This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa File: 3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa (raw, json) Hash identifier: IWBxK5KR8T2XvHkjdmtzgL+i9peJ5XPLTIG5K/vg9DQ= Subject key identifier: 8D:D8:77:3D:D7:A9:92:DF:02:55:F7:A3:B1:42:1F:C0:5D:32:F3:05 Certificate issuer: /CN=4344C667BE8DEC1704E520A9E2F51F3FAB4C823E Certificate serial: 2FD6367064F3FFE40C9399F6AF3389625084F0FF Authority key identifier: 43:44:C6:67:BE:8D:EC:17:04:E5:20:A9:E2:F5:1F:3F:AB:4C:82:3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa Signing time: Tue 18 Nov 2025 20:43:50 +0000 ROA not before: Tue 18 Nov 2025 20:38:50 +0000 ROA not after: Tue 17 Nov 2026 20:43:50 +0000 asID: 265971 IP address blocks: 164.163.196.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d6:36:70:64:f3:ff:e4:0c:93:99:f6:af:33:89:62:50:84:f0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4344C667BE8DEC1704E520A9E2F51F3FAB4C823E Validity Not Before: Nov 18 20:38:50 2025 GMT Not After : Nov 17 20:43:50 2026 GMT Subject: CN=8DD8773DD7A992DF0255F7A3B1421FC05D32F305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:bb:a9:75:2d:e4:40:61:32:24:f0:80:bf: a0:7c:c2:82:50:cc:f1:41:55:44:c8:20:27:0c:8e: 5f:6f:b9:65:a4:44:bd:ba:ca:72:15:c0:a6:35:e1: 48:d9:a0:0e:e4:19:33:65:43:3a:30:a9:89:ac:39: 63:18:b6:58:4d:5a:94:ce:ad:dc:79:3e:2e:31:55: 08:40:0b:b6:b0:aa:60:5c:70:b9:27:9b:85:3d:8c: 6e:cd:51:9f:19:7f:23:ac:87:77:d9:30:a1:38:8f: c7:8d:1e:1f:57:96:49:5a:e3:d7:ad:28:0a:a3:5f: d9:5c:d6:a6:2b:e6:d8:d9:d5:93:1c:04:a7:ff:5b: c7:e3:d5:06:44:e5:95:a3:01:c6:40:a7:c6:a1:1e: b6:f8:52:6d:69:8d:da:cd:8e:6b:a7:71:dd:d4:20: 52:05:fd:d9:1d:47:c0:e1:4f:5c:75:fd:7f:55:21: 43:eb:2b:38:3e:5b:b4:22:90:6e:89:36:30:11:9c: 5b:9e:15:3a:08:32:c7:bb:e3:b6:10:5d:99:5d:e4: a1:6d:55:ec:ff:41:3f:f2:75:98:aa:7f:e0:af:34: 50:04:66:fb:0a:b9:cc:aa:c5:2c:bd:4a:54:62:ab: e9:cb:82:be:f1:61:5a:39:e0:a7:c4:b5:de:0e:d3: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D8:77:3D:D7:A9:92:DF:02:55:F7:A3:B1:42:1F:C0:5D:32:F3:05 X509v3 Authority Key Identifier: keyid:43:44:C6:67:BE:8D:EC:17:04:E5:20:A9:E2:F5:1F:3F:AB:4C:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.196.0/22 Signature Algorithm: sha256WithRSAEncryption 32:21:18:25:31:6a:53:62:3d:8f:01:dd:a5:29:49:c8:9e:dc: 64:f0:1c:09:be:74:c3:bb:7a:38:bc:fa:a8:04:a7:db:2f:e8: d1:a2:36:1b:a7:0d:c0:a4:0e:02:a0:ce:06:dd:7d:ff:8e:2a: 9d:fc:79:65:fb:3f:88:c0:d6:cd:24:b9:d1:a0:48:6d:e4:93: ef:1b:fc:ed:3b:68:51:a9:41:c2:66:4d:11:d9:1f:d8:62:f1: 2d:09:2d:a5:21:cd:d6:00:6f:ae:8b:c1:53:0f:f4:16:5a:b5: 36:e2:05:15:ab:bb:21:6e:ab:73:70:38:6e:fe:56:51:ad:81: 10:98:20:f6:23:4b:14:fa:a3:2a:fe:1f:69:81:89:de:40:4e: e6:00:7c:d6:58:12:1e:86:d3:75:51:eb:37:a1:2f:80:2f:bf: 81:90:a5:5e:1e:59:99:86:84:c4:07:92:1b:a5:b5:dd:1f:15: ba:d6:36:36:94:10:80:53:91:a8:42:9a:ec:b0:cf:9a:25:2c: de:20:7a:d6:fa:60:78:7b:97:48:38:bc:fc:d5:62:00:cb:88: 9f:ba:dd:ef:00:c8:6b:40:40:45:6e:89:59:b5:3b:f0:e2:45: 47:1e:5b:f2:2f:7e:96:96:8c:af:c9:8c:c2:56:75:0c:ff:e3: 33:ab:a5:2e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUL9Y2cGTz/+QMk5n2rzOJYlCE8P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM0NEM2NjdCRThERUMxNzA0RTUyMEE5RTJGNTFGM0ZB QjRDODIzRTAeFw0yNTExMTgyMDM4NTBaFw0yNjExMTcyMDQzNTBaMDMxMTAvBgNV BAMTKDhERDg3NzNERDdBOTkyREYwMjU1RjdBM0IxNDIxRkMwNUQzMkYzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4A7updS3kQGEyJPCAv6B8woJQ zPFBVUTIICcMjl9vuWWkRL26ynIVwKY14UjZoA7kGTNlQzowqYmsOWMYtlhNWpTO rdx5Pi4xVQhAC7awqmBccLknm4U9jG7NUZ8ZfyOsh3fZMKE4j8eNHh9Xlkla49et KAqjX9lc1qYr5tjZ1ZMcBKf/W8fj1QZE5ZWjAcZAp8ahHrb4Um1pjdrNjmuncd3U IFIF/dkdR8DhT1x1/X9VIUPrKzg+W7QikG6JNjARnFueFToIMse747YQXZld5KFt Vez/QT/ydZiqf+CvNFAEZvsKucyqxSy9SlRiq+nLgr7xYVo54KfEtd4O0xpNAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUjdh3Pdepkt8CVfejsUIfwF0y8wUwHwYDVR0j BBgwFoAUQ0TGZ76N7BcE5SCp4vUfP6tMgj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3RWWnNIUXpreGVDbUp3enNMdzNRZDVyaEVSNVV1RnJwVXVVNUZmYVhK VkwvMC80MzQ0QzY2N0JFOERFQzE3MDRFNTIwQTlFMkY1MUYzRkFCNEM4MjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNDRDNjY3QkU4REVDMTcw NEU1MjBBOUUyRjUxRjNGQUI0QzgyM0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd0VlpzSFF6a3hlQ21Kd3pzTHczUWQ1cmhFUjVVdUZycFV1VTVGZmFYSlZMLzAv MzEzNjM0MmUzMTM2MzMyZTMxMzkzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNTM5MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSjxDANBgkqhkiG9w0BAQsFAAOCAQEAMiEY JTFqU2I9jwHdpSlJyJ7cZPAcCb50w7t6OLz6qASn2y/o0aI2G6cNwKQOAqDOBt19 /44qnfx5Zfs/iMDWzSS50aBIbeST7xv87TtoUalBwmZNEdkf2GLxLQktpSHN1gBv rovBUw/0Flq1NuIFFau7IW6rc3A4bv5WUa2BEJgg9iNLFPqjKv4faYGJ3kBO5gB8 1lgSHobTdVHrN6EvgC+/gZClXh5ZmYaExAeSG6W13R8VutY2NpQQgFORqEKa7LDP miUs3iB61vpgeHuXSDi8/NViAMuIn7rd7wDIa0BARW6JWbU78OJFRx5b8i9+lpaM r8mMwlZ1DP/jM6ulLg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:24 2025 by rpki-client