This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3332203d3e20323730393434.roa File: 3133382e302e3130392e302f32342d3332203d3e20323730393434.roa (raw, json) Hash identifier: VG4ce8rXW061s8Hzn2pgFi0QXYpksrrfL9hWTIY3nvQ= Subject key identifier: 5E:85:03:A1:83:2B:7D:E3:E1:12:21:F7:E2:9C:E4:8E:03:80:F9:AE Certificate issuer: /CN=8553806E67C661EB076F5FBA2506FA518AFD57B8 Certificate serial: 6FA1F636A902F8C9B7CF9D9D1A7EBEAA1E9AE40E Authority key identifier: 85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3332203d3e20323730393434.roa Signing time: Tue 16 Dec 2025 19:00:18 +0000 ROA not before: Tue 16 Dec 2025 18:55:18 +0000 ROA not after: Tue 15 Dec 2026 19:00:18 +0000 asID: 270944 IP address blocks: 138.0.109.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 08:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a1:f6:36:a9:02:f8:c9:b7:cf:9d:9d:1a:7e:be:aa:1e:9a:e4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8553806E67C661EB076F5FBA2506FA518AFD57B8 Validity Not Before: Dec 16 18:55:18 2025 GMT Not After : Dec 15 19:00:18 2026 GMT Subject: CN=5E8503A1832B7DE3E11221F7E29CE48E0380F9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:c5:13:67:aa:e8:f2:c7:99:b9:e0:e7:b5: 5b:57:8f:8e:bd:41:c4:ac:a5:a7:b9:53:19:9e:e2: 01:bb:c8:e4:c7:f7:b5:d6:ec:03:80:4f:a2:27:34: f6:9e:d3:40:52:e6:23:96:42:a6:b1:70:ee:46:ef: 71:b8:58:1e:60:dd:3b:0a:f0:cc:8c:40:70:ea:87: c5:33:36:67:d5:94:a1:41:6a:4b:a2:a4:4b:43:20: 06:2c:5e:fe:c3:45:52:3c:74:68:5f:38:bd:85:64: 1f:95:1b:62:15:c5:2d:da:6d:56:7a:26:3c:3d:4a: a5:46:a8:15:6b:70:2b:41:28:a6:6f:92:4e:f1:52: 60:42:4a:1e:3d:e2:67:81:33:4a:64:b2:2a:28:69: a2:94:ba:47:48:73:d6:c4:1a:34:a1:4d:ed:cf:3b: d1:bd:a2:4a:6d:eb:60:c1:1b:7f:28:4e:32:35:95: 99:0a:b3:af:31:4a:fd:00:f6:dc:27:85:77:b2:dd: 2b:8f:18:80:21:b4:3b:1f:44:2c:21:2e:4e:27:01: b9:b5:ba:51:38:8d:7d:44:67:b9:13:05:b6:2e:a5: 7b:54:d7:0e:d1:f4:35:9b:4d:c8:c6:ba:fe:da:c3: 60:14:0d:65:c6:ac:9f:45:a1:16:96:61:6e:d8:3d: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:85:03:A1:83:2B:7D:E3:E1:12:21:F7:E2:9C:E4:8E:03:80:F9:AE X509v3 Authority Key Identifier: keyid:85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3332203d3e20323730393434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.109.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d3:d7:57:39:7d:97:4b:b6:58:c5:eb:bd:4b:d3:c2:7b:b3: 0b:4a:0a:0c:ff:7d:4d:57:fa:08:9f:d4:80:fe:b3:cf:f2:80: f0:c5:ce:9e:37:18:99:81:56:dd:da:00:74:a2:45:0a:fa:d2: 13:2f:27:15:b2:17:37:35:5d:35:bc:d5:23:63:b7:e0:f5:a5: 7c:d7:89:d6:ae:d8:a0:18:dc:43:d8:c5:1d:e2:2c:de:e8:8c: 89:07:ec:30:4c:b5:81:1e:8a:fb:26:bb:6a:c1:ab:a4:fd:d6: 2d:5d:ff:ca:ae:3e:f3:e8:bd:31:6c:5a:4e:7d:e9:a1:bd:06: fa:3f:14:a3:65:bf:eb:d9:cb:5e:6e:10:c9:89:34:11:19:4b: 7b:2d:b9:c0:d8:48:c5:34:30:83:15:c3:0d:de:7d:48:cb:ca: 25:5f:26:71:11:76:40:ca:28:e1:92:15:3e:bf:03:f0:65:ca: 13:34:b9:93:06:45:3c:a8:fa:05:db:f3:27:f2:d6:5a:b6:96: 6a:b5:67:19:db:b6:81:80:96:d0:99:1e:f9:0f:0e:74:64:6c: 3b:23:fc:bd:26:a3:82:80:dd:d9:de:52:19:86:bc:6c:93:4c: 32:41:ee:e1:fd:4c:88:cf:fd:d4:7b:11:40:4a:4a:03:2e:0e: f4:0b:82:69 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUb6H2NqkC+Mm3z52dGn6+qh6a5A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgwNkU2N0M2NjFFQjA3NkY1RkJBMjUwNkZBNTE4 QUZENTdCODAeFw0yNTEyMTYxODU1MThaFw0yNjEyMTUxOTAwMThaMDMxMTAvBgNV BAMTKDVFODUwM0ExODMyQjdERTNFMTEyMjFGN0UyOUNFNDhFMDM4MEY5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0cUTZ6ro8seZueDntVtXj469 QcSspae5Uxme4gG7yOTH97XW7AOAT6InNPae00BS5iOWQqaxcO5G73G4WB5g3TsK 8MyMQHDqh8UzNmfVlKFBakuipEtDIAYsXv7DRVI8dGhfOL2FZB+VG2IVxS3abVZ6 Jjw9SqVGqBVrcCtBKKZvkk7xUmBCSh494meBM0pksiooaaKUukdIc9bEGjShTe3P O9G9okpt62DBG38oTjI1lZkKs68xSv0A9twnhXey3SuPGIAhtDsfRCwhLk4nAbm1 ulE4jX1EZ7kTBbYupXtU1w7R9DWbTcjGuv7aw2AUDWXGrJ9FoRaWYW7YPfutAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUXoUDoYMrfePhEiH34pzkjgOA+a4wHwYDVR0j BBgwFoAUhVOAbmfGYesHb1+6JQb6UYr9V7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1JaNEJkVHg0alVYa29wMXZlOWIzR1JjSDRjbWlZQjZMSkNGM1JFREpR Sm0vMC84NTUzODA2RTY3QzY2MUVCMDc2RjVGQkEyNTA2RkE1MThBRkQ1N0I4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NTM4MDZFNjdDNjYxRUIw NzZGNUZCQTI1MDZGQTUxOEFGRDU3QjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdSWjRCZFR4NGpVWGtvcDF2ZTliM0dSY0g0Y21pWUI2TEpDRjNSRURKUUptLzAv MzEzMzM4MmUzMDJlMzEzMDM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMw MzkzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAigBtMA0GCSqGSIb3DQEBCwUAA4IBAQAn09dXOX2X S7ZYxeu9S9PCe7MLSgoM/31NV/oIn9SA/rPP8oDwxc6eNxiZgVbd2gB0okUK+tIT LycVshc3NV01vNUjY7fg9aV814nWrtigGNxD2MUd4ize6IyJB+wwTLWBHor7Jrtq wauk/dYtXf/Krj7z6L0xbFpOfemhvQb6PxSjZb/r2ctebhDJiTQRGUt7LbnA2EjF NDCDFcMN3n1Iy8olXyZxEXZAyijhkhU+vwPwZcoTNLmTBkU8qPoF2/Mn8tZatpZq tWcZ27aBgJbQmR75Dw50ZGw7I/y9JqOCgN3Z3lIZhrxsk0wyQe7h/UyIz/3UexFA SkoDLg70C4Jp -----END CERTIFICATE-----Generated at Thu Dec 18 21:48:21 2025 by rpki-client