This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3137302e38322e38382e302f32322d3332203d3e203631373631.roa File: 3137302e38322e38382e302f32322d3332203d3e203631373631.roa (raw, json) Hash identifier: P1UF6qMOacjaTQBNFj42FT+SRMxEaUj5pIbAjHdMxPc= Subject key identifier: 1B:19:D4:00:1A:42:A2:84:97:A8:76:BA:09:10:E3:E9:35:BE:5B:86 Certificate issuer: /CN=2F465B4D67B798728D086175292AF9A5CE3F28B9 Certificate serial: 3E73271C4E385963F4291EBB9C9FCC35D02CBB11 Authority key identifier: 2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3137302e38322e38382e302f32322d3332203d3e203631373631.roa Signing time: Tue 11 Nov 2025 14:56:09 +0000 ROA not before: Tue 11 Nov 2025 14:51:09 +0000 ROA not after: Tue 10 Nov 2026 14:56:09 +0000 asID: 61761 IP address blocks: 170.82.88.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:73:27:1c:4e:38:59:63:f4:29:1e:bb:9c:9f:cc:35:d0:2c:bb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F465B4D67B798728D086175292AF9A5CE3F28B9 Validity Not Before: Nov 11 14:51:09 2025 GMT Not After : Nov 10 14:56:09 2026 GMT Subject: CN=1B19D4001A42A28497A876BA0910E3E935BE5B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:2f:9e:45:b0:f9:a8:80:dd:f7:0f:4d:1f: 3d:fa:e7:ee:99:31:da:b7:07:0b:41:94:8d:8a:cd: a0:68:f5:5d:eb:f2:6e:f8:a1:f3:75:2c:30:51:59: 90:1b:ed:a2:d1:48:11:40:31:2a:60:a4:60:70:f1: ad:3e:33:17:a7:84:c7:16:22:b7:1f:7d:d5:85:ad: 0b:b0:22:04:3a:e3:70:4e:1a:3e:06:e6:65:59:50: 00:57:4c:6d:7f:e0:53:c9:81:be:cc:26:1d:37:8d: 24:c1:08:65:5f:c4:ab:77:2e:a0:52:7a:85:8c:46: 64:2d:d2:2b:eb:52:4a:3b:96:af:55:ed:9b:01:84: a4:38:3c:3e:a2:fb:9e:28:11:02:a5:e5:11:24:56: f2:ca:40:0a:81:dc:f2:0d:06:32:d4:8b:6f:27:56: c9:20:7d:25:52:1a:e1:9a:d2:d1:4b:1d:b4:a3:2b: 75:6c:52:92:ee:52:36:18:b8:22:5e:12:11:63:3a: 3d:64:d0:1d:e2:13:bf:bb:ea:46:56:a9:15:b1:e3: f5:83:d7:7b:c6:8a:5c:83:ef:05:4b:77:b2:fe:16: d3:6e:5a:0e:35:09:f5:bb:0c:92:c5:ed:3f:0f:99: ce:30:72:d1:11:c1:f9:48:10:82:91:9b:42:9e:4c: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:D4:00:1A:42:A2:84:97:A8:76:BA:09:10:E3:E9:35:BE:5B:86 X509v3 Authority Key Identifier: keyid:2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3137302e38322e38382e302f32322d3332203d3e203631373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.88.0/22 Signature Algorithm: sha256WithRSAEncryption 38:44:ec:9a:8e:4a:91:8d:f5:47:ab:60:97:86:ef:02:73:e9: e9:69:09:72:71:f4:b2:13:6a:7d:0a:93:5d:64:54:aa:09:ef: 93:83:e4:c5:7f:2e:2e:34:0e:99:21:2d:6e:27:af:89:7c:1c: c2:16:a5:29:fd:f2:0d:48:c7:74:f4:34:a2:25:12:71:87:fa: 63:0d:75:6a:b2:88:54:b4:8b:1a:b6:96:94:bd:35:0c:91:bc: a5:26:c9:7e:80:9d:37:0e:75:c5:0f:5a:b4:15:53:d8:27:d2: e9:b8:8d:2e:b6:39:c8:a5:19:3f:9d:e0:3e:cc:ad:ab:e9:e4: d6:79:cf:c4:71:cf:81:ab:6c:2e:90:15:c1:67:63:d4:05:de: 19:04:45:33:ed:1b:00:1c:fd:fe:4e:68:c3:64:23:44:b9:0d: bf:4b:00:6a:96:dd:a6:48:f8:61:bf:79:36:22:23:a0:fa:80: e9:a1:e0:01:7f:02:a6:96:01:23:85:11:aa:14:fa:a3:2d:d4: 05:e1:eb:b2:8e:2d:6e:39:6d:ee:aa:65:c0:e8:1e:21:72:d9: e5:f1:18:af:41:da:ea:91:4a:5f:b5:20:6a:06:55:16:da:f3: 16:79:43:cf:2c:e5:64:df:82:71:4f:23:cd:0d:21:97:f1:3b: 36:bd:bd:4b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUPnMnHE44WWP0KR67nJ/MNdAsuxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY0NjVCNEQ2N0I3OTg3MjhEMDg2MTc1MjkyQUY5QTVD RTNGMjhCOTAeFw0yNTExMTExNDUxMDlaFw0yNjExMTAxNDU2MDlaMDMxMTAvBgNV BAMTKDFCMTlENDAwMUE0MkEyODQ5N0E4NzZCQTA5MTBFM0U5MzVCRTVCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNS+eRbD5qIDd9w9NHz365+6Z Mdq3BwtBlI2KzaBo9V3r8m74ofN1LDBRWZAb7aLRSBFAMSpgpGBw8a0+MxenhMcW IrcffdWFrQuwIgQ643BOGj4G5mVZUABXTG1/4FPJgb7MJh03jSTBCGVfxKt3LqBS eoWMRmQt0ivrUko7lq9V7ZsBhKQ4PD6i+54oEQKl5REkVvLKQAqB3PINBjLUi28n VskgfSVSGuGa0tFLHbSjK3VsUpLuUjYYuCJeEhFjOj1k0B3iE7+76kZWqRWx4/WD 13vGilyD7wVLd7L+FtNuWg41CfW7DJLF7T8Pmc4wctERwflIEIKRm0KeTEWFAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUGxnUABpCooSXqHa6CRDj6TW+W4YwHwYDVR0j BBgwFoAUL0ZbTWe3mHKNCGF1KSr5pc4/KLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm9LbjJlMmdpYlF3cnFRZTVWZE5ZQ3ZaWFV2NHRVZmk2UEhnTVZ0a3Qx YWQvMC8yRjQ2NUI0RDY3Qjc5ODcyOEQwODYxNzUyOTJBRjlBNUNFM0YyOEI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDY1QjRENjdCNzk4NzI4 RDA4NjE3NTI5MkFGOUE1Q0UzRjI4QjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JvS24yZTJnaWJRd3JxUWU1VmROWUN2WlhVdjR0VWZpNlBIZ01WdGt0MWFkLzAv MzEzNzMwMmUzODMyMmUzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMTM3 MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAqpSWDANBgkqhkiG9w0BAQsFAAOCAQEAOETsmo5KkY31 R6tgl4bvAnPp6WkJcnH0shNqfQqTXWRUqgnvk4PkxX8uLjQOmSEtbieviXwcwhal Kf3yDUjHdPQ0oiUScYf6Yw11arKIVLSLGraWlL01DJG8pSbJfoCdNw51xQ9atBVT 2CfS6biNLrY5yKUZP53gPsytq+nk1nnPxHHPgatsLpAVwWdj1AXeGQRFM+0bABz9 /k5ow2QjRLkNv0sAapbdpkj4Yb95NiIjoPqA6aHgAX8CppYBI4URqhT6oy3UBeHr so4tbjlt7qplwOgeIXLZ5fEYr0Ha6pFKX7UgagZVFtrzFnlDzyzlZN+CcU8jzQ0h l/E7Nr29Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:10 2025 by rpki-client