This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa File: 3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (raw, json) Hash identifier: LEXqlZJbf5qMWkOrSfLzDj7qmflNSbw1YqpcAf5AUH8= Subject key identifier: 3D:F3:CE:10:DF:6B:AE:EE:87:D3:F3:2A:1B:1A:D6:A1:FE:45:A7:CB Certificate issuer: /CN=99C2A53A53B7161516985068CD39F465FE646938 Certificate serial: 0E1D2D0840145E3F7298942D4B3400622FF77D6D Authority key identifier: 99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa Signing time: Mon 24 Nov 2025 17:21:09 +0000 ROA not before: Mon 24 Nov 2025 17:16:09 +0000 ROA not after: Mon 23 Nov 2026 17:21:09 +0000 asID: 28232 IP address blocks: 189.127.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 08:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1d:2d:08:40:14:5e:3f:72:98:94:2d:4b:34:00:62:2f:f7:7d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C2A53A53B7161516985068CD39F465FE646938 Validity Not Before: Nov 24 17:16:09 2025 GMT Not After : Nov 23 17:21:09 2026 GMT Subject: CN=3DF3CE10DF6BAEEE87D3F32A1B1AD6A1FE45A7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8e:7a:17:b2:e4:b3:d6:b6:0d:f5:1b:22:f9: 1b:57:19:ad:dc:ab:bd:f6:d5:a5:a9:97:c0:91:dd: 92:1a:bf:46:39:fc:c2:63:fa:c0:18:29:a3:f0:02: dc:60:3a:51:b4:27:3d:3e:93:a8:a8:3a:b1:f8:ef: 99:c8:49:b2:59:e9:23:56:8a:7b:40:9e:a1:7d:9b: d7:a7:56:a2:98:d5:27:c3:ca:91:e4:f9:a0:97:33: 4c:3a:1b:96:bb:50:20:66:bb:71:21:63:bf:18:0a: 4a:20:ef:51:46:d3:59:b8:8d:aa:4b:72:3c:2f:fa: a2:ab:4f:fa:ba:69:7a:4f:36:02:45:87:b5:45:53: 2b:18:1e:e2:20:49:6b:54:92:f9:63:cf:e3:ff:dc: 39:26:9e:7d:42:df:6b:19:b1:8d:30:75:ad:f7:03: c5:02:59:b3:02:d0:1a:ad:e2:c9:3b:2f:05:7a:25: 8d:47:36:7f:a3:25:99:52:7a:b5:88:fe:1f:f8:bf: 1a:f5:1d:bc:c2:9f:58:f0:74:63:63:51:42:82:74: 9e:d2:90:8a:27:ce:2e:ac:8a:d1:7d:91:66:b9:a9: 25:48:02:69:9f:7d:51:96:56:54:6d:c9:8f:b7:be: be:0a:45:5c:bf:12:d5:4a:47:36:5e:d1:b2:b8:73: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F3:CE:10:DF:6B:AE:EE:87:D3:F3:2A:1B:1A:D6:A1:FE:45:A7:CB X509v3 Authority Key Identifier: keyid:99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.32.0/20 Signature Algorithm: sha256WithRSAEncryption 11:3b:92:9d:3f:aa:02:27:96:1c:f9:40:74:6a:03:9c:52:b4: 34:86:f9:8a:76:a0:24:47:d5:a8:69:82:0e:e7:8d:ef:48:a6: ac:33:40:ee:4e:18:d6:7d:66:42:ec:c3:35:ab:da:2b:2f:c8: 1b:14:89:08:83:84:57:e0:dd:a2:f8:dd:e3:1e:a5:ec:2d:a7: 24:40:d5:d4:46:48:eb:f7:17:7c:d8:b3:a9:38:b3:2d:bc:44: e3:f4:1f:4b:51:18:88:74:f5:7f:17:27:fb:0a:ac:0c:77:88: 55:ed:a8:cd:d1:a3:e4:9a:e5:a8:13:15:f5:1a:d5:c7:f2:3c: 6d:46:26:e0:39:5b:13:fd:57:a1:8e:a6:03:53:82:28:2f:fe: a0:2e:44:56:14:7c:8a:5e:fc:82:41:5c:9a:a3:d3:07:32:56: 2e:58:d5:ad:25:ab:60:26:dd:22:e7:e3:87:ff:6e:01:b5:c5: 11:cc:a5:d1:01:87:71:81:76:a9:5f:2b:c6:3d:12:2a:99:6d: 8c:48:6b:4f:c6:e6:e0:51:91:ae:15:6c:28:85:46:95:b4:8b: fb:c8:c1:48:91:51:91:87:3e:b1:e2:6b:75:bd:27:e7:8d:f5: fa:67:79:e5:eb:d8:10:70:fb:d3:f0:25:b0:00:e9:0f:40:7f: a8:da:d4:d6 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUDh0tCEAUXj9ymJQtSzQAYi/3fW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMkE1M0E1M0I3MTYxNTE2OTg1MDY4Q0QzOUY0NjVG RTY0NjkzODAeFw0yNTExMjQxNzE2MDlaFw0yNjExMjMxNzIxMDlaMDMxMTAvBgNV BAMTKDNERjNDRTEwREY2QkFFRUU4N0QzRjMyQTFCMUFENkExRkU0NUE3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDijnoXsuSz1rYN9Rsi+RtXGa3c q7321aWpl8CR3ZIav0Y5/MJj+sAYKaPwAtxgOlG0Jz0+k6ioOrH475nISbJZ6SNW intAnqF9m9enVqKY1SfDypHk+aCXM0w6G5a7UCBmu3EhY78YCkog71FG01m4japL cjwv+qKrT/q6aXpPNgJFh7VFUysYHuIgSWtUkvljz+P/3Dkmnn1C32sZsY0wda33 A8UCWbMC0Bqt4sk7LwV6JY1HNn+jJZlSerWI/h/4vxr1HbzCn1jwdGNjUUKCdJ7S kIonzi6sitF9kWa5qSVIAmmffVGWVlRtyY+3vr4KRVy/EtVKRzZe0bK4c3V3AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUPfPOEN9rru6H0/MqGxrWof5Fp8swHwYDVR0j BBgwFoAUmcKlOlO3FhUWmFBozTn0Zf5kaTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVn elovMC85OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QzJBNTNBNTNCNzE2MTUx Njk4NTA2OENEMzlGNDY1RkU2NDY5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdaZXhkc3hnRjQ5TEQ5Q200WGJjUlFndU5QNTdyUkVHMTVuSEIzTEh1Z3paLzAv MzEzODM5MmUzMTMyMzcyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4 MzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEvX8gMA0GCSqGSIb3DQEBCwUAA4IBAQARO5KdP6oC J5Yc+UB0agOcUrQ0hvmKdqAkR9WoaYIO543vSKasM0DuThjWfWZC7MM1q9orL8gb FIkIg4RX4N2i+N3jHqXsLackQNXURkjr9xd82LOpOLMtvETj9B9LURiIdPV/Fyf7 CqwMd4hV7ajN0aPkmuWoExX1GtXH8jxtRibgOVsT/VehjqYDU4IoL/6gLkRWFHyK XvyCQVyao9MHMlYuWNWtJatgJt0i5+OH/24BtcURzKXRAYdxgXapXyvGPRIqmW2M SGtPxubgUZGuFWwohUaVtIv7yMFIkVGRhz6x4mt1vSfnjfX6Z3nl69gQcPvT8CWw AOkPQH+o2tTW -----END CERTIFICATE-----Generated at Thu Dec 18 09:34:03 2025 by rpki-client