This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3234203d3e20323639333934.roa File: 3133382e33362e382e302f32322d3234203d3e20323639333934.roa (raw, json) Hash identifier: 8s8TckjvVxdIn+z5Nb0PpmMioXr/7yXvSt12r0nEWuU= Subject key identifier: D5:74:DA:67:9C:98:DF:2B:A9:17:B3:CD:1C:56:84:26:EB:E5:13:F2 Certificate issuer: /CN=CE5B1C22F785931FD04E35B0D10299499369B6B2 Certificate serial: 0155B760F4A934C3E6728C3A8D51A3E4E72BBA3A Authority key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3234203d3e20323639333934.roa Signing time: Fri 05 Dec 2025 19:03:47 +0000 ROA not before: Fri 05 Dec 2025 18:58:47 +0000 ROA not after: Fri 04 Dec 2026 19:03:47 +0000 asID: 269394 IP address blocks: 138.36.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:55:b7:60:f4:a9:34:c3:e6:72:8c:3a:8d:51:a3:e4:e7:2b:ba:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2 Validity Not Before: Dec 5 18:58:47 2025 GMT Not After : Dec 4 19:03:47 2026 GMT Subject: CN=D574DA679C98DF2BA917B3CD1C568426EBE513F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:26:d4:ea:87:d3:2e:c7:b5:69:47:77:86: d0:30:ef:38:cd:5b:bf:ef:44:72:86:c5:04:4e:c1: ed:a2:82:62:22:42:16:e6:82:f6:09:a8:1a:c5:e1: 46:79:e6:d9:12:37:d4:ea:7c:d6:ce:ad:73:4a:3b: ea:00:04:a2:ff:d1:71:b7:45:db:9b:78:78:40:49: ab:6a:0e:e7:36:02:3d:ee:03:97:04:75:6a:1d:47: b4:9c:eb:7f:b0:47:e9:66:6e:91:16:f5:83:b3:4e: 2e:37:01:cd:78:21:5e:ea:f8:a0:fe:37:e6:77:80: 10:fc:07:7c:a8:23:0e:b7:b1:1d:bb:b2:56:03:9f: 82:52:97:c6:aa:a5:25:ff:46:e3:c1:d8:4e:8f:a7: e9:d6:a3:a2:c2:20:f7:8d:bf:8b:db:e9:de:ca:25: e9:0f:84:73:8c:e0:3a:7d:ab:ef:69:c1:d9:80:c4: e9:2a:ac:c0:74:42:48:4c:b8:3d:be:44:69:64:a1: e7:51:93:6d:ae:ab:0a:b5:d0:d0:8f:f2:92:18:c7: e5:ce:e5:cd:91:ce:9c:43:03:24:78:fa:3a:c5:93: 81:04:7d:8b:6d:4a:67:11:22:c3:bc:23:6a:cf:d2: 9d:c1:fb:af:cb:1c:cd:7b:38:9e:b1:cf:2d:01:24: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:DA:67:9C:98:DF:2B:A9:17:B3:CD:1C:56:84:26:EB:E5:13:F2 X509v3 Authority Key Identifier: keyid:CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3234203d3e20323639333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.8.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:6c:04:f5:71:c2:46:f8:9f:6e:68:1d:c6:f0:bb:8c:65:bc: 09:3b:19:d3:62:e2:e4:53:7d:94:e7:4e:2f:c5:b8:2d:26:60: 8a:af:7d:e1:df:fb:72:33:36:96:1d:23:45:59:b9:e5:5a:2c: df:ae:38:db:05:88:03:e5:46:c1:dc:88:46:00:73:a8:be:eb: 5d:1d:0d:53:2d:b5:ba:ce:74:3a:de:ed:36:95:b8:d5:b6:c2: c8:ba:7a:27:c1:da:bf:89:52:2f:d5:14:b9:0c:b3:53:6a:87: 8d:6d:fd:5c:ce:f1:b0:1c:e1:6f:00:43:72:aa:1a:13:7a:49: ad:e8:39:e0:f6:e3:51:12:64:23:bf:f4:07:27:45:2c:92:52: 08:51:de:e3:a3:39:27:8c:a6:62:94:c1:e7:04:9b:22:a4:7c: 6f:01:23:2f:43:1e:09:cc:6d:42:9e:47:70:4e:65:dd:76:1b: d1:ec:d3:0c:28:24:00:42:f3:e8:46:73:e3:6e:e1:34:f9:bc: 5b:c4:82:5c:b7:0c:a7:67:69:f5:2f:5e:a5:2f:12:b2:c7:6f: 3d:cf:42:d7:61:55:54:6f:90:a2:bb:91:b4:90:93:20:4f:10: 27:63:0b:90:3d:b0:e2:bb:22:fd:b8:b6:93:8b:5e:5d:fc:03: 9a:e1:4b:cd -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUAVW3YPSpNMPmcow6jVGj5OcrujowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QjFDMjJGNzg1OTMxRkQwNEUzNUIwRDEwMjk5NDk5 MzY5QjZCMjAeFw0yNTEyMDUxODU4NDdaFw0yNjEyMDQxOTAzNDdaMDMxMTAvBgNV BAMTKEQ1NzREQTY3OUM5OERGMkJBOTE3QjNDRDFDNTY4NDI2RUJFNTEzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbtybU6ofTLse1aUd3htAw7zjN W7/vRHKGxQROwe2igmIiQhbmgvYJqBrF4UZ55tkSN9TqfNbOrXNKO+oABKL/0XG3 RdubeHhASatqDuc2Aj3uA5cEdWodR7Sc63+wR+lmbpEW9YOzTi43Ac14IV7q+KD+ N+Z3gBD8B3yoIw63sR27slYDn4JSl8aqpSX/RuPB2E6Pp+nWo6LCIPeNv4vb6d7K JekPhHOM4Dp9q+9pwdmAxOkqrMB0QkhMuD2+RGlkoedRk22uqwq10NCP8pIYx+XO 5c2RzpxDAyR4+jrFk4EEfYttSmcRIsO8I2rP0p3B+6/LHM17OJ6xzy0BJIeRAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU1XTaZ5yY3yupF7PNHFaEJuvlE/IwHwYDVR0j BBgwFoAUzlscIveFkx/QTjWw0QKZSZNptrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOThVeGFkblJib2dEeEgzMzhNVmhkcDZ0aXZYaThSRHpSTDhuejhkYnU0 MmcvMC9DRTVCMUMyMkY3ODU5MzFGRDA0RTM1QjBEMTAyOTk0OTkzNjlCNkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNUIxQzIyRjc4NTkzMUZE MDRFMzVCMEQxMDI5OTQ5OTM2OUI2QjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzk4VXhhZG5SYm9nRHhIMzM4TVZoZHA2dGl2WGk4UkR6Ukw4bno4ZGJ1NDJnLzAv MzEzMzM4MmUzMzM2MmUzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTMz MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAookCDANBgkqhkiG9w0BAQsFAAOCAQEADmwE9XHCRvif bmgdxvC7jGW8CTsZ02Li5FN9lOdOL8W4LSZgiq994d/7cjM2lh0jRVm55Vos3644 2wWIA+VGwdyIRgBzqL7rXR0NUy21us50Ot7tNpW41bbCyLp6J8Hav4lSL9UUuQyz U2qHjW39XM7xsBzhbwBDcqoaE3pJreg54PbjURJkI7/0BydFLJJSCFHe46M5J4ym YpTB5wSbIqR8bwEjL0MeCcxtQp5HcE5l3XYb0ezTDCgkAELz6EZz427hNPm8W8SC XLcMp2dp9S9epS8SssdvPc9C12FVVG+QoruRtJCTIE8QJ2MLkD2w4rsi/bi2k4te XfwDmuFLzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:38 2025 by rpki-client