This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa File: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (raw, json) Hash identifier: dbJPXyrTCsLpCzcijXf9A1x/KHQUtPR++8OB+EdCqkQ= Subject key identifier: AA:57:E6:C2:29:B8:ED:B7:54:55:94:26:1A:6B:20:CF:C8:8E:72:A2 Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB Certificate serial: 43A223754C01D7E1009928E2232E916EE571D7CF Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa Signing time: Thu 06 Nov 2025 13:01:16 +0000 ROA not before: Thu 06 Nov 2025 12:56:16 +0000 ROA not after: Thu 05 Nov 2026 13:01:16 +0000 asID: 263947 IP address blocks: 138.255.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a2:23:75:4c:01:d7:e1:00:99:28:e2:23:2e:91:6e:e5:71:d7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB Validity Not Before: Nov 6 12:56:16 2025 GMT Not After : Nov 5 13:01:16 2026 GMT Subject: CN=AA57E6C229B8EDB7545594261A6B20CFC88E72A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:35:31:b4:e1:dd:86:d0:c3:f6:c5:c7:a9: b4:cb:20:34:c4:9f:ad:88:57:ee:5f:11:34:06:9f: 85:41:27:84:32:3b:3e:5d:4e:9e:4b:a4:45:b5:4a: de:25:b8:02:ea:5d:e0:42:c4:e9:b7:91:92:eb:44: 7f:22:5f:d3:ed:96:79:c9:8d:0d:2b:6e:7a:29:b6: bc:8a:b6:28:82:5c:fc:c5:fd:81:ba:c5:06:4f:d9: 59:38:9d:73:51:9e:c6:89:24:e3:67:da:a8:b6:b4: 8b:1b:fc:62:f3:16:b7:6e:88:eb:c2:f0:82:f6:30: 01:78:31:23:ae:91:84:79:f3:44:dd:1f:5b:4c:33: 21:da:ef:b9:aa:e7:d6:fe:f7:f2:83:b8:33:ae:de: c4:d4:6d:93:d5:a8:ef:48:a2:49:06:53:9c:1a:2f: 1a:ac:67:19:fd:c2:72:d1:55:54:7e:47:f2:0b:ad: 55:dc:48:e6:89:74:30:31:3d:39:fe:f8:d1:56:32: 52:7a:a8:57:9c:ab:2a:38:0d:0a:da:42:fc:bc:7c: 12:eb:22:89:8c:1d:79:a8:f7:d4:60:78:38:27:47: 69:ca:92:63:b6:df:4f:f5:75:6a:86:b9:8b:a2:f1: d3:ab:4d:63:78:46:8d:78:5b:a0:26:a6:f5:8f:37: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:E6:C2:29:B8:ED:B7:54:55:94:26:1A:6B:20:CF:C8:8E:72:A2 X509v3 Authority Key Identifier: keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.12.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:a1:ea:b7:c3:25:18:03:fc:67:32:58:8d:f4:6b:18:eb:58: 84:87:9c:4d:f8:52:29:c3:4e:fb:71:5e:37:a2:79:23:62:d5: 5f:79:f3:fe:91:62:15:40:b3:91:62:32:f9:1c:d3:1d:83:f4: 4d:c3:93:bb:ea:14:d7:da:00:f8:ce:73:17:e9:7d:ee:4e:9c: d0:f5:70:fd:7a:ab:e4:16:48:21:e8:e0:a1:18:7b:14:f2:72: ec:41:fc:fb:3b:ba:0a:a9:a8:78:f5:59:02:b0:63:30:35:9f: 12:75:98:60:cf:7a:64:46:e9:71:cd:f6:8b:3c:ec:23:95:ed: 91:18:52:43:83:c7:b1:4c:93:5c:51:32:cd:f8:53:98:34:1b: 10:95:c1:60:ba:ab:c1:b4:9a:36:5d:02:e0:72:55:34:43:55: 35:58:1f:49:19:34:01:ca:4a:ab:84:e9:09:90:78:6e:1d:7c: c1:b8:01:10:76:18:1b:c3:14:45:23:ec:16:25:58:28:65:ef: 2a:59:a4:3f:d0:a2:2b:20:f1:3e:23:74:4e:b0:f5:c7:c8:7c: d6:21:d8:58:80:9a:1e:51:14:f9:78:ee:6d:ce:3f:01:22:bd: 6d:d6:91:24:cd:d6:51:e4:31:fb:cf:74:7d:87:b3:60:90:5c: 94:3b:17:ae -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQ6IjdUwB1+EAmSjiIy6RbuVx188wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGMDkzRjI5MTg2MDUzNkVGRkM5MzkzNEU3N0RDOTY2 OTMzMDJEQjAeFw0yNTExMDYxMjU2MTZaFw0yNjExMDUxMzAxMTZaMDMxMTAvBgNV BAMTKEFBNTdFNkMyMjlCOEVEQjc1NDU1OTQyNjFBNkIyMENGQzg4RTcyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMTUxtOHdhtDD9sXHqbTLIDTE n62IV+5fETQGn4VBJ4QyOz5dTp5LpEW1St4luALqXeBCxOm3kZLrRH8iX9PtlnnJ jQ0rbnoptryKtiiCXPzF/YG6xQZP2Vk4nXNRnsaJJONn2qi2tIsb/GLzFrduiOvC 8IL2MAF4MSOukYR580TdH1tMMyHa77mq59b+9/KDuDOu3sTUbZPVqO9IokkGU5wa LxqsZxn9wnLRVVR+R/ILrVXcSOaJdDAxPTn++NFWMlJ6qFecqyo4DQraQvy8fBLr IomMHXmo99RgeDgnR2nKkmO230/1dWqGuYui8dOrTWN4Ro14W6AmpvWPN3Q3AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUqlfmwim47bdUVZQmGmsgz8iOcqIwHwYDVR0j BBgwFoAU+vCT8pGGBTbv/JOTTnfclmkzAtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9Z U0UvMC9GQUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRjA5M0YyOTE4NjA1MzZF RkZDOTM5MzRFNzdEQzk2NjkzMzAyREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hMQWZiTGhBZW5MUTl0M0FQMzVOQ2liajNIWWVxRkw4S3ozb24zV3BvWVNFLzAv MzEzMzM4MmUzMjM1MzUyZTMxMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2 MzMzOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGK/wwwDQYJKoZIhvcNAQELBQADggEBAEqh6rfD JRgD/GcyWI30axjrWISHnE34UinDTvtxXjeieSNi1V958/6RYhVAs5FiMvkc0x2D 9E3Dk7vqFNfaAPjOcxfpfe5OnND1cP16q+QWSCHo4KEYexTycuxB/Ps7ugqpqHj1 WQKwYzA1nxJ1mGDPemRG6XHN9os87COV7ZEYUkODx7FMk1xRMs34U5g0GxCVwWC6 q8G0mjZdAuByVTRDVTVYH0kZNAHKSquE6QmQeG4dfMG4ARB2GBvDFEUj7BYlWChl 7ypZpD/Qoisg8T4jdE6w9cfIfNYh2FiAmh5RFPl47m3OPwEivW3WkSTN1lHkMfvP dH2Hs2CQXJQ7F64= -----END CERTIFICATE-----Generated at Sun Dec 7 00:05:14 2025 by rpki-client