This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa File: 3138392e38392e37382e302f32332d3233203d3e203238313834.roa (raw, json) Hash identifier: xgKUBqY4O2Fn27TbnbW/rw1vLhZhds1nRXMAOmOy6q8= Subject key identifier: F5:C7:14:FF:D3:2A:0B:BD:07:9A:44:B5:DE:3F:94:FF:2F:B2:D8:8D Certificate issuer: /CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7 Certificate serial: 43453976E563DD3201DB4F0D79919EF377A638D2 Authority key identifier: E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa Signing time: Thu 04 Dec 2025 20:13:21 +0000 ROA not before: Thu 04 Dec 2025 20:08:21 +0000 ROA not after: Thu 03 Dec 2026 20:13:21 +0000 asID: 28184 IP address blocks: 189.89.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:45:39:76:e5:63:dd:32:01:db:4f:0d:79:91:9e:f3:77:a6:38:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7 Validity Not Before: Dec 4 20:08:21 2025 GMT Not After : Dec 3 20:13:21 2026 GMT Subject: CN=F5C714FFD32A0BBD079A44B5DE3F94FF2FB2D88D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:21:21:db:50:d7:5e:15:02:d3:7a:bb:8b: bd:58:a2:44:fc:99:52:3f:97:03:09:b3:e4:6c:8c: a8:1e:2b:14:d3:31:88:b3:21:b6:a9:b6:c4:7a:ab: 77:b3:70:8e:e2:f0:f2:19:79:92:ae:5d:25:6b:d3: a5:1c:d1:4b:29:07:29:a9:a2:7c:3e:35:cf:4a:8f: 2c:76:6d:f0:95:1e:91:91:ff:f2:f4:d1:e1:d7:cb: 68:bd:1c:61:46:67:94:26:25:ac:94:55:e8:28:dc: 21:6e:56:cd:af:06:68:cc:bb:88:f5:77:52:21:7b: 56:ed:92:8a:3e:a2:ba:5c:41:f8:19:22:a0:ef:40: a4:f8:82:8e:d3:16:6c:b0:c0:ea:c6:12:2f:49:50: f0:01:da:02:dd:16:45:23:d8:66:1c:41:e8:c8:68: d7:2f:b9:14:d1:29:c7:02:0c:68:4c:f6:76:5c:d4: 09:a3:3f:e5:28:f1:92:97:de:13:d0:2b:db:fb:27: 44:b6:43:6f:44:99:9e:39:40:a1:41:a3:0e:0f:49: 11:13:74:8c:c7:b1:d8:3c:8b:2d:4f:93:44:1a:9d: 0e:70:1b:cf:80:20:b0:40:eb:1a:70:83:df:22:66: a5:cf:d3:9f:44:23:57:9c:55:0f:77:e1:eb:c3:af: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C7:14:FF:D3:2A:0B:BD:07:9A:44:B5:DE:3F:94:FF:2F:B2:D8:8D X509v3 Authority Key Identifier: keyid:E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.78.0/23 Signature Algorithm: sha256WithRSAEncryption 20:ae:8e:fa:1e:65:2c:c9:c7:5d:b1:fa:05:04:b7:db:ee:0e: 4e:d9:c3:ce:17:18:27:4c:17:93:4f:c2:b9:24:64:b1:02:c8: 1d:39:32:d7:46:5c:f3:bd:8b:e1:71:01:33:31:9d:2d:14:84: f7:f8:ce:e2:9b:d3:83:6e:36:b7:3c:a7:51:8f:54:e6:5e:c1: bb:d8:79:07:7f:e2:32:2a:f4:20:3d:e5:6a:bc:df:b2:0e:73: 22:28:7c:fc:b8:6f:9a:47:5b:6d:cc:91:53:5f:71:df:15:bc: a3:ab:50:64:c5:e8:05:ec:ed:6c:aa:c4:9b:cb:a8:d8:d3:80: 90:e5:9d:54:37:06:6e:70:f1:1c:17:fa:8c:4a:3b:64:01:0d: 22:4f:2a:b6:12:20:a9:f1:82:e9:42:3e:fd:3e:77:a3:63:3c: 31:b6:20:d6:7e:e7:61:47:c3:66:fd:9f:7d:c2:f0:80:46:bb: 41:5a:f7:4b:91:55:6f:8a:38:f3:d6:26:e8:a0:97:6d:92:39: 32:83:42:86:cf:a9:17:d3:64:f2:86:61:01:a9:df:66:0a:57: 77:8b:79:70:d3:95:27:65:14:8d:26:af:53:9e:6c:b6:83:d1: 30:14:49:16:c9:53:57:09:68:81:bf:16:ba:b1:df:80:86:58: 44:e3:46:00 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUQ0U5duVj3TIB208NeZGe83emONIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTEwNkYwODNCMDExNEQzRDEwNEREMUVCRUE4MjU3RkI2 RkE1OUNGNzAeFw0yNTEyMDQyMDA4MjFaFw0yNjEyMDMyMDEzMjFaMDMxMTAvBgNV BAMTKEY1QzcxNEZGRDMyQTBCQkQwNzlBNDRCNURFM0Y5NEZGMkZCMkQ4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUviEh21DXXhUC03q7i71YokT8 mVI/lwMJs+RsjKgeKxTTMYizIbaptsR6q3ezcI7i8PIZeZKuXSVr06Uc0UspBymp onw+Nc9Kjyx2bfCVHpGR//L00eHXy2i9HGFGZ5QmJayUVego3CFuVs2vBmjMu4j1 d1Ihe1btkoo+orpcQfgZIqDvQKT4go7TFmywwOrGEi9JUPAB2gLdFkUj2GYcQejI aNcvuRTRKccCDGhM9nZc1AmjP+Uo8ZKX3hPQK9v7J0S2Q29EmZ45QKFBow4PSRET dIzHsdg8iy1Pk0QanQ5wG8+AILBA6xpwg98iZqXP059EI1ecVQ934evDr1VbAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU9ccU/9MqC70HmkS13j+U/y+y2I0wHwYDVR0j BBgwFoAU4Qbwg7ARTT0QTdHr6oJX+2+lnPcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC9FMTA2RjA4M0IwMTE0RDNEMTA0REQxRUJFQTgyNTdGQjZGQTU5Q0Y3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMDZGMDgzQjAxMTREM0Qx MDRERDFFQkVBODI1N0ZCNkZBNTlDRjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAb1ZTjANBgkqhkiG9w0BAQsFAAOCAQEAIK6O+h5lLMnH XbH6BQS32+4OTtnDzhcYJ0wXk0/CuSRksQLIHTky10Zc872L4XEBMzGdLRSE9/jO 4pvTg242tzynUY9U5l7Bu9h5B3/iMir0ID3larzfsg5zIih8/LhvmkdbbcyRU19x 3xW8o6tQZMXoBeztbKrEm8uo2NOAkOWdVDcGbnDxHBf6jEo7ZAENIk8qthIgqfGC 6UI+/T53o2M8MbYg1n7nYUfDZv2ffcLwgEa7QVr3S5FVb4o489Ym6KCXbZI5MoNC hs+pF9Nk8oZhAanfZgpXd4t5cNOVJ2UUjSavU55stoPRMBRJFslTVwlogb8WurHf gIZYRONGAA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:11 2025 by rpki-client