This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa File: 3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa (raw, json) Hash identifier: F4YhNoG7E6IcIRGjcBNDY1sB2guTnHkDoaPo1f5RKJk= Subject key identifier: 33:82:8A:04:39:51:EC:4B:51:CE:F7:C5:22:87:42:D1:25:2A:85:2A Certificate issuer: /CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Certificate serial: 3C11A0B9866BE0DDE0AD3C596EF768DD3D7448AA Authority key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa Signing time: Mon 01 Dec 2025 20:10:46 +0000 ROA not before: Mon 01 Dec 2025 20:05:46 +0000 ROA not after: Mon 30 Nov 2026 20:10:46 +0000 asID: 266032 IP address blocks: 170.245.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:11:a0:b9:86:6b:e0:dd:e0:ad:3c:59:6e:f7:68:dd:3d:74:48:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Validity Not Before: Dec 1 20:05:46 2025 GMT Not After : Nov 30 20:10:46 2026 GMT Subject: CN=33828A043951EC4B51CEF7C5228742D1252A852A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:00:fd:d3:d4:e5:d9:2a:47:38:d4:fe:8b: 4d:82:c0:85:16:6f:11:27:46:0b:de:d1:0e:81:11: c5:e2:b0:92:25:a7:55:84:02:e9:c2:1c:34:45:1e: f0:fb:41:c8:b2:9d:94:fe:34:1b:5d:05:7c:e4:e3: f3:47:4e:4e:40:7e:4b:ee:e0:45:7b:fa:e2:7c:1e: e1:34:8e:a9:b1:83:b3:ce:ac:b6:71:ac:45:c0:f4: 38:51:4b:d7:dc:91:91:2b:7e:fc:9d:2d:07:c8:71: 02:61:24:ba:d1:77:d7:ac:f7:b6:83:c4:9a:8d:e4: aa:31:2c:15:59:27:ec:22:d7:a8:45:46:e1:88:da: 73:71:01:bc:6d:8a:da:b0:a9:37:3e:7c:a3:30:56: 9a:43:3e:d9:48:dd:2b:e5:d3:6c:c5:80:19:d7:80: 2a:8d:b9:97:cb:2f:54:30:8b:55:52:f8:63:80:c2: a6:1d:00:a4:f8:9f:c4:85:17:46:dc:e0:8b:24:c0: 12:cf:a5:24:7c:8b:9b:1a:85:18:d2:57:fc:1b:a5: b8:2e:13:9d:1c:d8:3c:ee:3b:98:2a:e0:0c:b9:87: 98:8e:89:e7:5b:ba:f5:9a:c0:15:a3:3d:4b:b0:29: 74:13:59:32:19:52:f4:00:d8:9b:40:df:47:15:99: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:82:8A:04:39:51:EC:4B:51:CE:F7:C5:22:87:42:D1:25:2A:85:2A X509v3 Authority Key Identifier: keyid:CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.248.0/23 Signature Algorithm: sha256WithRSAEncryption 82:f4:15:e7:a7:90:10:74:31:d9:44:13:37:bb:f8:44:32:51: 1d:fa:4a:d3:46:7f:2f:de:25:6c:c5:74:81:c6:ba:f2:85:91: a0:64:5a:7a:da:4a:b1:98:75:61:78:61:72:8f:a0:1b:7c:e4: 87:eb:a1:af:11:2b:31:2a:6b:0b:db:04:9e:48:ab:f9:63:11: a6:2a:b7:83:44:96:14:3f:ae:bf:62:2d:00:fd:7e:0f:d9:3e: 22:c3:14:b9:0c:34:51:1e:0f:e2:f3:91:20:ca:7d:d3:a1:35: 59:a0:a0:c2:10:7e:b1:44:d2:1a:ff:45:de:70:6e:a4:0b:aa: d8:a1:60:d7:3e:30:58:f1:2c:ed:15:21:2e:0b:82:ea:50:25: 70:3b:63:f1:d0:1f:6e:2b:1d:ac:75:83:5b:f6:37:71:d2:7d: e5:0f:f7:a3:8e:62:ee:56:c2:b9:06:10:69:c9:ea:17:ca:6b: a1:d3:89:f9:6e:90:ac:75:b0:24:d4:69:71:56:43:51:6d:82: e4:56:e4:cb:83:11:ba:e3:92:fb:b0:87:c5:c9:57:b3:17:e8: e7:ad:35:68:1e:b7:98:18:5f:a4:9f:d4:29:51:38:91:bc:2c: ae:8d:cb:f0:c7:2c:c1:9f:f3:50:8b:d4:52:a4:c5:6f:f5:2a: 27:70:7a:8b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUPBGguYZr4N3grTxZbvdo3T10SKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDc2NjY5OUJCQjZCNTFDQjkzNEZENEY4RTg2RUI4 MURBNkE5OTAeFw0yNTEyMDEyMDA1NDZaFw0yNjExMzAyMDEwNDZaMDMxMTAvBgNV BAMTKDMzODI4QTA0Mzk1MUVDNEI1MUNFRjdDNTIyODc0MkQxMjUyQTg1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jwD909Tl2SpHONT+i02CwIUW bxEnRgve0Q6BEcXisJIlp1WEAunCHDRFHvD7QciynZT+NBtdBXzk4/NHTk5Afkvu 4EV7+uJ8HuE0jqmxg7POrLZxrEXA9DhRS9fckZErfvydLQfIcQJhJLrRd9es97aD xJqN5KoxLBVZJ+wi16hFRuGI2nNxAbxtitqwqTc+fKMwVppDPtlI3Svl02zFgBnX gCqNuZfLL1Qwi1VS+GOAwqYdAKT4n8SFF0bc4IskwBLPpSR8i5sahRjSV/wbpbgu E50c2DzuO5gq4Ay5h5iOiedbuvWawBWjPUuwKXQTWTIZUvQA2JtA30cVmRuRAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUM4KKBDlR7EtRzvfFIodC0SUqhSowHwYDVR0j BBgwFoAUzaB2Zpm7trUcuTT9T46G64HaapkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3 azcvMC9DREEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQTA3NjY2OTlCQkI2QjUx Q0I5MzRGRDRGOEU4NkVCODFEQTZBOTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hVS0praDZMc3Z5a2VwdG1CcXFVcGpBWWtaQTlvMm0xQXpLVDlIdzJ2d2s3LzAv MzEzNzMwMmUzMjM0MzUyZTMyMzQzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy MzYzNjMwMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar1+DANBgkqhkiG9w0BAQsFAAOCAQEAgvQV 56eQEHQx2UQTN7v4RDJRHfpK00Z/L94lbMV0gca68oWRoGRaetpKsZh1YXhhco+g G3zkh+uhrxErMSprC9sEnkir+WMRpiq3g0SWFD+uv2ItAP1+D9k+IsMUuQw0UR4P 4vORIMp906E1WaCgwhB+sUTSGv9F3nBupAuq2KFg1z4wWPEs7RUhLguC6lAlcDtj 8dAfbisdrHWDW/Y3cdJ95Q/3o45i7lbCuQYQacnqF8prodOJ+W6QrHWwJNRpcVZD UW2C5Fbky4MRuuOS+7CHxclXsxfo5601aB63mBhfpJ/UKVE4kbwsro3L8McswZ/z UIvUUqTFb/UqJ3B6iw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:23 2025 by rpki-client