This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa File: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (raw, json) Hash identifier: uQ2hTKKN6Qzw9x/PKbUfxmURwLfodfxJcvZkF9+RONE= Subject key identifier: 09:C5:DC:E3:D8:11:4E:DC:88:3D:3A:28:A1:DA:51:61:E8:AA:ED:09 Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB Certificate serial: 04D3B24096A9655B90281C5ED9C709E5DA107617 Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa Signing time: Thu 06 Nov 2025 13:01:16 +0000 ROA not before: Thu 06 Nov 2025 12:56:16 +0000 ROA not after: Thu 05 Nov 2026 13:01:16 +0000 asID: 263947 IP address blocks: 138.255.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d3:b2:40:96:a9:65:5b:90:28:1c:5e:d9:c7:09:e5:da:10:76:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB Validity Not Before: Nov 6 12:56:16 2025 GMT Not After : Nov 5 13:01:16 2026 GMT Subject: CN=09C5DCE3D8114EDC883D3A28A1DA5161E8AAED09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:06:ca:53:a1:e5:bc:77:8f:5e:8b:25:56: cb:5f:59:9e:45:20:9f:be:48:18:d3:57:e5:10:2e: 89:38:c1:4a:8b:4e:c2:c9:66:6e:1f:d7:df:5d:b7: 0a:fe:67:51:d0:68:a8:25:1f:ee:50:0f:c2:32:b4: 71:a4:ae:a1:ac:76:85:77:5d:98:a4:6f:b4:4b:fd: a9:25:2c:f6:91:5a:1d:4e:cf:7e:4f:e2:42:da:77: 6c:b0:d6:32:cf:50:a4:1b:71:97:ed:60:df:7e:29: 84:d6:c0:80:a7:8c:97:c3:0c:ff:5d:dd:88:39:2f: 2a:ba:86:b3:ea:2d:05:66:1f:4e:a3:ba:62:f9:7e: 56:6c:fa:3e:22:6b:a2:49:90:8c:74:7e:af:5c:28: c1:ae:c9:30:1d:e5:d9:9a:61:cc:68:2b:3a:68:01: 55:2a:71:d9:cd:5f:a4:81:0b:90:9e:29:91:8d:b6: 0a:fe:a2:ae:93:80:f0:ff:e6:3f:ed:71:60:a6:5f: 92:62:99:25:bb:a1:31:5a:65:62:05:e2:17:d3:6b: 90:df:90:d5:44:d9:1e:87:e2:3a:5b:4b:c5:1e:30: 81:e1:34:ce:42:44:3a:e0:c0:d6:a6:86:c3:29:db: af:b4:9a:4f:d9:73:9c:1b:32:2b:68:91:71:8b:34: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C5:DC:E3:D8:11:4E:DC:88:3D:3A:28:A1:DA:51:61:E8:AA:ED:09 X509v3 Authority Key Identifier: keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.15.0/24 Signature Algorithm: sha256WithRSAEncryption 43:6a:a9:42:bc:52:ae:d3:7a:f2:f4:09:b6:4e:47:74:7f:3e: 1c:3a:ae:17:57:79:05:4e:f9:67:fd:80:70:6a:e1:83:39:6d: b7:73:e7:98:c0:bb:2a:47:db:1c:82:5a:52:02:a5:b3:f1:10: 98:16:d5:29:03:f5:2b:65:db:7a:c3:aa:a4:29:a2:2b:a9:62: fa:c9:b3:d5:09:1d:3f:68:4b:9e:43:6e:75:cd:3b:4b:12:1f: 64:0c:6d:de:88:22:35:6a:96:7d:d9:93:3c:18:02:a7:a8:06: 61:b7:c6:1e:d0:3e:9f:56:17:0c:9d:76:24:b6:46:ac:a7:4c: 7c:0b:d3:6d:70:2a:11:8a:55:57:51:da:95:86:dc:00:18:29: 41:05:c0:57:5f:7c:46:5e:5b:7f:23:41:c9:b4:7f:fa:34:f1: ea:06:73:fa:21:aa:eb:83:6d:4d:b4:9a:79:7d:f4:2d:a6:8b: 6a:48:3e:41:4f:5d:d7:e4:3a:b6:f3:0c:8f:42:36:85:ed:46: 64:99:7b:7d:9d:1f:49:11:88:f8:a7:e3:4e:b1:ad:ac:4e:c9: 0d:a0:8a:13:6d:4d:54:36:b8:3b:ef:0c:33:ca:a6:71:e4:6b: b2:ed:70:8a:b2:3f:ed:3a:90:ad:27:73:59:4f:72:70:ea:13: 09:6b:b6:8e -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUBNOyQJapZVuQKBxe2ccJ5doQdhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGMDkzRjI5MTg2MDUzNkVGRkM5MzkzNEU3N0RDOTY2 OTMzMDJEQjAeFw0yNTExMDYxMjU2MTZaFw0yNjExMDUxMzAxMTZaMDMxMTAvBgNV BAMTKDA5QzVEQ0UzRDgxMTRFREM4ODNEM0EyOEExREE1MTYxRThBQUVEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIQbKU6HlvHePXoslVstfWZ5F IJ++SBjTV+UQLok4wUqLTsLJZm4f199dtwr+Z1HQaKglH+5QD8IytHGkrqGsdoV3 XZikb7RL/aklLPaRWh1Oz35P4kLad2yw1jLPUKQbcZftYN9+KYTWwICnjJfDDP9d 3Yg5Lyq6hrPqLQVmH06jumL5flZs+j4ia6JJkIx0fq9cKMGuyTAd5dmaYcxoKzpo AVUqcdnNX6SBC5CeKZGNtgr+oq6TgPD/5j/tcWCmX5JimSW7oTFaZWIF4hfTa5Df kNVE2R6H4jpbS8UeMIHhNM5CRDrgwNamhsMp26+0mk/Zc5wbMitokXGLNNJ1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUCcXc49gRTtyIPTooodpRYeiq7QkwHwYDVR0j BBgwFoAU+vCT8pGGBTbv/JOTTnfclmkzAtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9Z U0UvMC9GQUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRjA5M0YyOTE4NjA1MzZF RkZDOTM5MzRFNzdEQzk2NjkzMzAyREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hMQWZiTGhBZW5MUTl0M0FQMzVOQ2liajNIWWVxRkw4S3ozb24zV3BvWVNFLzAv MzEzMzM4MmUzMjM1MzUyZTMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACK/w8wDQYJKoZIhvcNAQELBQADggEBAENqqUK8 Uq7TevL0CbZOR3R/Phw6rhdXeQVO+Wf9gHBq4YM5bbdz55jAuypH2xyCWlICpbPx EJgW1SkD9Stl23rDqqQpoiupYvrJs9UJHT9oS55DbnXNO0sSH2QMbd6IIjVqln3Z kzwYAqeoBmG3xh7QPp9WFwyddiS2RqynTHwL021wKhGKVVdR2pWG3AAYKUEFwFdf fEZeW38jQcm0f/o08eoGc/ohquuDbU20mnl99C2mi2pIPkFPXdfkOrbzDI9CNoXt RmSZe32dH0kRiPin406xraxOyQ2gihNtTVQ2uDvvDDPKpnHka7LtcIqyP+06kK0n c1lPcnDqEwlrto4= -----END CERTIFICATE-----Generated at Sun Dec 7 02:00:36 2025 by rpki-client