This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/3133382e3230342e32382e302f32322d3233203d3e20323632373930.roa File: 3133382e3230342e32382e302f32322d3233203d3e20323632373930.roa (raw, json) Hash identifier: MbB8RuvaaXP+32NAIYVIq5TKvvesdrewgSdt/iIk3p4= Subject key identifier: 52:1F:84:CA:4B:5A:AB:D3:B6:90:C5:1C:C6:7B:35:18:05:E8:E2:44 Certificate issuer: /CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5 Certificate serial: 08F8467F4A1B193279672EE59C7F44BCAED8AAA4 Authority key identifier: 67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/3133382e3230342e32382e302f32322d3233203d3e20323632373930.roa Signing time: Tue 25 Nov 2025 18:14:23 +0000 ROA not before: Tue 25 Nov 2025 18:09:23 +0000 ROA not after: Tue 24 Nov 2026 18:14:23 +0000 asID: 262790 IP address blocks: 138.204.28.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f8:46:7f:4a:1b:19:32:79:67:2e:e5:9c:7f:44:bc:ae:d8:aa:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5 Validity Not Before: Nov 25 18:09:23 2025 GMT Not After : Nov 24 18:14:23 2026 GMT Subject: CN=521F84CA4B5AABD3B690C51CC67B351805E8E244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:f9:3e:b8:31:f3:15:b6:a3:4b:79:d8:18: 28:2a:8b:ed:54:d6:80:ba:e7:5a:20:32:18:96:c0: ba:4c:9f:7b:ff:5a:49:a7:97:1c:e2:27:5b:07:1c: d4:0b:7d:04:49:07:3b:73:10:48:3b:4d:08:0d:20: 50:96:9f:92:f8:47:b5:05:8d:0a:27:41:fc:b4:46: 98:9d:81:bc:e6:87:d3:48:c5:c1:4d:7c:28:61:a7: bd:b3:65:cd:3b:c0:a2:0b:8f:19:f1:0a:14:bf:ec: 73:2d:24:0b:81:a7:5e:a1:2a:75:da:ee:d8:50:71: 37:e9:2d:32:d2:a5:d7:73:25:55:27:ad:9b:bd:b4: 0d:97:08:7c:47:b3:36:d9:4b:ac:72:a6:6c:f8:2e: 27:88:20:4d:b0:11:40:28:56:33:07:67:2b:c4:8d: 5e:ac:f1:7b:aa:8a:b3:c3:49:aa:e4:f7:f0:00:85: e1:f8:f4:1e:3e:00:36:08:80:8d:f9:e6:49:49:0e: 17:7a:f2:cc:4b:4b:a4:8a:ff:8c:5c:83:2a:e5:72: d9:5a:96:73:10:ec:d3:71:0c:ac:e0:88:04:4d:fa: 40:aa:a8:b9:42:7a:0c:89:9b:dc:34:98:20:15:aa: 50:b0:fb:35:c3:75:3c:3b:e0:bf:a1:25:53:fc:4e: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1F:84:CA:4B:5A:AB:D3:B6:90:C5:1C:C6:7B:35:18:05:E8:E2:44 X509v3 Authority Key Identifier: keyid:67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/3133382e3230342e32382e302f32322d3233203d3e20323632373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.28.0/22 Signature Algorithm: sha256WithRSAEncryption 44:f1:37:47:56:6d:fa:ae:e0:44:41:02:ce:05:11:6a:e0:08: 5d:50:dc:7b:ca:02:84:4e:27:08:e8:2a:85:5e:b7:78:c7:a3: cb:a0:a3:07:12:dc:a0:68:08:e7:61:cc:03:d5:ec:93:cd:67: 35:76:1c:1e:13:ab:94:98:33:da:06:f1:94:a6:ce:98:ec:8c: 20:a0:11:03:b2:36:17:69:da:17:33:13:7c:6b:bc:5a:f4:3e: dc:6f:c3:2a:aa:68:41:b0:5a:11:45:38:54:fa:38:70:14:f1: 4b:6f:87:2f:2b:91:8e:8b:65:a3:f5:07:8a:a4:81:b2:f7:49: 37:c6:b3:99:33:33:6b:e1:29:56:44:4a:83:1f:40:df:0a:26: a6:e1:3d:e3:fc:05:26:6d:fd:2b:03:01:6e:2a:71:30:cf:89: 65:a2:9b:f3:f2:74:50:33:2d:3e:6d:a3:78:ca:d5:f2:99:57: 69:6a:70:f2:09:38:d7:0c:af:62:71:ce:a1:cf:b9:1c:5b:78: 69:f8:85:c3:69:e2:6d:d3:9a:f0:74:8b:07:33:f1:a4:85:4a: 1a:e4:d9:57:34:15:be:93:5e:2a:3e:8f:f1:13:d8:6b:7a:88: 2d:c4:cf:4d:c2:3e:a7:83:37:e1:c0:d7:26:6b:13:25:a0:99: 2c:57:73:30 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUCPhGf0obGTJ5Zy7lnH9EvK7YqqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyNjFEREU3MzAxQzczODU3Qjg0QzFFRkQxN0UxRjg1 NzNGMjNFNTAeFw0yNTExMjUxODA5MjNaFw0yNjExMjQxODE0MjNaMDMxMTAvBgNV BAMTKDUyMUY4NENBNEI1QUFCRDNCNjkwQzUxQ0M2N0IzNTE4MDVFOEUyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9vk+uDHzFbajS3nYGCgqi+1U 1oC651ogMhiWwLpMn3v/WkmnlxziJ1sHHNQLfQRJBztzEEg7TQgNIFCWn5L4R7UF jQonQfy0Rpidgbzmh9NIxcFNfChhp72zZc07wKILjxnxChS/7HMtJAuBp16hKnXa 7thQcTfpLTLSpddzJVUnrZu9tA2XCHxHszbZS6xypmz4LieIIE2wEUAoVjMHZyvE jV6s8XuqirPDSark9/AAheH49B4+ADYIgI355klJDhd68sxLS6SK/4xcgyrlctla lnMQ7NNxDKzgiARN+kCqqLlCegyJm9w0mCAVqlCw+zXDdTw74L+hJVP8Tq2TAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUUh+Eyktaq9O2kMUcxns1GAXo4kQwHwYDVR0j BBgwFoAUZyYd3nMBxzhXuEwe/Rfh+Fc/I+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHlWejlHVW1wQ2hKSnh3R0ViYWVpQzd2eG41NU1XYUFuQ3dmZUZCbXBO cEIvMC82NzI2MURERTczMDFDNzM4NTdCODRDMUVGRDE3RTFGODU3M0YyM0U1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3MjYxRERFNzMwMUM3Mzg1 N0I4NEMxRUZEMTdFMUY4NTczRjIzRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0R5Vno5R1VtcENoSkp4d0dFYmFlaUM3dnhuNTVNV2FBbkN3ZmVGQm1wTnBCLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzgyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2 MzIzNzM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKzBwwDQYJKoZIhvcNAQELBQADggEBAETxN0dW bfqu4ERBAs4FEWrgCF1Q3HvKAoROJwjoKoVet3jHo8ugowcS3KBoCOdhzAPV7JPN ZzV2HB4Tq5SYM9oG8ZSmzpjsjCCgEQOyNhdp2hczE3xrvFr0PtxvwyqqaEGwWhFF OFT6OHAU8Utvhy8rkY6LZaP1B4qkgbL3STfGs5kzM2vhKVZESoMfQN8KJqbhPeP8 BSZt/SsDAW4qcTDPiWWim/PydFAzLT5to3jK1fKZV2lqcPIJONcMr2JxzqHPuRxb eGn4hcNp4m3TmvB0iwcz8aSFShrk2Vc0Fb6TXio+j/ET2Gt6iC3Ez03CPqeDN+HA 1yZrEyWgmSxXczA= -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:43 2025 by rpki-client