This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130382e302f32342d3332203d3e20323730393434.roa File: 3133382e302e3130382e302f32342d3332203d3e20323730393434.roa (raw, json) Hash identifier: DGLukOXXpQ4vLYGADqGJqz4xLv2ac9jFB9DgOCH7T/A= Subject key identifier: E0:B2:27:4E:04:F5:C9:3F:83:A7:C2:23:58:EE:97:8C:D6:6C:95:04 Certificate issuer: /CN=8553806E67C661EB076F5FBA2506FA518AFD57B8 Certificate serial: 05750E4D6720A255249BBA6D8D464F5875F7BC9A Authority key identifier: 85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130382e302f32342d3332203d3e20323730393434.roa Signing time: Tue 16 Dec 2025 19:00:17 +0000 ROA not before: Tue 16 Dec 2025 18:55:17 +0000 ROA not after: Tue 15 Dec 2026 19:00:17 +0000 asID: 270944 IP address blocks: 138.0.108.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 02:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:75:0e:4d:67:20:a2:55:24:9b:ba:6d:8d:46:4f:58:75:f7:bc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8553806E67C661EB076F5FBA2506FA518AFD57B8 Validity Not Before: Dec 16 18:55:17 2025 GMT Not After : Dec 15 19:00:17 2026 GMT Subject: CN=E0B2274E04F5C93F83A7C22358EE978CD66C9504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:04:38:27:ba:06:02:4c:6f:b1:62:54:86: 57:c5:2b:ea:3f:fc:9a:e2:e5:3c:c9:a3:c3:b9:58: 0a:df:9e:40:61:e5:1c:51:83:4b:c9:0d:e5:34:bc: a3:54:47:a9:5c:f9:8f:b4:85:b5:30:50:8f:cb:25: 44:dd:7c:a1:89:2e:85:6a:ac:16:f8:43:e1:9b:3e: 72:6c:71:dc:6a:8e:69:c9:f7:bb:30:9e:cb:42:d6: 63:7e:8c:7d:df:e7:cf:a7:31:e6:d5:5f:c1:a6:af: cc:aa:39:6b:ce:bd:50:b3:e5:64:1a:14:7a:71:81: 7e:a6:89:9a:1c:82:92:92:7f:59:7f:f9:b4:65:52: c1:53:74:dc:1b:34:f2:a1:c9:3d:0d:4a:cc:2d:38: 25:4c:04:84:bb:af:ef:36:6e:f8:98:ca:f6:9e:e0: 6c:52:92:6e:06:4c:72:8e:41:19:af:2f:3b:1b:82: 57:27:30:5b:33:28:ee:05:de:52:d2:3f:b0:cf:d8: be:67:59:9b:20:cc:42:a4:66:05:0b:9d:73:37:ae: 32:21:3f:71:a6:d2:49:c0:93:46:69:98:7b:b6:f0: 06:f3:b0:23:70:45:d3:0f:2f:9b:c4:32:80:39:f8: 70:eb:15:3b:9c:6b:61:6f:4a:9e:09:96:c6:bb:d9: 7f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B2:27:4E:04:F5:C9:3F:83:A7:C2:23:58:EE:97:8C:D6:6C:95:04 X509v3 Authority Key Identifier: keyid:85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130382e302f32342d3332203d3e20323730393434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.108.0/24 Signature Algorithm: sha256WithRSAEncryption 19:12:c2:78:92:f7:1e:d5:5f:b7:ce:ba:70:3e:c6:ea:71:4c: 07:39:5f:4a:a7:e3:48:a2:28:35:d7:87:df:57:60:8a:5b:0e: 3f:61:c5:cc:44:63:da:a2:f3:9e:cc:c5:ba:03:d9:fe:fb:c0: 49:f4:10:0c:0e:3f:94:ba:e2:f9:cf:38:8f:29:fd:9b:8b:09: d9:bb:df:62:f6:e0:c3:d6:2a:db:3e:a8:c7:ad:ac:2a:44:ac: 20:98:2b:02:ca:f9:c1:92:e2:9d:8d:80:3b:82:76:51:8b:79: 71:25:67:55:24:24:fa:42:3f:a9:1c:e1:ae:49:e6:12:af:00: bc:5f:7f:17:8d:06:bd:18:5d:d1:1d:b6:40:08:49:a6:92:15: 36:54:dd:b9:2f:2c:f6:ba:40:31:19:94:d0:ce:81:e9:b3:63: 95:e0:56:63:a2:0f:00:02:48:b8:49:3b:7d:e7:1a:b1:25:6a: f4:e0:9b:96:83:4b:79:bb:4b:1d:5b:f2:db:24:c2:19:08:15: 6f:a6:1a:ab:6f:a3:bf:5d:7d:f6:3e:51:6b:af:33:99:b1:cd: c5:ab:4b:7f:a7:35:39:2b:b0:1e:ee:69:37:16:57:a2:6c:5d: 4e:b3:87:36:78:3f:4e:cf:67:1b:61:c1:f1:6e:6c:fc:40:5f: 2c:67:35:39 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUBXUOTWcgolUkm7ptjUZPWHX3vJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgwNkU2N0M2NjFFQjA3NkY1RkJBMjUwNkZBNTE4 QUZENTdCODAeFw0yNTEyMTYxODU1MTdaFw0yNjEyMTUxOTAwMTdaMDMxMTAvBgNV BAMTKEUwQjIyNzRFMDRGNUM5M0Y4M0E3QzIyMzU4RUU5NzhDRDY2Qzk1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAwQ4J7oGAkxvsWJUhlfFK+o/ /Jri5TzJo8O5WArfnkBh5RxRg0vJDeU0vKNUR6lc+Y+0hbUwUI/LJUTdfKGJLoVq rBb4Q+GbPnJscdxqjmnJ97swnstC1mN+jH3f58+nMebVX8Gmr8yqOWvOvVCz5WQa FHpxgX6miZocgpKSf1l/+bRlUsFTdNwbNPKhyT0NSswtOCVMBIS7r+82bviYyvae 4GxSkm4GTHKOQRmvLzsbglcnMFszKO4F3lLSP7DP2L5nWZsgzEKkZgULnXM3rjIh P3Gm0knAk0ZpmHu28AbzsCNwRdMPL5vEMoA5+HDrFTuca2FvSp4Jlsa72X//AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU4LInTgT1yT+Dp8IjWO6XjNZslQQwHwYDVR0j BBgwFoAUhVOAbmfGYesHb1+6JQb6UYr9V7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1JaNEJkVHg0alVYa29wMXZlOWIzR1JjSDRjbWlZQjZMSkNGM1JFREpR Sm0vMC84NTUzODA2RTY3QzY2MUVCMDc2RjVGQkEyNTA2RkE1MThBRkQ1N0I4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NTM4MDZFNjdDNjYxRUIw NzZGNUZCQTI1MDZGQTUxOEFGRDU3QjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdSWjRCZFR4NGpVWGtvcDF2ZTliM0dSY0g0Y21pWUI2TEpDRjNSRURKUUptLzAv MzEzMzM4MmUzMDJlMzEzMDM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMw MzkzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAigBsMA0GCSqGSIb3DQEBCwUAA4IBAQAZEsJ4kvce 1V+3zrpwPsbqcUwHOV9Kp+NIoig114ffV2CKWw4/YcXMRGPaovOezMW6A9n++8BJ 9BAMDj+UuuL5zziPKf2biwnZu99i9uDD1irbPqjHrawqRKwgmCsCyvnBkuKdjYA7 gnZRi3lxJWdVJCT6Qj+pHOGuSeYSrwC8X38XjQa9GF3RHbZACEmmkhU2VN25Lyz2 ukAxGZTQzoHps2OV4FZjog8AAki4STt95xqxJWr04JuWg0t5u0sdW/LbJMIZCBVv phqrb6O/XX32PlFrrzOZsc3Fq0t/pzU5K7Ae7mk3FleibF1Os4c2eD9Oz2cbYcHx bmz8QF8sZzU5 -----END CERTIFICATE-----Generated at Fri Dec 19 10:27:34 2025 by rpki-client