This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa File: 3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa (raw, json) Hash identifier: 8uP6immKPacQ+/V/jP9BPhUwkR+yUDzvkReX7GAzETI= Subject key identifier: 41:19:56:1F:D5:3F:21:8D:07:77:BD:19:00:4E:D7:2E:1D:3F:BD:D1 Certificate issuer: /CN=A800FD2EB05AE73C34C6EEADA3C358E5D407D87C Certificate serial: 7FF480C343BD4EE629D8C25566F5C35D2CB855BC Authority key identifier: A8:00:FD:2E:B0:5A:E7:3C:34:C6:EE:AD:A3:C3:58:E5:D4:07:D8:7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa Signing time: Wed 03 Dec 2025 14:53:40 +0000 ROA not before: Wed 03 Dec 2025 14:48:40 +0000 ROA not after: Wed 02 Dec 2026 14:53:40 +0000 asID: 264181 IP address blocks: 138.97.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.crl rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f4:80:c3:43:bd:4e:e6:29:d8:c2:55:66:f5:c3:5d:2c:b8:55:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A800FD2EB05AE73C34C6EEADA3C358E5D407D87C Validity Not Before: Dec 3 14:48:40 2025 GMT Not After : Dec 2 14:53:40 2026 GMT Subject: CN=4119561FD53F218D0777BD19004ED72E1D3FBDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:b9:06:4a:67:bd:e7:43:aa:cd:9b:9b:c5: 77:1b:05:f5:59:a0:48:ef:2d:12:c2:35:09:e1:e5: c2:72:cb:31:6e:6f:b9:94:d1:d8:4a:3c:1d:54:a3: e8:59:5b:07:c0:79:58:40:20:f4:2a:af:67:5f:91: 8a:1a:36:99:1e:69:7e:95:33:14:10:97:91:31:4e: e2:5b:b3:1d:d6:2a:a1:1f:6a:af:cc:38:fc:ea:cc: 00:e1:49:2a:45:82:fe:6b:78:1a:59:c4:a2:4e:6c: 2c:c7:e2:b8:ac:64:e2:bd:66:81:16:40:a9:21:45: 69:d4:4a:36:4b:30:85:67:f2:5b:ab:80:ac:a6:14: e1:d9:c3:e1:27:44:2c:d6:d1:67:ff:5d:a9:af:7d: fc:2c:c9:ae:41:be:ac:b8:ce:65:a1:e6:2e:a1:29: 1c:3b:81:0e:e1:1e:be:2d:f9:86:9e:5b:ba:bc:fc: a4:38:d8:c9:91:87:89:2a:5e:4a:c3:78:ea:fd:67: 80:8e:b3:a0:cf:57:cd:fd:10:b7:97:d4:91:17:75: 6b:ea:54:53:84:13:a2:90:f9:c5:a8:e0:05:a7:d2: f0:97:f0:2c:9e:34:b0:4a:02:ba:2d:fa:8c:59:63: 18:ab:6c:fe:16:29:f5:42:5c:a6:76:74:fc:29:48: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:56:1F:D5:3F:21:8D:07:77:BD:19:00:4E:D7:2E:1D:3F:BD:D1 X509v3 Authority Key Identifier: keyid:A8:00:FD:2E:B0:5A:E7:3C:34:C6:EE:AD:A3:C3:58:E5:D4:07:D8:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.100.0/22 Signature Algorithm: sha256WithRSAEncryption 73:d8:64:c6:31:82:84:0b:3f:23:d9:29:4d:b1:58:93:93:d4: d7:58:ef:66:01:4d:c7:cd:1e:80:eb:4f:3e:2d:25:3d:c2:c5: 77:36:51:20:04:88:ca:71:ec:88:73:37:ac:4f:b2:fd:fa:4c: 85:5d:5c:7b:97:6c:0c:cb:b0:4b:ce:f1:c9:19:91:0f:73:17: 73:f5:e8:10:af:0b:16:7c:7e:25:6a:de:96:83:e8:35:48:9e: d4:d2:c4:d5:88:a3:15:ff:91:40:6d:16:e6:77:69:76:45:59: f5:b9:22:80:41:2a:20:c9:7d:d7:fc:90:5e:42:09:a5:89:3c: c3:87:d9:a6:e7:be:79:8b:33:98:46:88:19:64:ce:bb:13:94: 0c:cd:c2:cf:e6:78:a9:41:66:73:6e:89:3e:7a:d5:37:7b:84: a2:75:2e:2d:e8:81:6e:5c:d9:fa:16:20:a0:98:dc:28:13:13: c6:e4:95:68:13:5e:33:8f:18:c8:aa:9e:e3:f8:1e:a8:45:e1: 84:16:2c:fe:b3:aa:22:a5:ec:1e:0d:52:f1:ad:a9:7c:d8:9c: e7:76:61:9c:1f:51:73:05:54:f6:24:c8:b2:b8:16:68:76:a9: 59:a5:16:bd:17:50:0a:43:69:5d:81:e4:97:b6:de:54:c3:a4: 0f:e2:be:36 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUf/SAw0O9TuYp2MJVZvXDXSy4VbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgwMEZEMkVCMDVBRTczQzM0QzZFRUFEQTNDMzU4RTVE NDA3RDg3QzAeFw0yNTEyMDMxNDQ4NDBaFw0yNjEyMDIxNDUzNDBaMDMxMTAvBgNV BAMTKDQxMTk1NjFGRDUzRjIxOEQwNzc3QkQxOTAwNEVENzJFMUQzRkJERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8irkGSme950OqzZubxXcbBfVZ oEjvLRLCNQnh5cJyyzFub7mU0dhKPB1Uo+hZWwfAeVhAIPQqr2dfkYoaNpkeaX6V MxQQl5ExTuJbsx3WKqEfaq/MOPzqzADhSSpFgv5reBpZxKJObCzH4risZOK9ZoEW QKkhRWnUSjZLMIVn8lurgKymFOHZw+EnRCzW0Wf/Xamvffwsya5Bvqy4zmWh5i6h KRw7gQ7hHr4t+YaeW7q8/KQ42MmRh4kqXkrDeOr9Z4COs6DPV839ELeX1JEXdWvq VFOEE6KQ+cWo4AWn0vCX8CyeNLBKArot+oxZYxirbP4WKfVCXKZ2dPwpSFOZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQRlWH9U/IY0Hd70ZAE7XLh0/vdEwHwYDVR0j BBgwFoAUqAD9LrBa5zw0xu6to8NY5dQH2HwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVdKUVM5TXJOZzF2ckRKZEhxVU1IVGJ5VEhnSjl4eHJLUVZETDlvazhz d1MvMC9BODAwRkQyRUIwNUFFNzNDMzRDNkVFQURBM0MzNThFNUQ0MDdEODdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MDBGRDJFQjA1QUU3M0Mz NEM2RUVBREEzQzM1OEU1RDQwN0Q4N0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlXSlFTOU1yTmcxdnJESmRIcVVNSFRieVRIZ0o5eHhyS1FWREw5b2s4c3dTLzAv MzEzMzM4MmUzOTM3MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKYWQwDQYJKoZIhvcNAQELBQADggEBAHPYZMYx goQLPyPZKU2xWJOT1NdY72YBTcfNHoDrTz4tJT3CxXc2USAEiMpx7IhzN6xPsv36 TIVdXHuXbAzLsEvO8ckZkQ9zF3P16BCvCxZ8fiVq3paD6DVIntTSxNWIoxX/kUBt FuZ3aXZFWfW5IoBBKiDJfdf8kF5CCaWJPMOH2abnvnmLM5hGiBlkzrsTlAzNws/m eKlBZnNuiT561Td7hKJ1Li3ogW5c2foWIKCY3CgTE8bklWgTXjOPGMiqnuP4HqhF 4YQWLP6zqiKl7B4NUvGtqXzYnOd2YZwfUXMFVPYkyLK4Fmh2qVmlFr0XUApDaV2B 5Je23lTDpA/ivjY= -----END CERTIFICATE-----Generated at Sat Dec 6 16:39:08 2025 by rpki-client