This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa File: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (raw, json) Hash identifier: jKf9Vk2YfC8ukz9g1OK429wD3IUbFlCEsk6xy7G4mRU= Subject key identifier: EF:DC:33:FB:B5:B1:56:1F:F6:95:FD:CA:28:8A:8A:36:E8:F3:24:E9 Certificate issuer: /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Certificate serial: 37B33F27D525D78A7CE87E5BD10CFAF93F9ED771 Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa Signing time: Wed 10 Dec 2025 21:41:27 +0000 ROA not before: Wed 10 Dec 2025 21:36:27 +0000 ROA not after: Wed 09 Dec 2026 21:41:27 +0000 asID: 265140 IP address blocks: 143.255.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 20:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b3:3f:27:d5:25:d7:8a:7c:e8:7e:5b:d1:0c:fa:f9:3f:9e:d7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Validity Not Before: Dec 10 21:36:27 2025 GMT Not After : Dec 9 21:41:27 2026 GMT Subject: CN=EFDC33FBB5B1561FF695FDCA288A8A36E8F324E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:e1:1b:37:02:45:e9:97:e1:28:8b:4a:e0: 78:8f:d9:6c:1a:26:76:2f:d9:9f:26:37:9f:8a:c6: f6:16:b9:4f:75:3f:51:7b:10:00:68:b8:95:7c:5b: a9:9e:c0:ae:ab:b4:3e:60:a9:97:ee:4e:bf:b4:5d: 40:e4:c3:80:71:cb:45:a3:ac:14:76:81:ce:4e:a5: 4b:3e:af:f3:66:65:1e:c0:93:b3:f1:65:2b:ff:82: 46:3c:1f:b8:f7:b5:0e:c7:1e:09:f7:7e:3f:33:d8: 00:28:91:74:24:23:7c:7e:c8:ec:10:a2:69:88:11: 8b:51:76:57:af:80:ef:cb:f7:9b:11:9d:7b:2c:26: a8:99:e6:3a:af:33:f0:40:00:4d:d6:c6:55:d6:31: 50:0b:8c:96:77:73:c6:6a:69:38:b3:82:3b:0d:78: b1:33:21:20:59:21:95:2e:08:84:31:80:47:90:aa: 9d:e3:4b:51:ee:40:f1:e5:73:1a:25:9f:31:fe:b3: 51:56:2e:fa:b5:e6:c9:b9:73:c2:30:df:53:67:30: 60:65:e9:d0:26:7d:e1:94:0b:a8:18:37:3a:9b:f8: 54:b3:6e:8a:01:2b:ba:46:66:d7:dd:b7:55:d4:93: 67:f7:fd:fc:86:a5:c7:16:e8:02:bd:91:99:5a:c0: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DC:33:FB:B5:B1:56:1F:F6:95:FD:CA:28:8A:8A:36:E8:F3:24:E9 X509v3 Authority Key Identifier: keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.0.0/22 Signature Algorithm: sha256WithRSAEncryption 38:1b:43:5f:33:d9:4b:47:fa:df:e9:8f:68:d7:53:08:54:35: 5d:7b:b0:e0:dc:d8:21:0b:b4:72:a4:98:72:76:69:76:d7:9c: 8a:d9:2b:ed:1f:57:38:67:e5:95:7e:3d:b5:d8:5d:4b:d9:9c: af:ad:44:70:fe:3b:a6:f2:1e:84:a1:16:f4:0d:88:63:2f:ed: 75:c9:3c:1a:c4:bd:ca:fc:25:80:da:e0:06:5f:56:4f:f9:96: 35:d0:ad:fb:36:f4:8a:89:84:ea:0d:4a:3f:d0:90:35:d3:4f: c1:f9:a3:09:e7:2e:c1:2a:4a:86:07:4f:37:38:c1:a9:e7:bc: c1:5b:27:60:8d:98:1a:c8:50:b7:40:40:66:2a:26:8f:62:d6: cc:ca:28:c3:ce:8e:9e:f4:93:01:6e:e1:3b:af:14:59:ef:2e: 0a:c0:0c:d6:dd:7f:bc:46:7e:c9:4a:4e:be:48:0c:6e:14:a9: 2d:41:29:0d:20:85:b8:10:3a:cf:38:dd:21:af:b2:4b:07:9f: 34:2e:fe:2c:c7:99:32:a2:54:51:d3:d0:00:7d:78:d8:83:17: 53:ca:e1:6e:bc:7c:3a:55:36:26:f2:2d:d9:be:b0:ad:6f:c5: 9a:f3:68:07:60:91:21:44:bb:cc:39:09:a5:37:12:61:68:4b: 0d:c0:1e:63 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUN7M/J9Ul14p86H5b0Qz6+T+e13EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQzYwMjIzREYxMEJFNjNCN0E4NDQ2NEFDRjJBOTY5 NzE3M0Q3NTAeFw0yNTEyMTAyMTM2MjdaFw0yNjEyMDkyMTQxMjdaMDMxMTAvBgNV BAMTKEVGREMzM0ZCQjVCMTU2MUZGNjk1RkRDQTI4OEE4QTM2RThGMzI0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDheEbNwJF6ZfhKItK4HiP2Wwa JnYv2Z8mN5+KxvYWuU91P1F7EABouJV8W6mewK6rtD5gqZfuTr+0XUDkw4Bxy0Wj rBR2gc5OpUs+r/NmZR7Ak7PxZSv/gkY8H7j3tQ7HHgn3fj8z2AAokXQkI3x+yOwQ ommIEYtRdlevgO/L95sRnXssJqiZ5jqvM/BAAE3WxlXWMVALjJZ3c8ZqaTizgjsN eLEzISBZIZUuCIQxgEeQqp3jS1HuQPHlcxolnzH+s1FWLvq15sm5c8Iw31NnMGBl 6dAmfeGUC6gYNzqb+FSzbooBK7pGZtfdt1XUk2f3/fyGpccW6AK9kZlawKqDAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU79wz+7WxVh/2lf3KKIqKNujzJOkwHwYDVR0j BBgwFoAUaOxgIj3xC+Y7eoRGSs8qlpcXPXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE Z24vMC82OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RUM2MDIyM0RGMTBCRTYz QjdBODQ0NjRBQ0YyQTk2OTcxNzNENzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhuTTVrTlZFUHk5dkQ1ZFRjUWNkTkJ5dXhwZDJuSHk0UzNqa1VxSFJLRGduLzAv MzEzNDMzMmUzMjM1MzUyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1 MzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCj/8AMA0GCSqGSIb3DQEBCwUAA4IBAQA4G0NfM9lL R/rf6Y9o11MIVDVde7Dg3NghC7RypJhydml215yK2SvtH1c4Z+WVfj212F1L2Zyv rURw/jum8h6EoRb0DYhjL+11yTwaxL3K/CWA2uAGX1ZP+ZY10K37NvSKiYTqDUo/ 0JA100/B+aMJ5y7BKkqGB083OMGp57zBWydgjZgayFC3QEBmKiaPYtbMyijDzo6e 9JMBbuE7rxRZ7y4KwAzW3X+8Rn7JSk6+SAxuFKktQSkNIIW4EDrPON0hr7JLB580 Lv4sx5kyolRR09AAfXjYgxdTyuFuvHw6VTYm8i3ZvrCtb8Wa82gHYJEhRLvMOQml NxJhaEsNwB5j -----END CERTIFICATE-----Generated at Sun Dec 21 11:17:57 2025 by rpki-client