This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa File: 3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa (raw, json) Hash identifier: my8/S3MIsBNYW/x0gFtoQNussu714xSmnlPgsFwrnJs= Subject key identifier: 49:43:E0:C8:62:8E:CA:AA:64:CF:B0:9C:2C:3E:5E:51:DF:07:EA:91 Certificate issuer: /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569 Certificate serial: 7B1519138B44387774D0894478B46C3D98649377 Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer Subject info access: rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa Signing time: Fri 12 Sep 2025 15:36:23 +0000 ROA not before: Fri 12 Sep 2025 15:31:23 +0000 ROA not after: Fri 11 Sep 2026 15:36:23 +0000 asID: 265461 IP address blocks: 168.196.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:15:19:13:8b:44:38:77:74:d0:89:44:78:b4:6c:3d:98:64:93:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569 Validity Not Before: Sep 12 15:31:23 2025 GMT Not After : Sep 11 15:36:23 2026 GMT Subject: CN=4943E0C8628ECAAA64CFB09C2C3E5E51DF07EA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:9f:0f:bf:a8:2c:a1:d9:34:55:97:74:97: 57:60:3e:7e:68:3c:09:16:6e:09:4e:42:3e:2f:83: cd:ce:3b:42:af:c4:5c:1f:f9:51:9d:a6:59:8f:18: 5b:8f:4a:f9:fb:e9:03:f5:58:b5:6e:2c:64:ac:58: eb:0c:ad:95:a9:73:fc:f2:20:2b:87:da:46:0b:52: 66:87:2c:68:ea:c1:ea:2e:43:b9:18:2b:99:0d:28: 1d:ff:cd:ef:62:0a:b1:83:30:0f:10:49:43:59:29: 1a:d6:a6:c9:9d:63:b0:b9:b6:f8:21:5e:50:9a:03: 9b:01:90:b6:10:47:42:28:08:fa:b8:2d:b4:74:77: 51:1b:a1:da:60:9e:0c:a1:cd:58:1f:ba:74:88:0e: 68:49:de:1c:b1:a9:5e:31:b4:27:2e:5f:10:6c:8a: 05:b6:86:ec:4b:16:8c:a4:a8:12:55:cc:e8:92:52: 10:32:52:a7:e2:0a:e0:c9:de:73:ee:50:ac:57:ee: 64:35:e7:3f:8d:e7:a9:84:e5:89:76:e0:6f:33:dc: 43:1a:fe:df:c7:11:fb:49:7c:cb:62:b3:4b:c4:53: 7a:d3:bf:21:9d:5b:e3:36:23:f6:0b:13:b9:f3:a8: 4d:a3:4f:f9:f1:ad:32:7d:d0:d7:96:57:ef:78:86: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:43:E0:C8:62:8E:CA:AA:64:CF:B0:9C:2C:3E:5E:51:DF:07:EA:91 X509v3 Authority Key Identifier: keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.155.0/24 Signature Algorithm: sha256WithRSAEncryption 27:6e:fc:da:d7:ed:e0:02:78:c2:c9:c0:cc:81:2b:d5:6b:a8: 87:c2:02:19:83:e1:49:f0:8e:8a:e9:0d:97:f4:96:dd:12:7c: 28:bc:62:af:1a:54:93:41:69:d8:e7:05:f6:c2:46:fb:9d:79: ab:81:61:32:2d:dc:25:86:9e:c9:12:8c:5d:a1:26:27:a6:92: db:76:08:c5:d9:5d:02:eb:e9:87:29:00:21:f3:3e:bf:c8:86: cd:db:8c:50:89:af:fe:c1:a3:03:51:d5:58:d8:a0:fc:78:fc: 9c:e2:e5:f7:28:c0:bd:15:9a:43:10:96:09:f9:cd:f5:8a:72: 94:3a:00:e1:77:6f:19:a7:a8:6b:9c:62:58:38:b2:6f:4e:ac: b0:65:53:64:c1:8d:0e:44:af:29:82:a5:73:ec:29:75:a7:fd: 65:c8:33:40:e2:cc:7d:a4:36:a1:1e:6c:ad:00:16:25:2d:d0: 71:64:77:2e:ca:f5:23:d5:1b:5c:f8:3f:f1:f3:87:ba:20:c6: 0d:5a:60:69:28:5f:61:5a:d7:48:ee:ae:7a:09:3b:cd:b2:2f: 7f:b5:71:e1:78:ac:01:fd:3f:4d:63:3d:11:69:f4:ba:e9:bd: b9:a8:7a:21:05:35:27:77:b5:91:6b:e7:cf:37:dd:df:3b:fa: 0d:a0:32:91 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUexUZE4tEOHd00IlEeLRsPZhkk3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM3QjVGMURGOEM2NTlENkRDOUZDQzUzMkE5M0I5RUYx QzQzQzU2OTAeFw0yNTA5MTIxNTMxMjNaFw0yNjA5MTExNTM2MjNaMDMxMTAvBgNV BAMTKDQ5NDNFMEM4NjI4RUNBQUE2NENGQjA5QzJDM0U1RTUxREYwN0VBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqJ8Pv6gsodk0VZd0l1dgPn5o PAkWbglOQj4vg83OO0KvxFwf+VGdplmPGFuPSvn76QP1WLVuLGSsWOsMrZWpc/zy ICuH2kYLUmaHLGjqweouQ7kYK5kNKB3/ze9iCrGDMA8QSUNZKRrWpsmdY7C5tvgh XlCaA5sBkLYQR0IoCPq4LbR0d1EbodpgngyhzVgfunSIDmhJ3hyxqV4xtCcuXxBs igW2huxLFoykqBJVzOiSUhAyUqfiCuDJ3nPuUKxX7mQ15z+N56mE5Yl24G8z3EMa /t/HEftJfMtis0vEU3rTvyGdW+M2I/YLE7nzqE2jT/nxrTJ90NeWV+94hgzhAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUSUPgyGKOyqpkz7CcLD5eUd8H6pEwHwYDVR0j BBgwFoAUjHtfHfjGWdbcn8xTKpO57xxDxWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi MncvMC84QzdCNUYxREY4QzY1OUQ2REM5RkNDNTMyQTkzQjlFRjFDNDNDNTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDN0I1RjFERjhDNjU5RDZE QzlGQ0M1MzJBOTNCOUVGMUM0M0M1NjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlaWXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAv MzEzNjM4MmUzMTM5MzYyZTMxMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTM0MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEmzANBgkqhkiG9w0BAQsFAAOCAQEAJ278 2tft4AJ4wsnAzIEr1Wuoh8ICGYPhSfCOiukNl/SW3RJ8KLxirxpUk0Fp2OcF9sJG +515q4FhMi3cJYaeyRKMXaEmJ6aS23YIxdldAuvphykAIfM+v8iGzduMUImv/sGj A1HVWNig/Hj8nOLl9yjAvRWaQxCWCfnN9YpylDoA4XdvGaeoa5xiWDiyb06ssGVT ZMGNDkSvKYKlc+wpdaf9ZcgzQOLMfaQ2oR5srQAWJS3QcWR3Lsr1I9UbXPg/8fOH uiDGDVpgaShfYVrXSO6uegk7zbIvf7Vx4XisAf0/TWM9EWn0uum9uah6IQU1J3e1 kWvnzzfd3zv6DaAykQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:35 2025 by rpki-client