This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa File: 3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa (raw, json) Hash identifier: RtiMjhc0R/xV0KBiKmXsvSv0eYHtVfNyftSRhy117C8= Subject key identifier: CA:68:DD:B5:B5:43:92:50:42:D1:11:7B:6C:B2:D8:0B:57:BB:F1:6B Certificate issuer: /CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Certificate serial: 2458B2017EF044C5549EBB639D7E0F0C34E07E98 Authority key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa Signing time: Mon 01 Dec 2025 20:10:59 +0000 ROA not before: Mon 01 Dec 2025 20:05:59 +0000 ROA not after: Mon 30 Nov 2026 20:10:59 +0000 asID: 266032 IP address blocks: 170.245.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:58:b2:01:7e:f0:44:c5:54:9e:bb:63:9d:7e:0f:0c:34:e0:7e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Validity Not Before: Dec 1 20:05:59 2025 GMT Not After : Nov 30 20:10:59 2026 GMT Subject: CN=CA68DDB5B543925042D1117B6CB2D80B57BBF16B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:c3:5e:28:e8:4a:87:66:3b:c4:5f:68:4d: f1:01:34:c9:63:e9:42:0d:16:24:8e:a0:7f:07:80: db:40:a4:df:6e:fb:59:bd:ab:c2:a0:c6:08:8c:ef: 6e:d5:39:f3:cc:96:9a:23:aa:7b:35:3a:34:ff:11: b6:83:15:da:cd:a2:06:67:6c:ca:63:03:ec:2f:87: 7d:3e:25:af:8c:52:f0:4f:e2:6d:bc:a7:92:a7:5c: e7:b5:5f:25:00:a7:97:b7:e0:a6:65:13:67:90:65: ad:17:e4:34:e0:55:e0:13:da:91:d8:f6:73:2e:a8: 8c:c9:6c:9a:8b:37:3a:2b:e1:45:75:b5:71:57:4f: 92:0d:c9:4e:f0:99:06:96:dc:02:7e:bd:eb:dc:da: 38:ba:a0:92:bd:f2:53:ca:ae:b4:c0:4e:e4:e3:db: 84:d8:56:12:a4:36:de:a8:75:7b:43:42:d0:2c:cc: 51:98:f9:bf:b7:d1:1d:c6:23:b6:e3:a9:2f:1e:e1: 98:5f:74:f3:9e:02:78:0a:fd:39:bd:5c:da:28:bd: 2f:68:d9:83:f7:21:21:5c:c2:cf:a1:16:36:e7:96: b1:ca:01:d8:86:66:f0:79:c3:25:cc:43:a0:7e:d3: 68:0b:30:0e:36:09:31:86:6d:09:39:e8:e2:c7:f2: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:DD:B5:B5:43:92:50:42:D1:11:7B:6C:B2:D8:0B:57:BB:F1:6B X509v3 Authority Key Identifier: keyid:CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.250.0/24 Signature Algorithm: sha256WithRSAEncryption 89:d9:bd:e0:b7:e1:b2:ce:da:c2:29:66:0f:0a:2e:0c:a4:98: 0c:53:25:05:63:67:a4:5e:11:72:d5:00:e7:24:78:27:64:68: c1:6a:38:e5:81:03:ca:9f:b5:a2:31:46:ba:2f:b4:81:77:a1: ad:32:4b:2f:6c:7c:be:4e:d8:48:1e:a4:2f:5a:59:4d:8e:56: ef:58:0f:74:54:d1:fa:f5:2b:47:08:cc:a6:53:87:bd:9c:6e: c9:8f:88:28:a2:70:8c:d8:b7:c3:35:a6:13:be:ae:90:b6:10: be:ef:27:af:8a:88:50:db:4d:be:65:d8:c9:1c:49:cd:3a:bd: c6:28:e8:bc:f5:ab:21:bd:7f:47:74:7e:c3:fb:e7:28:de:fa: a2:3f:e6:3a:b9:2a:36:40:dd:f3:fa:c6:4d:a8:ba:65:59:1c: a5:5f:48:3a:99:34:03:18:38:67:a5:43:e7:70:25:c5:84:3e: 9a:00:22:79:38:9f:cc:6f:58:5f:00:d5:39:44:98:d4:9f:e8: 8c:b8:1e:45:0d:ec:2d:33:37:2b:ad:67:a4:5a:34:8b:1d:6a: 78:8c:d0:d1:d8:c7:a7:02:c8:10:c6:ee:36:4e:95:b8:29:56: 89:4f:3d:42:3c:23:24:65:30:3d:4a:6e:ea:f4:95:4a:4c:5b: d1:eb:a8:73 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUJFiyAX7wRMVUnrtjnX4PDDTgfpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDc2NjY5OUJCQjZCNTFDQjkzNEZENEY4RTg2RUI4 MURBNkE5OTAeFw0yNTEyMDEyMDA1NTlaFw0yNjExMzAyMDEwNTlaMDMxMTAvBgNV BAMTKENBNjhEREI1QjU0MzkyNTA0MkQxMTE3QjZDQjJEODBCNTdCQkYxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdsNeKOhKh2Y7xF9oTfEBNMlj 6UINFiSOoH8HgNtApN9u+1m9q8KgxgiM727VOfPMlpojqns1OjT/EbaDFdrNogZn bMpjA+wvh30+Ja+MUvBP4m28p5KnXOe1XyUAp5e34KZlE2eQZa0X5DTgVeAT2pHY 9nMuqIzJbJqLNzor4UV1tXFXT5INyU7wmQaW3AJ+vevc2ji6oJK98lPKrrTATuTj 24TYVhKkNt6odXtDQtAszFGY+b+30R3GI7bjqS8e4ZhfdPOeAngK/Tm9XNoovS9o 2YP3ISFcws+hFjbnlrHKAdiGZvB5wyXMQ6B+02gLMA42CTGGbQk56OLH8nQTAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUymjdtbVDklBC0RF7bLLYC1e78WswHwYDVR0j BBgwFoAUzaB2Zpm7trUcuTT9T46G64HaapkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3 azcvMC9DREEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQTA3NjY2OTlCQkI2QjUx Q0I5MzRGRDRGOEU4NkVCODFEQTZBOTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hVS0praDZMc3Z5a2VwdG1CcXFVcGpBWWtaQTlvMm0xQXpLVDlIdzJ2d2s3LzAv MzEzNzMwMmUzMjM0MzUyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNjMwMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1+jANBgkqhkiG9w0BAQsFAAOCAQEAidm9 4Lfhss7awilmDwouDKSYDFMlBWNnpF4RctUA5yR4J2RowWo45YEDyp+1ojFGui+0 gXehrTJLL2x8vk7YSB6kL1pZTY5W71gPdFTR+vUrRwjMplOHvZxuyY+IKKJwjNi3 wzWmE76ukLYQvu8nr4qIUNtNvmXYyRxJzTq9xijovPWrIb1/R3R+w/vnKN76oj/m OrkqNkDd8/rGTai6ZVkcpV9IOpk0Axg4Z6VD53AlxYQ+mgAieTifzG9YXwDVOUSY 1J/ojLgeRQ3sLTM3K61npFo0ix1qeIzQ0djHpwLIEMbuNk6VuClWiU89QjwjJGUw PUpu6vSVSkxb0euocw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:00:20 2025 by rpki-client