This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32322d3234203d3e20323636343937.roa File: 3137302e3234342e33322e302f32322d3234203d3e20323636343937.roa (raw, json) Hash identifier: zachzDNLg23T4uxxRdHkIPQrDehQ8gDQMBMXOxXGZ5I= Subject key identifier: 88:3B:02:29:DF:40:3D:DF:A8:6F:E9:32:0A:B2:30:9B:1E:9E:C2:1B Certificate issuer: /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94 Certificate serial: 64BE2A6FB86D0B0570184972FE00A349D58DF4FB Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32322d3234203d3e20323636343937.roa Signing time: Thu 20 Nov 2025 21:00:21 +0000 ROA not before: Thu 20 Nov 2025 20:55:21 +0000 ROA not after: Thu 19 Nov 2026 21:00:21 +0000 asID: 266497 IP address blocks: 170.244.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:be:2a:6f:b8:6d:0b:05:70:18:49:72:fe:00:a3:49:d5:8d:f4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94 Validity Not Before: Nov 20 20:55:21 2025 GMT Not After : Nov 19 21:00:21 2026 GMT Subject: CN=883B0229DF403DDFA86FE9320AB2309B1E9EC21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:98:c8:e7:ef:6b:0d:c7:c2:3d:c2:05:44:8a: 76:d4:9e:cb:f1:2b:e1:c0:da:36:e8:03:00:26:8b: 03:09:84:c4:4f:34:d3:8b:55:42:c0:bc:14:1c:51: 47:87:a9:02:9f:d1:08:02:b0:53:5f:a2:dc:1d:a8: c2:1e:7c:cc:9c:a9:5a:c2:c1:5d:97:d9:b3:2f:31: 31:38:c3:c8:5a:63:ba:9a:55:df:a6:f1:3d:6c:4f: bf:41:2c:ac:0b:db:36:26:92:70:c1:08:e2:90:a0: 92:3c:fa:cd:78:ae:7b:56:6c:2c:e4:13:87:24:b6: 1e:3e:62:1c:43:43:f1:2e:51:8c:b6:ce:37:fa:75: ae:a4:50:1e:22:51:32:54:62:bd:1c:3a:7a:3c:5d: ba:75:67:c2:63:e4:9c:86:30:26:f5:c5:a1:21:b5: a4:bd:d6:be:71:26:1c:b0:e7:7e:f6:6c:cb:0a:1c: 53:f1:3b:f1:7e:fa:5f:55:14:9d:bf:2d:2b:9a:bb: 96:34:39:b6:b6:57:3b:8d:0a:9a:c5:4e:d5:22:1a: d3:cf:91:eb:29:63:c2:6c:8d:44:05:38:43:5a:82: c8:b8:4b:43:8a:88:70:42:69:8c:d5:83:a9:29:a3: 02:c9:7b:8f:91:3b:d9:5f:3a:97:91:b4:28:62:15: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3B:02:29:DF:40:3D:DF:A8:6F:E9:32:0A:B2:30:9B:1E:9E:C2:1B X509v3 Authority Key Identifier: keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32322d3234203d3e20323636343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.32.0/22 Signature Algorithm: sha256WithRSAEncryption 90:51:40:a4:aa:1d:a1:e2:ef:12:88:97:19:d5:05:41:21:4b: 75:c5:0d:31:4d:5c:b0:52:b3:78:9a:55:56:2b:21:61:cb:5b: 04:31:7c:1b:d0:8f:01:88:4e:4b:00:15:f8:83:fb:e7:ff:27: 4f:6a:91:c0:f7:6f:06:65:e9:09:4f:84:1a:42:75:01:39:fd: c5:57:6a:fe:20:5d:80:a8:fa:53:a4:52:52:e9:d9:23:d6:19: b8:c8:da:9e:89:47:1b:76:75:19:aa:19:07:2d:c2:3d:85:b6: ec:7c:6b:77:55:49:7d:4c:e1:0d:d3:19:ac:c7:f5:d6:bd:56: 84:aa:73:ac:ec:b6:39:e2:99:6f:01:93:d8:99:5f:cc:f4:b0: 15:80:50:48:e8:43:e7:61:0f:30:9d:7f:f2:96:09:cc:06:ac: bb:60:42:e7:33:23:61:3a:db:03:3f:be:fa:9e:d1:e2:24:3d: 47:ce:26:f5:91:4a:eb:78:d3:52:74:68:05:55:ff:9b:8e:2d: b3:cb:e4:96:4c:4a:d2:e4:1e:31:da:f0:9b:7a:c1:0b:73:50: d4:5d:a9:02:b8:7c:9d:31:ae:99:69:99:1b:fd:00:f2:fd:4a: 0c:50:85:d8:39:a4:04:a4:f5:ea:ef:d0:9d:1b:b5:9f:dd:a1: 79:79:e6:30 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUZL4qb7htCwVwGEly/gCjSdWN9PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBEQUU4Q0REMzIwNjAzMjE4QjZCRTM3RDQ4NENEMEI0 OTJBOUU5NDAeFw0yNTExMjAyMDU1MjFaFw0yNjExMTkyMTAwMjFaMDMxMTAvBgNV BAMTKDg4M0IwMjI5REY0MDNEREZBODZGRTkzMjBBQjIzMDlCMUU5RUMyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCamMjn72sNx8I9wgVEinbUnsvx K+HA2jboAwAmiwMJhMRPNNOLVULAvBQcUUeHqQKf0QgCsFNfotwdqMIefMycqVrC wV2X2bMvMTE4w8haY7qaVd+m8T1sT79BLKwL2zYmknDBCOKQoJI8+s14rntWbCzk E4ckth4+YhxDQ/EuUYy2zjf6da6kUB4iUTJUYr0cOno8Xbp1Z8Jj5JyGMCb1xaEh taS91r5xJhyw5372bMsKHFPxO/F++l9VFJ2/LSuau5Y0Oba2VzuNCprFTtUiGtPP kespY8JsjUQFOENagsi4S0OKiHBCaYzVg6kpowLJe4+RO9lfOpeRtChiFW1pAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUiDsCKd9APd+ob+kyCrIwmx6ewhswHwYDVR0j BBgwFoAUoNrozdMgYDIYtr431ITNC0kqnpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmk1N2JwdDJLTGNyS2h3WUZvZlVKYnFnaTI2cTJEcWRqdUpWUldmWGRa UDcvMC9BMERBRThDREQzMjA2MDMyMThCNkJFMzdENDg0Q0QwQjQ5MkE5RTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwREFFOENERDMyMDYwMzIx OEI2QkUzN0Q0ODRDRDBCNDkyQTlFOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JpNTdicHQyS0xjcktod1lGb2ZVSmJxZ2kyNnEyRHFkanVKVlJXZlhkWlA3LzAv MzEzNzMwMmUzMjM0MzQyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzYzNDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq9CAwDQYJKoZIhvcNAQELBQADggEBAJBRQKSq HaHi7xKIlxnVBUEhS3XFDTFNXLBSs3iaVVYrIWHLWwQxfBvQjwGITksAFfiD++f/ J09qkcD3bwZl6QlPhBpCdQE5/cVXav4gXYCo+lOkUlLp2SPWGbjI2p6JRxt2dRmq GQctwj2Ftux8a3dVSX1M4Q3TGazH9da9VoSqc6zstjnimW8Bk9iZX8z0sBWAUEjo Q+dhDzCdf/KWCcwGrLtgQuczI2E62wM/vvqe0eIkPUfOJvWRSut401J0aAVV/5uO LbPL5JZMStLkHjHa8Jt6wQtzUNRdqQK4fJ0xrplpmRv9APL9SgxQhdg5pASk9erv 0J0btZ/doXl55jA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:25 2025 by rpki-client