18F71A873988CFB5BE43824 Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e302e302f32302d3234203d3e203238333036.roa Signing time: Mon 24 Nov 2025 13:22:06 +0000 ROA not before: Mon 24 Nov 2025 13:17:06 +0000 ROA not after: Mon 23 Nov 2026 13:22:06 +0000 asID: 28306 IP address blocks: 189.38.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5d:c4:a5:12:85:ac:37:b1:8f:71:a8:73:98:8c:fb:5b:e4:38:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Validity Not Before: Nov 24 13:17:06 2025 GMT Not After : Nov 23 13:22:06 2026 GMT Subject: CN=B986EB2A4C617598BEFD0477D683213105B921F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:34:22:93:2b:74:74:cc:75:25:1b:83:bf:c5: 09:f6:c9:2c:88:48:2a:38:b7:b5:4a:7e:3f:57:be: ee:96:77:60:ed:81:a3:ec:0e:2f:ef:4b:a9:7a:fc: 34:f6:2b:4c:1b:02:de:2c:85:a2:f6:31:08:fc:12: 6f:f7:17:a2:d4:13:87:04:dc:a7:3c:e6:a4:44:07: 5f:77:62:ca:8d:e4:4c:e2:27:50:c8:2e:74:d7:71: e1:cf:ae:3e:f0:0d:69:ca:c7:e5:57:d7:2c:3e:fb: 0a:5b:f2:1c:23:90:5f:fa:6a:a0:a2:04:14:d3:34: be:77:99:17:ac:f1:73:7a:35:2b:bf:38:cf:03:f4: 24:84:9a:a6:40:01:cd:5b:ed:5e:06:b2:cd:c2:ad: b4:2d:63:79:6c:79:61:1c:75:20:94:2a:20:a9:a7: ab:c3:4a:31:8a:81:24:d3:9d:8a:e2:ec:7f:15:75: 9a:4b:f4:3a:42:ac:49:c2:d6:7c:c8:ac:58:78:13: 35:cd:aa:91:a8:48:15:b8:85:3d:92:a6:81:d3:5b: 96:9c:52:e8:a5:79:c7:be:bf:06:6f:48:0c:24:64: 5c:77:d3:e4:26:f7:94:d1:05:37:9c:e4:3f:7a:60: 57:53:e6:fc:65:fd:8b:a7:3a:5d:3e:13:c9:c5:64: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:86:EB:2A:4C:61:75:98:BE:FD:04:77:D6:83:21:31:05:B9:21:F8 X509v3 Authority Key Identifier: keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e302e302f32302d3234203d3e203238333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.38.0.0/20 Signature Algorithm: sha256WithRSAEncryption 75:f6:63:99:0d:ff:91:a3:0d:d3:ee:bb:32:67:9a:74:82:40: 9e:41:7e:1f:22:51:6b:ae:8b:8d:3a:ff:76:a1:7a:e6:05:b5: 22:2a:9d:63:f3:f2:f0:46:c5:ec:28:7e:26:20:84:64:36:5a: 52:9a:ff:5d:16:1c:5e:5f:3a:62:ec:f6:b1:f9:2f:4e:7c:71: 4f:01:30:e6:a1:62:1a:49:db:74:3c:0e:cf:10:46:c6:3c:df: 57:90:36:c2:ec:c1:f2:4e:2d:9e:d5:68:f2:c2:16:78:f6:91: e6:e1:65:a4:03:21:06:68:29:42:3a:e3:9f:b4:8b:12:68:c2: f3:7f:13:72:26:14:aa:3c:c8:b4:19:37:7b:74:23:b8:d1:7a: ea:6f:aa:78:98:6a:51:ac:db:76:12:37:42:df:01:35:06:25: 1b:4a:f6:9e:60:37:10:8d:63:93:e8:26:f9:40:50:81:ce:a5: e7:2d:69:38:7b:4e:4b:95:8b:16:78:02:a2:99:08:80:b0:37: dd:9f:c4:bd:31:83:ec:5d:a8:2e:95:95:cd:1e:29:45:ac:15: dc:f3:2c:14:a2:5a:4f:11:04:f0:66:5c:11:bc:0c:e5:62:32: a9:ec:57:7c:6a:d6:5f:68:7d:8c:ab:29:87:92:e3:9e:3d:33: cf:f5:14:8a -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUZ13EpRKFrDexj3Goc5iM+1vkOCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDMzUyQ0M0RUNDRTMyNUZEMzdFQ0U3ODNFNEM1NDIw QjIzQzUwMzAeFw0yNTExMjQxMzE3MDZaFw0yNjExMjMxMzIyMDZaMDMxMTAvBgNV BAMTKEI5ODZFQjJBNEM2MTc1OThCRUZEMDQ3N0Q2ODMyMTMxMDVCOTIxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuNCKTK3R0zHUlG4O/xQn2ySyI SCo4t7VKfj9Xvu6Wd2DtgaPsDi/vS6l6/DT2K0wbAt4shaL2MQj8Em/3F6LUE4cE 3Kc85qREB193YsqN5EziJ1DILnTXceHPrj7wDWnKx+VX1yw++wpb8hwjkF/6aqCi BBTTNL53mRes8XN6NSu/OM8D9CSEmqZAAc1b7V4Gss3CrbQtY3lseWEcdSCUKiCp p6vDSjGKgSTTnYri7H8VdZpL9DpCrEnC1nzIrFh4EzXNqpGoSBW4hT2SpoHTW5ac Uuilece+vwZvSAwkZFx30+Qm95TRBTec5D96YFdT5vxl/YunOl0+E8nFZKBVAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUuYbrKkxhdZi+/QR31oMhMQW5IfgwHwYDVR0j BBgwFoAUvcNSzE7M4yX9N+zng+TFQgsjxQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O dWcvMC9CREMzNTJDQzRFQ0NFMzI1RkQzN0VDRTc4M0U0QzU0MjBCMjNDNTAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzM1MkNDNEVDQ0UzMjVG RDM3RUNFNzgzRTRDNTQyMEIyM0M1MDMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv MzEzODM5MmUzMzM4MmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMzMw MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAS9JgAwDQYJKoZIhvcNAQELBQADggEBAHX2Y5kN/5GjDdPu uzJnmnSCQJ5Bfh8iUWuui406/3aheuYFtSIqnWPz8vBGxewofiYghGQ2WlKa/10W HF5fOmLs9rH5L058cU8BMOahYhpJ23Q8Ds8QRsY831eQNsLswfJOLZ7VaPLCFnj2 kebhZaQDIQZoKUI645+0ixJowvN/E3ImFKo8yLQZN3t0I7jReupvqniYalGs23YS N0LfATUGJRtK9p5gNxCNY5PoJvlAUIHOpectaTh7TkuVixZ4AqKZCICwN92fxL0x g+xdqC6Vlc0eKUWsFdzzLBSiWk8RBPBmXBG8DOViMqnsV3xq1l9ofYyrKYeS4549 M8/1FIo= -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:41 2025 by rpki-client