This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137302e3234372e32302e302f32322d3332203d3e20323633333234.roa File: 3137302e3234372e32302e302f32322d3332203d3e20323633333234.roa (raw, json) Hash identifier: e+9Jji+Kp/08zoNkP2aspHOst7h/Pm7XqekFIqKkdLw= Subject key identifier: 4D:32:B3:D9:80:FC:05:3A:E7:C0:D5:D0:B5:7A:5E:93:B8:CD:4F:5E Certificate issuer: /CN=0E1B21C62DBFAE7BD33B349D9657A3C90147B837 Certificate serial: 34FCB3A22943366774FFB6B50A96E2D4C50CB8A6 Authority key identifier: 0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer Subject info access: rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137302e3234372e32302e302f32322d3332203d3e20323633333234.roa Signing time: Thu 06 Nov 2025 18:27:35 +0000 ROA not before: Thu 06 Nov 2025 18:22:35 +0000 ROA not after: Thu 05 Nov 2026 18:27:35 +0000 asID: 263324 IP address blocks: 170.247.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.crl rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fc:b3:a2:29:43:36:67:74:ff:b6:b5:0a:96:e2:d4:c5:0c:b8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1B21C62DBFAE7BD33B349D9657A3C90147B837 Validity Not Before: Nov 6 18:22:35 2025 GMT Not After : Nov 5 18:27:35 2026 GMT Subject: CN=4D32B3D980FC053AE7C0D5D0B57A5E93B8CD4F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:92:56:cb:e7:0a:56:d5:8b:dc:24:c8:c3:5c: 48:a4:79:02:55:79:3e:1d:26:ea:ce:bf:66:c8:43: 3a:38:5c:fc:78:d3:69:8f:f2:d0:f4:26:f9:3a:0e: 32:48:9e:60:88:88:d6:13:a2:62:06:c7:18:9f:33: 9b:d7:ad:a2:d6:cc:5f:3d:4d:3c:1d:c7:20:3f:b4: ca:b2:6c:81:c3:cf:b4:27:6a:cf:98:4b:ec:03:42: 56:d4:47:51:1f:3b:fa:7e:11:e7:76:d5:15:3e:ab: 30:98:b9:7e:9e:48:50:5f:42:9c:7a:15:20:4c:e7: ee:45:a1:c4:fd:48:34:a9:f4:f1:82:f1:8e:d5:99: a3:09:92:67:b9:0d:b2:44:97:06:1c:a6:67:8a:af: 3a:39:3c:63:0f:eb:25:c3:bd:93:0c:b0:60:54:38: b1:c3:ab:70:1f:56:ad:59:cb:35:c8:b6:f0:28:1c: 54:7c:52:e2:3a:b2:47:79:f4:27:66:a5:95:67:53: 80:4e:b9:5d:77:84:83:81:cd:b4:da:dc:dd:a2:86: 3e:fa:e5:b0:a1:7d:fb:18:56:ca:a8:f3:51:0b:94: 8b:60:f4:9c:04:a0:5f:a1:43:fa:22:28:50:08:ac: a0:18:41:85:c3:28:b8:4b:df:b7:f7:cf:23:23:b9: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:32:B3:D9:80:FC:05:3A:E7:C0:D5:D0:B5:7A:5E:93:B8:CD:4F:5E X509v3 Authority Key Identifier: keyid:0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137302e3234372e32302e302f32322d3332203d3e20323633333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.20.0/22 Signature Algorithm: sha256WithRSAEncryption 72:11:ea:e2:a8:99:f0:62:ae:3a:6b:e9:69:04:6e:a0:4b:28: c9:6f:19:d6:a3:b1:80:49:bb:a5:38:43:ec:60:37:19:0d:69: 60:4f:fe:04:d2:32:ed:39:16:26:28:e7:a4:d9:1e:98:c3:1a: 90:e9:01:06:33:12:fd:9b:0f:8e:b4:36:e4:8f:5b:aa:b5:d1: 6a:6e:ee:1e:61:33:3f:64:25:16:53:8c:46:d3:1b:7d:75:8c: da:a7:7e:5f:ab:58:44:62:c0:3d:ce:b3:e0:a4:d0:e7:83:94: cd:ce:a6:51:0b:48:b3:cc:de:75:3e:07:44:ca:a3:14:50:4e: bf:00:46:94:9d:1c:a2:f0:4a:fe:07:80:46:e8:8d:fd:18:c7: af:88:73:72:1c:c4:dd:c0:a9:2e:49:0d:3c:d2:c2:35:df:eb: b1:50:ef:0b:a3:ca:14:19:8f:a8:1f:d7:5b:b8:15:94:47:e6: c1:14:d6:8c:d2:68:f5:ce:c9:ca:dd:f5:a9:70:de:0c:7f:4c: f5:f1:5a:ee:16:0d:a7:ec:37:b9:94:d7:4b:37:75:3a:51:50: 4a:7e:01:cd:66:38:5d:6c:a5:1c:29:86:60:b0:2e:b7:9e:02: 38:87:94:59:ae:8e:b4:63:19:b5:61:66:37:fe:a0:33:99:19: 69:5a:c1:50 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUNPyzoilDNmd0/7a1Cpbi1MUMuKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxQjIxQzYyREJGQUU3QkQzM0IzNDlEOTY1N0EzQzkw MTQ3QjgzNzAeFw0yNTExMDYxODIyMzVaFw0yNjExMDUxODI3MzVaMDMxMTAvBgNV BAMTKDREMzJCM0Q5ODBGQzA1M0FFN0MwRDVEMEI1N0E1RTkzQjhDRDRGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIklbL5wpW1YvcJMjDXEikeQJV eT4dJurOv2bIQzo4XPx402mP8tD0Jvk6DjJInmCIiNYTomIGxxifM5vXraLWzF89 TTwdxyA/tMqybIHDz7Qnas+YS+wDQlbUR1EfO/p+Eed21RU+qzCYuX6eSFBfQpx6 FSBM5+5FocT9SDSp9PGC8Y7VmaMJkme5DbJElwYcpmeKrzo5PGMP6yXDvZMMsGBU OLHDq3AfVq1ZyzXItvAoHFR8UuI6skd59CdmpZVnU4BOuV13hIOBzbTa3N2ihj76 5bChffsYVsqo81ELlItg9JwEoF+hQ/oiKFAIrKAYQYXDKLhL37f3zyMjuS+fAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUTTKz2YD8BTrnwNXQtXpek7jNT14wHwYDVR0j BBgwFoAUDhshxi2/rnvTOzSdllejyQFHuDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3VqalRScm83cWRWRjZ5Vjd0aWhBUXphc2Q3Rlg3eHdrMjRZc2V1R1NK clkvMC8wRTFCMjFDNjJEQkZBRTdCRDMzQjM0OUQ5NjU3QTNDOTAxNDdCODM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFMUIyMUM2MkRCRkFFN0JE MzNCMzQ5RDk2NTdBM0M5MDE0N0I4MzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0d1ampUUnJvN3FkVkY2eVY3dGloQVF6YXNkN0ZYN3h3azI0WXNldUdTSnJZLzAv MzEzNzMwMmUzMjM0MzcyZTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzMzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq9xQwDQYJKoZIhvcNAQELBQADggEBAHIR6uKo mfBirjpr6WkEbqBLKMlvGdajsYBJu6U4Q+xgNxkNaWBP/gTSMu05FiYo56TZHpjD GpDpAQYzEv2bD460NuSPW6q10Wpu7h5hMz9kJRZTjEbTG311jNqnfl+rWERiwD3O s+Ck0OeDlM3OplELSLPM3nU+B0TKoxRQTr8ARpSdHKLwSv4HgEbojf0Yx6+Ic3Ic xN3AqS5JDTzSwjXf67FQ7wujyhQZj6gf11u4FZRH5sEU1ozSaPXOycrd9alw3gx/ TPXxWu4WDafsN7mU10s3dTpRUEp+Ac1mOF1spRwphmCwLreeAjiHlFmujrRjGbVh Zjf+oDOZGWlawVA= -----END CERTIFICATE-----Generated at Sat Dec 6 09:08:08 2025 by rpki-client