This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa File: 3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa (raw, json) Hash identifier: LOPfL7/twMxQBkpiFR5bHaGIIJ5mSFHJQ/GCOQPc7CU= Subject key identifier: 26:8F:3F:C4:A3:03:BF:DA:ED:3F:28:4C:1F:68:26:9F:21:3B:CE:A2 Certificate issuer: /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96 Certificate serial: 2D2CED07CC836E1EF7DD2503A0C2B3CC7920486D Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa Signing time: Mon 17 Nov 2025 17:12:52 +0000 ROA not before: Mon 17 Nov 2025 17:07:52 +0000 ROA not after: Mon 16 Nov 2026 17:12:52 +0000 asID: 263290 IP address blocks: 170.150.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2c:ed:07:cc:83:6e:1e:f7:dd:25:03:a0:c2:b3:cc:79:20:48:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96 Validity Not Before: Nov 17 17:07:52 2025 GMT Not After : Nov 16 17:12:52 2026 GMT Subject: CN=268F3FC4A303BFDAED3F284C1F68269F213BCEA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:85:e4:73:47:98:5c:76:51:b6:7d:9f:e1: 6c:85:e6:f0:8e:76:a5:29:bb:c4:0e:40:fb:3d:79: b1:6d:d6:50:e2:24:7a:be:58:31:e8:d9:75:f9:44: 3f:5d:f0:88:5d:3f:e3:c6:19:a2:fe:22:47:51:88: 06:d6:d1:55:18:69:21:77:29:1d:24:e7:a1:4c:7c: dc:3a:d9:78:83:5b:96:b4:45:85:4c:95:f6:50:9b: 64:7b:70:08:12:37:cb:d6:51:bf:7b:2d:30:c6:73: 9f:3b:f4:0c:5b:42:3a:87:73:68:8c:65:ad:f2:bf: a6:37:0c:77:3b:e9:01:a0:72:43:e8:7f:04:ba:64: 9f:61:33:42:dc:4c:ce:1c:41:78:52:7f:e2:48:e7: b4:3b:3f:bf:67:3c:92:f6:23:93:c0:ba:77:e7:46: c9:2e:df:ea:92:b3:05:0b:47:70:ad:8c:80:3b:00: 43:eb:7c:a5:ab:ed:31:c2:90:6d:ca:45:22:41:5b: 61:1e:c0:1b:df:a5:e6:1e:59:8a:0e:08:4f:a3:3f: 1d:25:2f:46:7d:39:0c:1d:26:e3:bf:63:47:fd:0b: bc:d5:1b:e0:18:1f:a7:2c:ad:fe:01:76:11:81:e3: 52:47:fa:e2:63:f5:27:ac:7b:d5:78:b9:b5:35:f6: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8F:3F:C4:A3:03:BF:DA:ED:3F:28:4C:1F:68:26:9F:21:3B:CE:A2 X509v3 Authority Key Identifier: keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.150.210.0/24 Signature Algorithm: sha256WithRSAEncryption 57:fa:72:38:a0:01:e8:52:19:71:42:7d:77:41:55:2f:69:db: c2:2f:a8:c4:29:2f:55:26:d7:dc:e1:c5:f6:48:42:6c:1d:e1: 6e:64:e0:45:83:d9:c2:8a:fe:a6:57:f4:c7:08:e2:25:68:9b: fc:0b:c9:6e:60:a7:60:b5:a7:6c:05:f6:0e:42:df:af:2d:a9: 56:dc:0c:98:2c:a9:17:62:85:bb:22:7d:3c:78:58:71:4a:2f: e5:4b:c9:d7:32:35:24:ce:f1:69:57:d4:7e:cb:44:1b:d9:2d: 9a:e0:c4:da:84:24:1c:6b:93:67:56:f8:fe:15:0d:70:2f:03: 48:ac:3e:f2:dc:c8:33:f3:23:87:f8:c8:ec:46:4d:b9:4c:21: 2b:6d:62:c6:8b:c0:92:2e:6a:49:e3:ac:d0:57:53:b0:fa:8c: d0:ff:7a:73:7b:e0:1b:cb:68:32:87:47:c2:f9:fa:2e:9c:b2: e9:11:c6:13:54:f9:b8:7d:d9:e3:8d:ce:2b:9a:3e:7a:69:4a: 02:2f:04:d4:99:c8:8d:57:ad:59:7a:5b:b2:72:02:7a:18:cb: 79:69:16:7f:2d:22:f3:78:f3:22:5b:89:db:1f:8d:6a:d5:3b: 4d:8d:51:45:b3:4f:b4:43:9d:78:72:33:6b:d8:47:90:76:9f: ac:65:7d:61 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIULSztB8yDbh733SUDoMKzzHkgSG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVERDgzQ0RFQ0MxODBCMENBRUZCRDM0NzU5MjZCRjc3 NTdBNEY5NjAeFw0yNTExMTcxNzA3NTJaFw0yNjExMTYxNzEyNTJaMDMxMTAvBgNV BAMTKDI2OEYzRkM0QTMwM0JGREFFRDNGMjg0QzFGNjgyNjlGMjEzQkNFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEm4Xkc0eYXHZRtn2f4WyF5vCO dqUpu8QOQPs9ebFt1lDiJHq+WDHo2XX5RD9d8IhdP+PGGaL+IkdRiAbW0VUYaSF3 KR0k56FMfNw62XiDW5a0RYVMlfZQm2R7cAgSN8vWUb97LTDGc5879AxbQjqHc2iM Za3yv6Y3DHc76QGgckPofwS6ZJ9hM0LcTM4cQXhSf+JI57Q7P79nPJL2I5PAunfn Rsku3+qSswULR3CtjIA7AEPrfKWr7THCkG3KRSJBW2EewBvfpeYeWYoOCE+jPx0l L0Z9OQwdJuO/Y0f9C7zVG+AYH6csrf4BdhGB41JH+uJj9Sese9V4ubU19kbBAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUJo8/xKMDv9rtPyhMH2gmnyE7zqIwHwYDVR0j BBgwFoAUtd2DzezBgLDK7700dZJr93V6T5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODg0Q2NFVmdjOHZ2Q0JnNENVQTE4MXZheFpwc2NMdEEzdHBCc0JmcjZ3 b3kvMC9CNUREODNDREVDQzE4MEIwQ0FFRkJEMzQ3NTkyNkJGNzc1N0E0Rjk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1REQ4M0NERUNDMTgwQjBD QUVGQkQzNDc1OTI2QkY3NzU3QTRGOTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzg4NENjRVZnYzh2dkNCZzRDVUExODF2YXhacHNjTHRBM3RwQnNCZnI2d295LzAv MzEzNzMwMmUzMTM1MzAyZTMyMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKqW0jANBgkqhkiG9w0BAQsFAAOCAQEAV/py OKAB6FIZcUJ9d0FVL2nbwi+oxCkvVSbX3OHF9khCbB3hbmTgRYPZwor+plf0xwji JWib/AvJbmCnYLWnbAX2DkLfry2pVtwMmCypF2KFuyJ9PHhYcUov5UvJ1zI1JM7x aVfUfstEG9ktmuDE2oQkHGuTZ1b4/hUNcC8DSKw+8tzIM/Mjh/jI7EZNuUwhK21i xovAki5qSeOs0FdTsPqM0P96c3vgG8toModHwvn6Lpyy6RHGE1T5uH3Z443OK5o+ emlKAi8E1JnIjVetWXpbsnICehjLeWkWfy0i83jzIluJ2x+NatU7TY1RRbNPtEOd eHIza9hHkHafrGV9YQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:07 2025 by rpki-client