This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e203532393234.roa File: 3138392e3132372e3133352e302f32342d3234203d3e203532393234.roa (raw, json) Hash identifier: NhXXqa1Hada153j64z5tAAZT+bimieZ9lhCNvJSZAaE= Subject key identifier: A6:D4:3D:98:32:28:15:82:63:9F:85:F6:17:D0:9B:F4:64:63:CF:EE Certificate issuer: /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F Certificate serial: 5CF43216156F78CF63CBDEA3A1E20B9B52E1C88B Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e203532393234.roa Signing time: Thu 13 Nov 2025 19:35:31 +0000 ROA not before: Thu 13 Nov 2025 19:30:31 +0000 ROA not after: Thu 12 Nov 2026 19:35:31 +0000 asID: 52924 IP address blocks: 189.127.135.0/24 maxlen: 24 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f4:32:16:15:6f:78:cf:63:cb:de:a3:a1:e2:0b:9b:52:e1:c8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F Validity Not Before: Nov 13 19:30:31 2025 GMT Not After : Nov 12 19:35:31 2026 GMT Subject: CN=A6D43D9832281582639F85F617D09BF46463CFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:a6:70:72:20:25:85:51:a5:ba:68:28:ba: 49:eb:ed:b6:12:1f:b5:1a:10:ba:d3:1b:9a:b5:39: fa:74:fc:2a:d8:d2:7f:ab:1b:0d:c0:b1:19:d3:a7: ce:e4:60:6b:34:a0:d8:c3:a3:c9:6b:3f:d5:41:86: b8:19:b1:e5:5f:05:37:6f:c8:e6:b8:c4:d5:b8:f6: 4c:8a:d6:fc:48:7a:21:b7:a8:33:02:96:19:c4:bb: 35:0f:8c:a9:40:21:3a:2e:db:1d:98:41:9f:d6:7c: be:23:39:4b:cc:35:d9:e1:98:6b:04:41:4e:38:6a: 37:d9:85:5b:08:a7:26:85:4d:d9:90:89:40:fa:67: 7b:b2:86:1d:fb:80:be:b0:3a:74:f7:32:cd:00:d2: 61:77:04:3c:ab:a3:21:eb:4c:af:45:e2:e7:9c:e5: b0:b0:6e:c5:5e:54:a6:e1:dd:57:ae:88:ae:dd:36: 1b:8e:ca:ea:e0:b8:16:11:9e:f9:f3:2f:4b:c8:4f: e4:17:43:18:ef:d8:ab:ba:35:fa:ce:81:06:4d:2f: c1:1c:9d:8b:3d:1c:2a:9e:40:09:52:f5:d2:2d:c4: 86:dd:ec:3c:66:f1:16:a5:3d:f8:4c:ed:33:ec:27: 3d:8b:01:d0:6a:ac:b7:ae:0f:06:7e:b9:b2:c6:aa: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D4:3D:98:32:28:15:82:63:9F:85:F6:17:D0:9B:F4:64:63:CF:EE X509v3 Authority Key Identifier: keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e203532393234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.135.0/24 Signature Algorithm: sha256WithRSAEncryption 50:65:a7:51:68:81:7d:53:98:f2:c0:9f:e8:36:08:89:ed:5d: c6:cd:11:44:d5:ae:4b:6e:5f:b4:63:4e:49:7c:08:58:b2:c5: 75:ca:6e:39:de:35:43:a8:e2:b7:4c:df:7b:1d:86:72:75:39: 94:da:8f:a1:a7:ed:89:60:7d:27:f7:c9:cb:52:23:98:46:dc: 0c:fd:f3:10:ac:28:42:ce:96:fc:b2:3e:a4:cd:d5:b3:cb:f2: 19:d7:23:5f:47:82:c2:28:70:1d:37:6c:1c:60:b7:8b:8a:e6: ec:c0:e6:3e:98:88:27:09:8a:6c:ce:9e:74:a4:f2:2e:e6:bf: c2:0d:15:ed:bf:d2:1c:77:35:dc:e6:9f:49:a0:ef:b4:13:3e: 91:a7:1e:dc:1c:b2:68:d0:14:29:d3:0a:85:14:e2:7e:f1:0f: 4c:35:6a:61:f9:12:2c:26:82:43:60:a2:e0:83:20:67:70:f9: 54:c6:c7:58:19:de:21:71:72:cd:a4:78:1c:b5:45:4f:6d:6d: 62:09:be:ca:8e:a8:ce:5d:67:00:6a:b7:73:ef:54:f1:84:92: de:45:cd:31:2a:51:9f:5a:84:cd:9a:5a:13:7d:6d:93:f0:84: e7:1b:b3:de:53:19:e3:4a:f2:3c:2b:55:21:ee:6c:ad:98:ea: 8a:e4:cb:c2 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUXPQyFhVveM9jy96joeILm1LhyIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ2N0FCM0FFNzBCN0YzREY3NTdEOERBRjc1NjU0ODU3 QTAzMkE3RjAeFw0yNTExMTMxOTMwMzFaFw0yNjExMTIxOTM1MzFaMDMxMTAvBgNV BAMTKEE2RDQzRDk4MzIyODE1ODI2MzlGODVGNjE3RDA5QkY0NjQ2M0NGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSKZwciAlhVGlumgouknr7bYS H7UaELrTG5q1Ofp0/CrY0n+rGw3AsRnTp87kYGs0oNjDo8lrP9VBhrgZseVfBTdv yOa4xNW49kyK1vxIeiG3qDMClhnEuzUPjKlAITou2x2YQZ/WfL4jOUvMNdnhmGsE QU44ajfZhVsIpyaFTdmQiUD6Z3uyhh37gL6wOnT3Ms0A0mF3BDyroyHrTK9F4uec 5bCwbsVeVKbh3VeuiK7dNhuOyurguBYRnvnzL0vIT+QXQxjv2Ku6NfrOgQZNL8Ec nYs9HCqeQAlS9dItxIbd7Dxm8RalPfhM7TPsJz2LAdBqrLeuDwZ+ubLGqhEHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUptQ9mDIoFYJjn4X2F9Cb9GRjz+4wHwYDVR0j BBgwFoAU9GerOucLfz33V9ja91ZUhXoDKn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1FreHlLa3kzRlg0VGRFa1VKWWRvcE1QcldWMnVUUGtTTXVGU2lucTIx WHEvMC9GNDY3QUIzQUU3MEI3RjNERjc1N0Q4REFGNzU2NTQ4NTdBMDMyQTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NjdBQjNBRTcwQjdGM0RG NzU3RDhEQUY3NTY1NDg1N0EwMzJBN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdRa3h5S2t5M0ZYNFRkRWtVSllkb3BNUHJXVjJ1VFBrU011RlNpbnEyMVhxLzAv MzEzODM5MmUzMTMyMzcyZTMxMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzIzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAC9f4cwDQYJKoZIhvcNAQELBQADggEBAFBlp1Fo gX1TmPLAn+g2CIntXcbNEUTVrktuX7RjTkl8CFiyxXXKbjneNUOo4rdM33sdhnJ1 OZTaj6Gn7YlgfSf3yctSI5hG3Az98xCsKELOlvyyPqTN1bPL8hnXI19HgsIocB03 bBxgt4uK5uzA5j6YiCcJimzOnnSk8i7mv8INFe2/0hx3Ndzmn0mg77QTPpGnHtwc smjQFCnTCoUU4n7xD0w1amH5EiwmgkNgouCDIGdw+VTGx1gZ3iFxcs2keBy1RU9t bWIJvsqOqM5dZwBqt3PvVPGEkt5FzTEqUZ9ahM2aWhN9bZPwhOcbs95TGeNK8jwr VSHubK2Y6orky8I= -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:13 2025 by rpki-client