This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3232342e302f32302d3330203d3e203238313838.roa File: 3138392e38392e3232342e302f32302d3330203d3e203238313838.roa (raw, json) Hash identifier: 9g5FRud2UI0Jmpiwfq33B5Cl98OSQxSIdYIPTg91Wfo= Subject key identifier: 2F:6B:B8:B7:38:EB:CE:FD:08:7D:51:9A:B9:9A:DA:B0:A0:FC:84:E8 Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770 Certificate serial: 720507218F019F3D781C6794390336065253FF28 Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3232342e302f32302d3330203d3e203238313838.roa Signing time: Wed 05 Feb 2025 22:55:36 +0000 ROA not before: Wed 05 Feb 2025 22:50:36 +0000 ROA not after: Wed 04 Feb 2026 22:55:36 +0000 asID: 28188 IP address blocks: 189.89.224.0/20 maxlen: 30 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 72:05:07:21:8f:01:9f:3d:78:1c:67:94:39:03:36:06:52:53:ff:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770 Validity Not Before: Feb 5 22:50:36 2025 GMT Not After : Feb 4 22:55:36 2026 GMT Subject: CN=2F6BB8B738EBCEFD087D519AB99ADAB0A0FC84E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:06:ae:dd:5d:38:2d:af:e2:4e:07:4f:fb: 49:4f:6c:bf:ce:3c:ce:a1:eb:aa:3b:78:f3:be:42: 6a:9e:ab:a3:33:b4:e4:b7:5f:3b:de:bf:f0:bb:4c: cc:ae:e1:ed:e2:a8:a0:3f:47:2e:8b:74:80:b1:01: 47:b5:87:3f:bf:9c:b5:03:64:6b:95:71:a8:02:47: d9:6a:fc:a4:ef:2c:99:27:52:04:92:a8:39:73:e4: 3d:af:ec:63:bc:b5:e9:c5:12:b9:8a:57:25:b5:73: 6c:bd:94:84:f8:69:bc:9b:6f:98:f6:86:0f:56:ae: 3a:e3:bd:06:b8:e1:37:39:a0:d8:ef:b0:c4:f9:59: bb:a7:c5:b6:cd:3b:13:ec:35:5b:0c:1b:90:51:c5: fb:fe:ff:3b:d0:6b:d0:71:d2:60:fb:10:af:92:a4: 90:2e:c2:a2:f6:b0:a4:c8:e1:32:b6:42:bf:1a:04: da:b6:2c:b1:00:d2:6a:39:66:0c:64:5e:f1:87:bd: b4:a9:ce:f4:03:94:62:a2:06:d1:ce:57:3f:3a:4f: 43:a5:44:ca:11:69:66:e2:a1:94:03:70:04:34:33: be:81:68:d5:6b:cc:3a:6b:82:39:b1:6a:f2:bd:81: 0d:fe:fa:74:06:f9:24:d7:d6:7e:12:99:46:85:5f: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6B:B8:B7:38:EB:CE:FD:08:7D:51:9A:B9:9A:DA:B0:A0:FC:84:E8 X509v3 Authority Key Identifier: keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3232342e302f32302d3330203d3e203238313838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.224.0/20 Signature Algorithm: sha256WithRSAEncryption 52:66:1e:7e:1b:4c:b9:4e:46:1e:5b:f5:88:53:e4:43:22:7b: b6:bb:90:0f:c4:3b:43:6f:b4:17:c9:ec:56:3b:c0:68:8c:b2: b2:ff:56:e1:e3:d2:9a:2d:d1:4b:27:b4:60:d3:fc:8a:42:87: b4:d1:ea:67:b0:61:27:a7:1b:d6:45:e3:59:f1:40:8c:46:3d: 63:51:43:a4:3b:cb:8f:8a:56:bc:94:48:15:44:ae:5b:a1:ce: 7c:83:67:74:75:3f:7f:0f:13:76:3c:1f:df:ac:80:9c:16:ea: 21:22:ef:03:98:ac:7a:a5:06:ac:d3:23:60:1b:ec:25:97:a8: 5f:05:c0:cd:ce:b8:69:f3:e9:fb:13:ac:ea:7c:be:62:43:88: 7d:31:13:01:87:8b:b6:34:f0:7a:54:7b:c3:d2:ce:d5:c6:17: ae:3c:7d:c8:a8:a9:1e:44:cb:63:a3:cd:85:8c:38:d9:35:6d: 68:0e:ff:88:d4:63:ab:9f:ea:e4:f8:7f:2f:54:09:b3:8f:56: 4a:5c:09:d7:2a:13:fe:5c:58:60:0d:cb:8e:24:83:fe:be:4b: ab:2b:30:a4:ef:d0:b5:52:75:19:08:c2:49:55:e0:01:fb:ac: d3:25:d5:c6:48:d1:f2:0c:5e:3d:73:38:df:7a:e1:b1:f3:7a: b9:e4:1e:73 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUcgUHIY8Bnz14HGeUOQM2BlJT/ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNC RTQ4QTc3MDAeFw0yNTAyMDUyMjUwMzZaFw0yNjAyMDQyMjU1MzZaMDMxMTAvBgNV BAMTKDJGNkJCOEI3MzhFQkNFRkQwODdENTE5QUI5OUFEQUIwQTBGQzg0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjQau3V04La/iTgdP+0lPbL/O PM6h66o7ePO+Qmqeq6MztOS3Xzvev/C7TMyu4e3iqKA/Ry6LdICxAUe1hz+/nLUD ZGuVcagCR9lq/KTvLJknUgSSqDlz5D2v7GO8tenFErmKVyW1c2y9lIT4abybb5j2 hg9WrjrjvQa44Tc5oNjvsMT5WbunxbbNOxPsNVsMG5BRxfv+/zvQa9Bx0mD7EK+S pJAuwqL2sKTI4TK2Qr8aBNq2LLEA0mo5ZgxkXvGHvbSpzvQDlGKiBtHOVz86T0Ol RMoRaWbioZQDcAQ0M76BaNVrzDprgjmxavK9gQ3++nQG+STX1n4SmUaFX6ZnAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUL2u4tzjrzv0IfVGauZrasKD8hOgwHwYDVR0j BBgwFoAU44rCz7KZcVs7bVhmwVzzU75Ip3AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ES050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNk LzAvRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNCRTQ4QTc3MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMzhBQzJDRkIyOTk3MTVCM0I2 RDU4NjZDMTVDRjM1M0JFNDhBNzcwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E S050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNkLzAvMzEz ODM5MmUzODM5MmUzMjMyMzQyZTMwMmYzMjMwMmQzMzMwMjAzZDNlMjAzMjM4MzEz ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQEvVngMA0GCSqGSIb3DQEBCwUAA4IBAQBSZh5+G0y5TkYe W/WIU+RDInu2u5APxDtDb7QXyexWO8BojLKy/1bh49KaLdFLJ7Rg0/yKQoe00epn sGEnpxvWReNZ8UCMRj1jUUOkO8uPila8lEgVRK5boc58g2d0dT9/DxN2PB/frICc FuohIu8DmKx6pQas0yNgG+wll6hfBcDNzrhp8+n7E6zqfL5iQ4h9MRMBh4u2NPB6 VHvD0s7VxheuPH3IqKkeRMtjo82FjDjZNW1oDv+I1GOrn+rk+H8vVAmzj1ZKXAnX KhP+XFhgDcuOJIP+vkurKzCk79C1UnUZCMJJVeAB+6zTJdXGSNHyDF49czjfeuGx 83q55B5z -----END CERTIFICATE-----Generated at Wed Dec 17 18:48:05 2025 by rpki-client