This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa File: 3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa (raw, json) Hash identifier: 4a4ZEK7PkW9D824AqIaFrG9Yn+xQOyH6IiAOFnnuQ8I= Subject key identifier: 29:19:A2:C6:C2:09:25:C1:43:6F:FD:C4:B8:0B:57:15:7D:1C:A1:2B Certificate issuer: /CN=6F18B02946B841B9A6AB2464888E7201F4B6C539 Certificate serial: 7BC71648EE6C297D9F5A3B98632F6706788D0EB9 Authority key identifier: 6F:18:B0:29:46:B8:41:B9:A6:AB:24:64:88:8E:72:01:F4:B6:C5:39 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F18B02946B841B9A6AB2464888E7201F4B6C539.cer Subject info access: rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa Signing time: Mon 24 Nov 2025 14:39:05 +0000 ROA not before: Mon 24 Nov 2025 14:34:05 +0000 ROA not after: Mon 23 Nov 2026 14:39:05 +0000 asID: 263498 IP address blocks: 168.195.140.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/6F18B02946B841B9A6AB2464888E7201F4B6C539.crl rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/6F18B02946B841B9A6AB2464888E7201F4B6C539.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F18B02946B841B9A6AB2464888E7201F4B6C539.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c7:16:48:ee:6c:29:7d:9f:5a:3b:98:63:2f:67:06:78:8d:0e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F18B02946B841B9A6AB2464888E7201F4B6C539 Validity Not Before: Nov 24 14:34:05 2025 GMT Not After : Nov 23 14:39:05 2026 GMT Subject: CN=2919A2C6C20925C1436FFDC4B80B57157D1CA12B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:0e:81:3f:d6:a4:45:e2:cd:29:0b:31:52: 16:00:e3:f2:90:0b:d3:2e:a8:92:14:5f:3a:1e:05: c3:fd:c5:b2:e4:5f:37:a5:22:83:40:b5:bb:67:82: e6:68:ea:33:e1:24:2d:50:61:90:38:84:fd:d8:ed: c0:9c:9f:fd:4c:c6:c1:55:0c:a9:74:92:5b:f8:35: 3b:fb:fe:d9:98:8a:1a:6a:cd:3e:15:07:68:e9:0e: 1b:80:f4:76:56:3a:a6:fd:5e:a9:66:db:f9:2e:48: 28:0c:ae:d5:5f:a9:bc:26:b6:62:74:45:71:5b:88: df:76:50:f3:08:5b:3e:e9:e1:43:a1:d7:97:0c:26: 95:d4:88:21:3f:27:05:4f:d2:eb:0c:78:34:19:6a: 2a:cb:2f:23:2b:ac:b9:d0:1a:72:65:af:85:00:4a: 89:53:7e:d8:5e:0c:02:5a:04:ae:38:2c:f8:3a:0f: 0e:bd:db:36:f2:86:e1:29:7b:4a:48:7c:df:ee:fc: 6d:7c:b5:21:4b:77:9e:0c:68:82:5e:d0:62:3c:7d: a9:c0:ab:87:bf:04:33:8b:bb:34:0c:ab:f2:9b:b7: e1:f0:c7:f0:8d:c8:13:5e:b2:ad:16:f2:b7:ff:fa: 93:5a:ee:78:8e:36:7d:1b:1d:4a:49:06:82:64:29: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:19:A2:C6:C2:09:25:C1:43:6F:FD:C4:B8:0B:57:15:7D:1C:A1:2B X509v3 Authority Key Identifier: keyid:6F:18:B0:29:46:B8:41:B9:A6:AB:24:64:88:8E:72:01:F4:B6:C5:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/6F18B02946B841B9A6AB2464888E7201F4B6C539.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F18B02946B841B9A6AB2464888E7201F4B6C539.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.140.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:8c:6b:be:57:c2:77:b0:1d:e2:4a:96:9b:c5:e6:a3:1c:84: c7:94:55:60:c0:63:80:cb:75:52:2f:f4:07:e9:06:cb:a2:3e: 28:f3:0d:d9:e6:d6:69:88:4f:8e:17:43:e5:5d:9a:b0:d7:6b: b1:11:1d:ca:b1:d3:96:5d:77:f5:1c:7c:49:7a:46:84:9b:fa: a9:35:4b:60:3e:cd:62:b9:55:e9:d9:13:84:ab:8f:a7:b6:d5: f5:fa:72:03:aa:4f:62:66:ad:07:fb:b3:21:52:b8:e9:32:99: 92:2e:2d:81:72:79:2b:f7:d9:a5:8e:5f:08:1b:f9:ac:0e:03: 5c:0f:ee:31:ca:6d:e4:eb:08:b9:d3:3e:36:87:81:a0:a6:00: 35:c5:f6:d2:3d:fb:40:56:6b:b7:67:c9:ad:b3:ba:bc:cb:a4: 7d:91:62:4e:60:56:4d:5c:b0:04:85:d0:ef:b7:91:3d:34:fa: 57:7b:d0:c7:8e:99:cc:8e:6c:7f:8f:32:c3:f7:8c:83:85:82: 00:52:08:13:12:53:04:0c:37:fb:b7:82:1f:90:2b:13:ac:0f: 0e:83:cd:24:0f:cd:ff:a0:04:09:99:da:96:c6:14:b9:6b:f6: 41:5f:ed:74:bf:d5:64:a0:12:21:5d:76:de:a8:a5:51:aa:48: 7f:8f:f9:3b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUe8cWSO5sKX2fWjuYYy9nBniNDrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYxOEIwMjk0NkI4NDFCOUE2QUIyNDY0ODg4RTcyMDFG NEI2QzUzOTAeFw0yNTExMjQxNDM0MDVaFw0yNjExMjMxNDM5MDVaMDMxMTAvBgNV BAMTKDI5MTlBMkM2QzIwOTI1QzE0MzZGRkRDNEI4MEI1NzE1N0QxQ0ExMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhw6BP9akReLNKQsxUhYA4/KQ C9MuqJIUXzoeBcP9xbLkXzelIoNAtbtnguZo6jPhJC1QYZA4hP3Y7cCcn/1MxsFV DKl0klv4NTv7/tmYihpqzT4VB2jpDhuA9HZWOqb9Xqlm2/kuSCgMrtVfqbwmtmJ0 RXFbiN92UPMIWz7p4UOh15cMJpXUiCE/JwVP0usMeDQZairLLyMrrLnQGnJlr4UA SolTftheDAJaBK44LPg6Dw692zbyhuEpe0pIfN/u/G18tSFLd54MaIJe0GI8fanA q4e/BDOLuzQMq/Kbt+Hwx/CNyBNesq0W8rf/+pNa7niONn0bHUpJBoJkKbmtAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUKRmixsIJJcFDb/3EuAtXFX0coSswHwYDVR0j BBgwFoAUbxiwKUa4QbmmqyRkiI5yAfS2xTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXJacnp5cmY0a3NSczVweXJ2a3VzTE5CYjgxMXI4ZnBQaG13Y2RaQm1u NkgvMC82RjE4QjAyOTQ2Qjg0MUI5QTZBQjI0NjQ4ODhFNzIwMUY0QjZDNTM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMThCMDI5NDZCODQxQjlB NkFCMjQ2NDg4OEU3MjAxRjRCNkM1MzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlyWnJ6eXJmNGtzUnM1cHlydmt1c0xOQmI4MTFyOGZwUGhtd2NkWkJtbjZILzAv MzEzNjM4MmUzMTM5MzUyZTMxMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzMzM0MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjDjDANBgkqhkiG9w0BAQsFAAOCAQEAnYxr vlfCd7Ad4kqWm8XmoxyEx5RVYMBjgMt1Ui/0B+kGy6I+KPMN2ebWaYhPjhdD5V2a sNdrsREdyrHTll139Rx8SXpGhJv6qTVLYD7NYrlV6dkThKuPp7bV9fpyA6pPYmat B/uzIVK46TKZki4tgXJ5K/fZpY5fCBv5rA4DXA/uMcpt5OsIudM+NoeBoKYANcX2 0j37QFZrt2fJrbO6vMukfZFiTmBWTVywBIXQ77eRPTT6V3vQx46ZzI5sf48yw/eM g4WCAFIIExJTBAw3+7eCH5ArE6wPDoPNJA/N/6AECZnalsYUuWv2QV/tdL/VZKAS IV123qilUapIf4/5Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:00 2025 by rpki-client