This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138392e33392e3230382e302f32312d3332203d3e203232333831.roa File: 3138392e33392e3230382e302f32312d3332203d3e203232333831.roa (raw, json) Hash identifier: /8+O8bQXKsk1v4qV+6IGv/YPhujntWX1ojX5LGvURgA= Subject key identifier: E0:23:6E:A9:32:69:59:33:B1:BA:D4:32:0E:6B:F4:23:A1:A0:FC:90 Certificate issuer: /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112 Certificate serial: 6A22EE763396C180DADA0917C10F6BAB8DB4D571 Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138392e33392e3230382e302f32312d3332203d3e203232333831.roa Signing time: Tue 11 Nov 2025 15:44:13 +0000 ROA not before: Tue 11 Nov 2025 15:39:13 +0000 ROA not after: Tue 10 Nov 2026 15:44:13 +0000 asID: 22381 IP address blocks: 189.39.208.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:22:ee:76:33:96:c1:80:da:da:09:17:c1:0f:6b:ab:8d:b4:d5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112 Validity Not Before: Nov 11 15:39:13 2025 GMT Not After : Nov 10 15:44:13 2026 GMT Subject: CN=E0236EA932695933B1BAD4320E6BF423A1A0FC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:e7:2e:7e:83:12:cd:b9:8a:1e:59:b1:4e: 92:6b:87:35:e3:6b:d9:67:de:d4:48:27:dd:ba:b2: a1:23:4f:d9:b2:c1:4a:8c:ef:c6:b6:ce:29:e0:1a: 36:88:e5:0e:c1:3b:25:b4:a6:18:69:c2:a9:31:07: 61:45:ee:95:ad:45:67:38:e9:31:33:7a:08:4c:3f: e4:5e:97:fa:af:54:c1:25:dc:cb:3b:30:69:f1:8a: d1:2e:d9:f1:ee:7d:22:e6:5e:ef:42:9f:45:73:bf: b8:77:c5:aa:28:51:50:5a:f0:b8:c2:9a:0b:86:80: ad:05:2f:69:d1:ae:62:fb:71:c8:67:16:06:97:5d: dc:7a:1b:77:b9:b4:fb:b1:4f:bf:41:ec:0d:39:86: 66:2a:1b:03:e9:a1:3b:de:2c:14:f0:1c:8e:71:92: 99:7a:71:c2:59:fe:6f:89:f4:56:7e:80:f4:9d:30: 7a:a2:8f:1c:27:15:5e:91:db:91:80:8b:ba:54:84: 32:8c:90:bb:a6:79:ef:e1:98:88:4f:af:5d:2c:b9: 49:ea:dd:a9:d6:94:6e:0e:ac:55:d2:52:5e:4c:0e: a9:22:73:29:39:e1:82:30:ab:7c:3b:0c:72:68:98: 61:cf:26:c1:95:02:0f:da:ef:8b:fd:9c:8b:f3:50: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:23:6E:A9:32:69:59:33:B1:BA:D4:32:0E:6B:F4:23:A1:A0:FC:90 X509v3 Authority Key Identifier: keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138392e33392e3230382e302f32312d3332203d3e203232333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.39.208.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:ff:37:75:95:34:c4:e3:0f:d4:3f:ae:f7:21:92:6a:c3:47: a0:be:cf:5b:10:68:8f:11:c4:11:e9:aa:64:6b:0b:80:74:23: 20:b1:e3:0c:82:a4:81:f6:3a:2c:9c:38:e9:62:3c:04:8f:41: 1b:b8:36:ff:80:65:b4:0f:0c:f9:2f:07:bc:14:dc:8b:f6:25: 79:78:83:ba:3f:42:fd:1c:88:11:e3:b4:e4:2d:84:2f:42:59: 10:30:cb:be:62:c9:3d:41:3e:4d:ca:9c:05:33:19:b5:76:46: c0:b4:70:0e:33:14:bc:db:c9:af:97:75:2b:53:cf:7b:05:18: e6:b0:bb:1c:5b:e8:a2:23:27:16:3b:b4:ed:25:7c:f9:b2:3d: f2:8d:f9:43:28:27:62:59:24:1d:bd:61:9c:87:72:5c:5d:b7: 4c:cb:e6:57:05:d1:2e:eb:0f:ee:de:98:1b:99:53:dc:47:f3: bf:38:41:45:52:46:c5:80:e0:9c:14:45:47:52:c6:bb:b4:cb: f6:a0:11:af:44:c7:46:b8:83:b9:aa:b6:88:14:37:0c:d4:d9: 20:08:03:d9:1e:03:38:7f:a6:91:8c:24:5d:ec:f0:28:db:fc: a1:c9:0a:27:60:fc:6d:da:3d:c1:07:e1:96:17:1f:75:6b:be: a0:e1:03:81 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUaiLudjOWwYDa2gkXwQ9rq4201XEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYzOUJGRDhCQkE4RUMzQTE0REM4NUNENEFDMzgxRTM2 QTI5RjExMjAeFw0yNTExMTExNTM5MTNaFw0yNjExMTAxNTQ0MTNaMDMxMTAvBgNV BAMTKEUwMjM2RUE5MzI2OTU5MzNCMUJBRDQzMjBFNkJGNDIzQTFBMEZDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+recufoMSzbmKHlmxTpJrhzXj a9ln3tRIJ926sqEjT9mywUqM78a2zingGjaI5Q7BOyW0phhpwqkxB2FF7pWtRWc4 6TEzeghMP+Rel/qvVMEl3Ms7MGnxitEu2fHufSLmXu9Cn0Vzv7h3xaooUVBa8LjC mguGgK0FL2nRrmL7cchnFgaXXdx6G3e5tPuxT79B7A05hmYqGwPpoTveLBTwHI5x kpl6ccJZ/m+J9FZ+gPSdMHqijxwnFV6R25GAi7pUhDKMkLumee/hmIhPr10suUnq 3anWlG4OrFXSUl5MDqkicyk54YIwq3w7DHJomGHPJsGVAg/a74v9nIvzUGq5AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU4CNuqTJpWTOxutQyDmv0I6Gg/JAwHwYDVR0j BBgwFoAUTzm/2Luo7DoU3IXNSsOB42op8RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy VHgvMi80RjM5QkZEOEJCQThFQzNBMTREQzg1Q0Q0QUMzODFFMzZBMjlGMTEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMzlCRkQ4QkJBOEVDM0Ex NERDODVDRDRBQzM4MUUzNkEyOUYxMTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzIv MzEzODM5MmUzMzM5MmUzMjMwMzgyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjMy MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQDvSfQMA0GCSqGSIb3DQEBCwUAA4IBAQAO/zd1lTTE 4w/UP673IZJqw0egvs9bEGiPEcQR6apkawuAdCMgseMMgqSB9josnDjpYjwEj0Eb uDb/gGW0Dwz5Lwe8FNyL9iV5eIO6P0L9HIgR47TkLYQvQlkQMMu+Ysk9QT5NypwF Mxm1dkbAtHAOMxS828mvl3UrU897BRjmsLscW+iiIycWO7TtJXz5sj3yjflDKCdi WSQdvWGch3JcXbdMy+ZXBdEu6w/u3pgbmVPcR/O/OEFFUkbFgOCcFEVHUsa7tMv2 oBGvRMdGuIO5qraIFDcM1NkgCAPZHgM4f6aRjCRd7PAo2/yhyQonYPxt2j3BB+GW Fx91a76g4QOB -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:01 2025 by rpki-client