This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32322d3332203d3e20323730333434.roa File: 3138392e3132362e342e302f32322d3332203d3e20323730333434.roa (raw, json) Hash identifier: TWpMsUryptQu6Hi6KjgY8UHGV5Dc4mwwgB/z57TzmHE= Subject key identifier: 73:30:3E:73:B4:0E:01:92:F5:2C:46:82:BA:AA:37:EA:66:3B:0D:3B Certificate issuer: /CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3 Certificate serial: 1C1680CCDADB5A0621F0C5EDCA08BF058361E983 Authority key identifier: CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32322d3332203d3e20323730333434.roa Signing time: Sat 29 Nov 2025 16:07:12 +0000 ROA not before: Sat 29 Nov 2025 16:02:12 +0000 ROA not after: Sat 28 Nov 2026 16:07:12 +0000 asID: 270344 IP address blocks: 189.126.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:16:80:cc:da:db:5a:06:21:f0:c5:ed:ca:08:bf:05:83:61:e9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3 Validity Not Before: Nov 29 16:02:12 2025 GMT Not After : Nov 28 16:07:12 2026 GMT Subject: CN=73303E73B40E0192F52C4682BAAA37EA663B0D3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:14:e7:63:2c:40:90:c9:3f:a9:12:70:28: ae:c2:68:63:15:f9:43:2d:7f:94:a5:65:4c:10:47: ee:6c:8a:de:3d:b7:fc:07:a8:b8:8d:2c:cb:52:17: 31:30:6f:67:3a:e1:20:ba:48:7c:d3:c4:64:60:d7: aa:3d:e8:09:18:2d:9a:11:67:c9:ea:6d:85:56:ab: e3:d4:52:48:13:ee:db:fb:ce:c5:7a:64:46:4e:ad: 4b:33:17:a9:39:b1:f4:a3:8b:86:72:33:47:05:d9: ee:cb:00:55:11:b2:8d:99:b9:64:53:98:e7:cd:0a: c5:e7:2d:7b:52:b7:1b:0b:2f:58:05:3f:c8:e5:e7: 01:4e:fa:68:01:e1:73:13:e5:d9:b6:11:43:88:34: 8e:f8:8b:17:ac:ba:2f:1a:e6:36:ce:0d:e5:54:83: 83:a6:38:9a:69:44:f4:5f:70:3a:39:b4:15:13:9f: 3d:02:d3:11:9f:8b:17:ce:12:9a:e1:51:f3:8c:5b: 9d:00:8e:68:ad:c6:21:76:50:71:74:00:f6:92:b1: 8e:74:ec:09:4e:6a:95:9f:1c:47:79:22:88:22:74: 8b:30:de:25:9a:44:87:74:18:8b:b1:76:68:e1:07: b9:e3:a0:4a:34:5b:71:a0:c7:45:d6:53:2a:f6:f5: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:30:3E:73:B4:0E:01:92:F5:2C:46:82:BA:AA:37:EA:66:3B:0D:3B X509v3 Authority Key Identifier: keyid:CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32322d3332203d3e20323730333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.4.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:f5:3d:b0:10:16:2b:c0:ea:bf:e2:82:3d:f5:6a:44:b2:9a: 56:ea:9c:17:64:ae:a9:f1:85:ce:9a:d3:a8:1e:f7:33:24:23: 80:fb:99:8d:cb:51:d5:85:cf:c6:bb:1a:4c:9b:65:11:32:ce: 35:44:5b:7c:55:6b:d4:63:cd:82:aa:fa:a3:2a:80:3f:6c:1a: db:fc:ec:45:0c:6b:27:20:8c:d0:f0:cf:41:88:66:be:9a:e0: 31:dc:1d:c9:30:ac:46:f4:e4:92:92:08:22:b5:a1:a2:7c:b0: 39:96:77:2f:ef:1c:f5:3c:12:38:88:2c:97:93:a7:6b:55:e9: 8f:87:fc:44:a9:52:8e:59:7a:a9:4d:36:19:0c:eb:ed:9b:01: 9d:54:2b:ab:df:eb:91:b2:9d:1c:82:cc:1c:74:1b:49:28:20: 34:8e:99:6e:69:c0:c1:d5:b3:02:14:88:19:e9:50:bb:b4:30: 02:88:0e:ba:1f:cb:48:01:91:7b:ce:63:fe:64:a7:1d:41:3b: a8:f4:7a:c4:15:6c:f8:d8:22:38:49:27:20:09:c8:5d:00:10: 5d:92:1e:d2:8d:19:95:7c:f4:a6:94:04:98:6e:c8:46:bc:0c: 6f:4e:c0:60:a0:c9:e5:e3:96:74:74:91:b9:c8:67:86:68:60: 6a:3b:ba:0c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUHBaAzNrbWgYh8MXtygi/BYNh6YMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1RDNCQUNDMDk4Qzc5RkU1RjJDOTk3M0JDREVBQzVB RDBDNTNBMzAeFw0yNTExMjkxNjAyMTJaFw0yNjExMjgxNjA3MTJaMDMxMTAvBgNV BAMTKDczMzAzRTczQjQwRTAxOTJGNTJDNDY4MkJBQUEzN0VBNjYzQjBEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxBTnYyxAkMk/qRJwKK7CaGMV +UMtf5SlZUwQR+5sit49t/wHqLiNLMtSFzEwb2c64SC6SHzTxGRg16o96AkYLZoR Z8nqbYVWq+PUUkgT7tv7zsV6ZEZOrUszF6k5sfSji4ZyM0cF2e7LAFURso2ZuWRT mOfNCsXnLXtStxsLL1gFP8jl5wFO+mgB4XMT5dm2EUOINI74ixesui8a5jbODeVU g4OmOJppRPRfcDo5tBUTnz0C0xGfixfOEprhUfOMW50AjmitxiF2UHF0APaSsY50 7AlOapWfHEd5IogidIsw3iWaRId0GIuxdmjhB7njoEo0W3Ggx0XWUyr29aYvAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUczA+c7QOAZL1LEaCuqo36mY7DTswHwYDVR0j BBgwFoAUyl07rMCYx5/l8smXO83qxa0MU6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXdLVXhhdE1RbVdZQmJOQzNlTXc0M2lZSzNqTXY3V3AzYmVNZXBGRlJa UUovMC9DQTVEM0JBQ0MwOThDNzlGRTVGMkM5OTczQkNERUFDNUFEMEM1M0EzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNUQzQkFDQzA5OEM3OUZF NUYyQzk5NzNCQ0RFQUM1QUQwQzUzQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F3S1V4YXRNUW1XWUJiTkMzZU13NDNpWUszak12N1dwM2JlTWVwRkZSWlFKLzAv MzEzODM5MmUzMTMyMzYyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCvX4EMA0GCSqGSIb3DQEBCwUAA4IBAQAO9T2wEBYr wOq/4oI99WpEsppW6pwXZK6p8YXOmtOoHvczJCOA+5mNy1HVhc/GuxpMm2URMs41 RFt8VWvUY82CqvqjKoA/bBrb/OxFDGsnIIzQ8M9BiGa+muAx3B3JMKxG9OSSkggi taGifLA5lncv7xz1PBI4iCyXk6drVemPh/xEqVKOWXqpTTYZDOvtmwGdVCur3+uR sp0cgswcdBtJKCA0jpluacDB1bMCFIgZ6VC7tDACiA66H8tIAZF7zmP+ZKcdQTuo 9HrEFWz42CI4SScgCchdABBdkh7SjRmVfPSmlASYbshGvAxvTsBgoMnl45Z0dJG5 yGeGaGBqO7oM -----END CERTIFICATE-----Generated at Sat Dec 6 13:19:38 2025 by rpki-client