This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3136382e3132312e37362e302f32322d3234203d3e20323634313831.roa File: 3136382e3132312e37362e302f32322d3234203d3e20323634313831.roa (raw, json) Hash identifier: Z+Qxgd/QzZ3qiHLiV0n6hgvnWCw+enTv0HpIvecq4h0= Subject key identifier: 8E:96:45:DC:EB:17:F9:C0:2E:22:1D:05:E0:83:69:B2:6B:13:1D:F4 Certificate issuer: /CN=A800FD2EB05AE73C34C6EEADA3C358E5D407D87C Certificate serial: 1FE703BE0EADB35FFCDF3B6984E0489FD33BDCC2 Authority key identifier: A8:00:FD:2E:B0:5A:E7:3C:34:C6:EE:AD:A3:C3:58:E5:D4:07:D8:7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3136382e3132312e37362e302f32322d3234203d3e20323634313831.roa Signing time: Wed 03 Dec 2025 15:12:49 +0000 ROA not before: Wed 03 Dec 2025 15:07:49 +0000 ROA not after: Wed 02 Dec 2026 15:12:49 +0000 asID: 264181 IP address blocks: 168.121.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.crl rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e7:03:be:0e:ad:b3:5f:fc:df:3b:69:84:e0:48:9f:d3:3b:dc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A800FD2EB05AE73C34C6EEADA3C358E5D407D87C Validity Not Before: Dec 3 15:07:49 2025 GMT Not After : Dec 2 15:12:49 2026 GMT Subject: CN=8E9645DCEB17F9C02E221D05E08369B26B131DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:47:1c:e1:27:44:c2:d0:2c:a2:ab:c6:07:5d: c0:6e:d7:22:f5:84:e7:77:6f:18:1c:e1:6d:f7:dc: 4c:e1:62:ad:6a:5d:ed:8c:65:d8:2c:8a:8f:2f:6e: cc:cc:63:67:2c:38:61:72:84:cc:55:0c:e6:82:c1: 04:6a:66:c0:f8:d9:47:de:ea:3c:dc:2a:5b:dc:7b: 5f:d3:6f:2c:de:73:b0:32:8a:85:7e:f9:34:51:0d: 29:67:79:90:f6:db:c8:89:11:98:e9:e1:16:58:f4: 26:c2:a8:10:df:08:41:96:28:c9:0c:d4:58:e8:c4: 81:9e:f7:87:50:4e:8a:12:9b:cc:25:09:a9:20:e9: 32:7e:ec:76:9f:1a:2f:e9:5c:98:c2:95:1a:ae:22: 36:2a:3d:0a:1b:b8:5b:33:89:85:3d:d0:d8:17:45: 31:8d:8e:74:e8:03:51:2a:bd:59:6d:4c:7b:fc:51: 47:c1:34:35:fd:e4:0e:d9:46:05:90:d6:f4:09:fb: 36:c9:9b:09:3b:c6:06:1b:97:dd:d8:ab:ba:25:86: 24:71:0d:ec:5b:65:fc:d3:65:f2:bd:0a:0d:48:70: 62:83:8a:25:43:49:72:f8:de:a2:27:3d:5d:67:dc: 1f:c8:92:fa:7a:4b:3e:8f:7d:4f:9e:51:ce:af:f6: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:45:DC:EB:17:F9:C0:2E:22:1D:05:E0:83:69:B2:6B:13:1D:F4 X509v3 Authority Key Identifier: keyid:A8:00:FD:2E:B0:5A:E7:3C:34:C6:EE:AD:A3:C3:58:E5:D4:07:D8:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800FD2EB05AE73C34C6EEADA3C358E5D407D87C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3136382e3132312e37362e302f32322d3234203d3e20323634313831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.76.0/22 Signature Algorithm: sha256WithRSAEncryption 72:dd:b6:56:68:73:85:9f:18:6e:94:85:f2:da:dc:ca:ea:0d: 57:e7:39:94:fa:d3:ec:c2:cd:5d:5a:8e:62:97:e6:dc:9d:02: 62:f2:ff:6b:de:ad:7a:01:b7:45:4c:6e:6a:99:90:96:4e:84: dc:74:19:c0:d0:f2:c6:d2:44:a4:f8:8f:ba:f5:ae:61:f6:ff: 47:19:9e:68:5d:7d:97:d4:c5:f9:7b:ce:51:91:0d:5f:f3:2d: 3a:e7:b3:e3:6b:ef:0c:61:b3:d6:fd:ad:9a:5c:ed:1c:5d:a0: 7c:94:fd:77:54:01:ab:d3:83:ae:26:7e:62:22:75:46:a8:d5: 1a:c1:57:3b:e3:ab:8a:91:ee:08:46:9d:06:7f:3b:ff:d2:2b: df:de:ec:2d:2a:89:23:9d:e5:9f:04:f0:8b:8e:6d:7f:a8:a0: 38:e9:8f:b4:9b:6d:f6:31:3d:ce:9d:c2:bc:4e:5a:b3:d2:36: 79:b1:b0:8c:68:6c:f7:4e:53:7d:77:dd:6a:ed:50:c5:49:90: b9:a7:6c:12:8e:33:a7:10:f2:28:ed:26:be:b4:74:60:40:f2: f0:5d:f0:a7:1b:e6:29:83:c3:48:83:2a:72:0e:bd:62:ae:30: 38:74:d7:2a:a7:eb:4f:4a:2f:9a:7f:20:b7:24:b6:41:45:24: d8:63:cf:b5 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUH+cDvg6ts1/83ztphOBIn9M73MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgwMEZEMkVCMDVBRTczQzM0QzZFRUFEQTNDMzU4RTVE NDA3RDg3QzAeFw0yNTEyMDMxNTA3NDlaFw0yNjEyMDIxNTEyNDlaMDMxMTAvBgNV BAMTKDhFOTY0NURDRUIxN0Y5QzAyRTIyMUQwNUUwODM2OUIyNkIxMzFERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRxzhJ0TC0Cyiq8YHXcBu1yL1 hOd3bxgc4W333EzhYq1qXe2MZdgsio8vbszMY2csOGFyhMxVDOaCwQRqZsD42Ufe 6jzcKlvce1/Tbyzec7AyioV++TRRDSlneZD228iJEZjp4RZY9CbCqBDfCEGWKMkM 1FjoxIGe94dQTooSm8wlCakg6TJ+7HafGi/pXJjClRquIjYqPQobuFsziYU90NgX RTGNjnToA1EqvVltTHv8UUfBNDX95A7ZRgWQ1vQJ+zbJmwk7xgYbl93Yq7olhiRx DexbZfzTZfK9Cg1IcGKDiiVDSXL43qInPV1n3B/Ikvp6Sz6PfU+eUc6v9q4hAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUjpZF3OsX+cAuIh0F4INpsmsTHfQwHwYDVR0j BBgwFoAUqAD9LrBa5zw0xu6to8NY5dQH2HwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVdKUVM5TXJOZzF2ckRKZEhxVU1IVGJ5VEhnSjl4eHJLUVZETDlvazhz d1MvMC9BODAwRkQyRUIwNUFFNzNDMzRDNkVFQURBM0MzNThFNUQ0MDdEODdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MDBGRDJFQjA1QUU3M0Mz NEM2RUVBREEzQzM1OEU1RDQwN0Q4N0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlXSlFTOU1yTmcxdnJESmRIcVVNSFRieVRIZ0o5eHhyS1FWREw5b2s4c3dTLzAv MzEzNjM4MmUzMTMyMzEyZTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKoeUwwDQYJKoZIhvcNAQELBQADggEBAHLdtlZo c4WfGG6UhfLa3MrqDVfnOZT60+zCzV1ajmKX5tydAmLy/2verXoBt0VMbmqZkJZO hNx0GcDQ8sbSRKT4j7r1rmH2/0cZnmhdfZfUxfl7zlGRDV/zLTrns+Nr7wxhs9b9 rZpc7RxdoHyU/XdUAavTg64mfmIidUao1RrBVzvjq4qR7ghGnQZ/O//SK9/e7C0q iSOd5Z8E8IuObX+ooDjpj7SbbfYxPc6dwrxOWrPSNnmxsIxobPdOU3133WrtUMVJ kLmnbBKOM6cQ8ijtJr60dGBA8vBd8Kcb5imDw0iDKnIOvWKuMDh01yqn609KL5p/ ILcktkFFJNhjz7U= -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:28 2025 by rpki-client