This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa File: 3137372e33392e3135362e302f32322d3232203d3e203532373732.roa (raw, json) Hash identifier: WqXkrMFi1xrk2zthF8dDfcr8ODee4Hrhy1bzZ884Zu8= Subject key identifier: B3:96:AD:F1:B5:B3:99:4E:00:F7:11:06:16:B8:F8:BE:0F:CA:39:93 Certificate issuer: /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D Certificate serial: 1ABB3B918B376698C4303F2D98F98C3650E04967 Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer Subject info access: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa Signing time: Thu 04 Dec 2025 19:52:11 +0000 ROA not before: Thu 04 Dec 2025 19:47:11 +0000 ROA not after: Thu 03 Dec 2026 19:52:11 +0000 asID: 52772 IP address blocks: 177.39.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 07:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bb:3b:91:8b:37:66:98:c4:30:3f:2d:98:f9:8c:36:50:e0:49:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D Validity Not Before: Dec 4 19:47:11 2025 GMT Not After : Dec 3 19:52:11 2026 GMT Subject: CN=B396ADF1B5B3994E00F7110616B8F8BE0FCA3993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:f4:1b:ab:6f:76:90:36:74:e2:43:25:4c: 28:67:58:8f:43:cd:59:8c:4f:5f:5c:bf:6c:0f:4d: 37:34:67:41:25:84:c0:db:da:98:a1:03:98:20:33: 58:ec:4f:cb:bd:79:ba:4b:5d:c6:2f:77:0f:84:9b: f8:cf:3e:d8:25:80:f2:8a:67:b5:c2:8c:fc:b8:e9: 96:77:0e:c6:6c:2f:ec:68:dd:41:fb:51:6b:b1:95: 74:8b:5c:5c:f9:6a:83:ff:48:4c:14:32:f6:52:d6: 6f:d7:3a:84:63:ea:90:a6:99:72:10:75:b7:69:a9: 7f:3e:a8:22:5c:d1:58:ce:6b:21:4d:bd:a7:4d:6c: 42:63:1b:c7:14:4a:a2:eb:94:ae:38:40:5f:ba:01: f9:8e:6f:55:a3:65:83:ba:aa:e9:89:a3:73:5b:89: f0:b1:40:03:de:1d:1d:52:69:e9:96:2a:10:7e:d9: 6c:c9:c2:72:27:2f:2b:54:74:22:1e:9b:02:f6:3b: f7:1e:54:c2:b3:c1:33:30:ec:9c:e7:79:f3:e7:1a: 08:31:a2:06:4a:a3:85:69:eb:10:df:ae:f5:4b:9d: ca:59:21:15:f7:b0:74:ff:c7:e9:51:18:f7:da:69: 93:0b:aa:4e:44:81:56:67:e3:41:82:e7:dd:bf:e6: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:96:AD:F1:B5:B3:99:4E:00:F7:11:06:16:B8:F8:BE:0F:CA:39:93 X509v3 Authority Key Identifier: keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.39.156.0/22 Signature Algorithm: sha256WithRSAEncryption 12:10:1c:ae:4b:cd:dd:ae:04:56:12:7f:60:c8:21:c0:d2:b5: 21:58:9f:ab:90:9f:3d:f9:c2:47:76:15:88:e3:bf:8e:47:27: a4:2a:91:9e:63:65:b3:ad:32:5e:dd:ee:38:49:7a:98:d3:9e: 92:08:29:8e:9d:79:2a:d8:65:b1:a7:c3:9f:1c:51:02:d8:00: a4:fc:ae:95:77:bb:30:14:d4:68:50:ff:4f:91:18:56:9f:2f: 19:60:a1:b5:b3:ff:c7:51:3a:ca:6d:74:a9:17:ca:6a:fc:f3: 18:a8:8b:cd:05:ff:20:8c:47:6e:14:34:f6:13:37:ca:5c:95: 9e:26:cb:28:bb:6f:84:2d:39:93:d2:36:ee:8a:97:40:c5:4e: 58:53:0f:d8:45:7e:3e:3e:d0:8a:2e:f5:73:b6:ca:94:d5:3b: f7:82:d3:3e:78:9c:97:ee:00:89:0b:7f:25:e5:94:10:36:04: 18:b3:e8:f3:60:ee:74:eb:fa:83:61:f2:5d:a9:3f:7b:ee:f8: f2:af:b8:e3:d1:12:c8:05:4a:b8:da:bd:ce:5a:85:08:5e:de: 91:99:f4:bd:bd:81:91:8c:09:cf:f6:c5:be:89:96:37:7c:38: af:fa:48:b0:ca:8e:bd:39:9b:3e:74:e6:ba:c2:3a:7e:27:6b: 10:3b:19:e0 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUGrs7kYs3ZpjEMD8tmPmMNlDgSWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFNzBGOTEzRTkxMzdCMzUyNTkyQjdBMkMwNzVEMkVB OUY0MjY5RDAeFw0yNTEyMDQxOTQ3MTFaFw0yNjEyMDMxOTUyMTFaMDMxMTAvBgNV BAMTKEIzOTZBREYxQjVCMzk5NEUwMEY3MTEwNjE2QjhGOEJFMEZDQTM5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEn/Qbq292kDZ04kMlTChnWI9D zVmMT19cv2wPTTc0Z0ElhMDb2pihA5ggM1jsT8u9ebpLXcYvdw+Em/jPPtglgPKK Z7XCjPy46ZZ3DsZsL+xo3UH7UWuxlXSLXFz5aoP/SEwUMvZS1m/XOoRj6pCmmXIQ dbdpqX8+qCJc0VjOayFNvadNbEJjG8cUSqLrlK44QF+6AfmOb1WjZYO6qumJo3Nb ifCxQAPeHR1SaemWKhB+2WzJwnInLytUdCIemwL2O/ceVMKzwTMw7JznefPnGggx ogZKo4Vp6xDfrvVLncpZIRX3sHT/x+lRGPfaaZMLqk5EgVZn40GC592/5pJJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUs5at8bWzmU4A9xEGFrj4vg/KOZMwHwYDVR0j BBgwFoAUnOcPkT6RN7NSWSt6LAddLqn0Jp0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4 VGYvMC85Q0U3MEY5MTNFOTEzN0IzNTI1OTJCN0EyQzA3NUQyRUE5RjQyNjlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDRTcwRjkxM0U5MTM3QjM1 MjU5MkI3QTJDMDc1RDJFQTlGNDI2OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv MzEzNzM3MmUzMzM5MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy MzczNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCsSecMA0GCSqGSIb3DQEBCwUAA4IBAQASEByuS83d rgRWEn9gyCHA0rUhWJ+rkJ89+cJHdhWI47+ORyekKpGeY2WzrTJe3e44SXqY056S CCmOnXkq2GWxp8OfHFEC2ACk/K6Vd7swFNRoUP9PkRhWny8ZYKG1s//HUTrKbXSp F8pq/PMYqIvNBf8gjEduFDT2EzfKXJWeJssou2+ELTmT0jbuipdAxU5YUw/YRX4+ PtCKLvVztsqU1Tv3gtM+eJyX7gCJC38l5ZQQNgQYs+jzYO506/qDYfJdqT977vjy r7jj0RLIBUq42r3OWoUIXt6RmfS9vYGRjAnP9sW+iZY3fDiv+kiwyo69OZs+dOa6 wjp+J2sQOxng -----END CERTIFICATE-----Generated at Sun Dec 7 07:12:25 2025 by rpki-client