This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa File: 3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa (raw, json) Hash identifier: ilDFulKS4bBuP1yxoPhNPLm+sEHq1vZt/8rx4r/eGJo= Subject key identifier: 6B:F2:EA:E4:92:49:DF:46:9E:A5:8F:24:EA:86:92:B5:32:A4:1D:E5 Certificate issuer: /CN=2D1EF950AB5C855E2D7C436153A72A554B109A82 Certificate serial: 6C98104F85E25C618CFA530CFE039C86A6494727 Authority key identifier: 2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa Signing time: Thu 20 Nov 2025 19:35:07 +0000 ROA not before: Thu 20 Nov 2025 19:30:07 +0000 ROA not after: Thu 19 Nov 2026 19:35:07 +0000 asID: 269194 IP address blocks: 168.181.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:98:10:4f:85:e2:5c:61:8c:fa:53:0c:fe:03:9c:86:a6:49:47:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D1EF950AB5C855E2D7C436153A72A554B109A82 Validity Not Before: Nov 20 19:30:07 2025 GMT Not After : Nov 19 19:35:07 2026 GMT Subject: CN=6BF2EAE49249DF469EA58F24EA8692B532A41DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:1b:ca:66:58:27:bb:4c:5e:d4:a5:67:8a: 79:2f:01:f6:15:7f:ea:fd:d8:a7:59:32:1a:a5:1d: a8:97:25:b8:94:19:00:be:a8:01:b4:5e:67:0e:55: df:3f:24:7a:8b:65:c7:71:3d:1c:2a:e5:f0:ca:5d: ee:bd:1c:7d:30:e5:be:3b:43:e0:e3:0c:af:93:63: ee:1d:fe:c3:a3:33:3b:5d:6d:0c:80:67:57:e1:f5: cb:f2:e0:f8:44:d0:db:63:a1:44:4d:94:4c:d1:47: e0:a6:64:e7:8b:a1:44:57:43:67:09:5d:b4:c8:b3: e6:79:2c:68:2b:d1:d1:77:c8:55:8b:48:66:d6:a9: d3:d6:45:83:af:e9:ae:27:29:2e:a2:ea:2c:02:83: 43:4a:bc:a1:5d:ff:35:0e:97:a7:82:8f:45:0f:40: 6f:1e:7b:cc:8f:20:ba:09:bf:bf:0a:58:e5:b7:2b: da:52:e8:27:4b:7f:25:6b:41:c2:ff:73:08:6d:2d: 46:fc:96:dc:90:2a:5f:45:53:2b:9d:66:b3:2f:f3: 79:22:1a:bc:bb:fb:19:8d:e8:d9:c8:59:d4:70:f0: 8a:f2:13:90:77:da:ea:21:fb:f9:3d:71:8d:3b:fa: c9:9c:ea:38:6b:32:27:8f:17:34:63:56:7f:20:90: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F2:EA:E4:92:49:DF:46:9E:A5:8F:24:EA:86:92:B5:32:A4:1D:E5 X509v3 Authority Key Identifier: keyid:2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.252.0/22 Signature Algorithm: sha256WithRSAEncryption 52:cf:6f:6f:61:ab:12:b0:3f:13:f3:8d:a0:0f:58:2b:81:c3: a0:38:89:e7:5c:fc:fa:f3:10:5c:f0:9e:0a:d4:69:28:94:ff: d7:12:66:cb:af:51:b6:98:f8:06:3d:c5:89:4e:56:84:64:bd: 56:68:22:de:fd:a0:79:20:e6:c9:7c:5e:f3:6b:50:c0:9d:ba: dc:d6:97:6d:54:c7:7a:2e:a2:6c:87:52:de:ef:87:e5:ed:bf: 2d:7f:41:57:2b:20:93:08:ca:2a:34:8f:01:b2:02:a2:8b:a4: c1:a7:72:42:ac:24:89:35:02:0e:07:38:10:a5:ee:0a:0d:4e: 93:75:57:76:20:16:b3:0a:4f:69:b5:0c:a7:c8:8e:23:92:e9: 98:e0:16:fe:13:fe:3d:5b:6f:4c:44:6e:1a:b0:2d:e5:ec:84: 1c:89:06:36:bd:78:df:2f:fe:37:6a:96:18:7f:74:2d:f3:ef: 5c:06:83:0a:33:7d:e6:ab:c5:65:01:dd:d6:4d:87:c3:ca:a0: ad:40:9e:8c:61:cc:1a:5b:0f:6a:35:2f:d7:67:b5:27:d9:98: c6:8d:c9:96:3f:93:ed:38:bc:88:64:a4:de:7d:9e:65:c7:0c: c4:72:24:dd:b4:12:a3:68:fe:ff:fb:35:48:e4:5a:a6:36:13: 83:24:9d:89 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUbJgQT4XiXGGM+lMM/gOchqZJRycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxRUY5NTBBQjVDODU1RTJEN0M0MzYxNTNBNzJBNTU0 QjEwOUE4MjAeFw0yNTExMjAxOTMwMDdaFw0yNjExMTkxOTM1MDdaMDMxMTAvBgNV BAMTKDZCRjJFQUU0OTI0OURGNDY5RUE1OEYyNEVBODY5MkI1MzJBNDFERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XRvKZlgnu0xe1KVninkvAfYV f+r92KdZMhqlHaiXJbiUGQC+qAG0XmcOVd8/JHqLZcdxPRwq5fDKXe69HH0w5b47 Q+DjDK+TY+4d/sOjMztdbQyAZ1fh9cvy4PhE0NtjoURNlEzRR+CmZOeLoURXQ2cJ XbTIs+Z5LGgr0dF3yFWLSGbWqdPWRYOv6a4nKS6i6iwCg0NKvKFd/zUOl6eCj0UP QG8ee8yPILoJv78KWOW3K9pS6CdLfyVrQcL/cwhtLUb8ltyQKl9FUyudZrMv83ki Gry7+xmN6NnIWdRw8IryE5B32uoh+/k9cY07+smc6jhrMiePFzRjVn8gkAHtAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUa/Lq5JJJ30aepY8k6oaStTKkHeUwHwYDVR0j BBgwFoAULR75UKtchV4tfENhU6cqVUsQmoIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl TDQvMC8yRDFFRjk1MEFCNUM4NTVFMkQ3QzQzNjE1M0E3MkE1NTRCMTA5QTgyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMUVGOTUwQUI1Qzg1NUUy RDdDNDM2MTUzQTcyQTU1NEIxMDlBODIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv MzEzNjM4MmUzMTM4MzEyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1/DANBgkqhkiG9w0BAQsFAAOCAQEAUs9v b2GrErA/E/ONoA9YK4HDoDiJ51z8+vMQXPCeCtRpKJT/1xJmy69Rtpj4Bj3FiU5W hGS9Vmgi3v2geSDmyXxe82tQwJ263NaXbVTHei6ibIdS3u+H5e2/LX9BVysgkwjK KjSPAbICooukwadyQqwkiTUCDgc4EKXuCg1Ok3VXdiAWswpPabUMp8iOI5LpmOAW /hP+PVtvTERuGrAt5eyEHIkGNr143y/+N2qWGH90LfPvXAaDCjN95qvFZQHd1k2H w8qgrUCejGHMGlsPajUv12e1J9mYxo3Jlj+T7Ti8iGSk3n2eZccMxHIk3bQSo2j+ //s1SORapjYTgySdiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:19:51 2025 by rpki-client