This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa File: 3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa (raw, json) Hash identifier: qSXhpi5jkfldkXQrU+AHOgUe+NMXk4NMgOqJ4pWavt0= Subject key identifier: 13:DA:E0:BD:92:F8:36:59:AE:AC:7A:04:89:06:28:E6:60:4C:F7:35 Certificate issuer: /CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Certificate serial: 6EAB46CCE5E244F6CE2A45FF4D71D7F95B776CC4 Authority key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa Signing time: Mon 01 Dec 2025 20:11:08 +0000 ROA not before: Mon 01 Dec 2025 20:06:08 +0000 ROA not after: Mon 30 Nov 2026 20:11:08 +0000 asID: 266032 IP address blocks: 170.245.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ab:46:cc:e5:e2:44:f6:ce:2a:45:ff:4d:71:d7:f9:5b:77:6c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Validity Not Before: Dec 1 20:06:08 2025 GMT Not After : Nov 30 20:11:08 2026 GMT Subject: CN=13DAE0BD92F83659AEAC7A04890628E6604CF735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:4a:36:59:53:85:dc:14:2b:73:94:50:0f: 4a:d5:64:a0:ef:7a:c5:07:92:c3:1d:3c:6e:a8:be: 77:a5:fc:fc:d8:bb:b2:76:d8:e8:80:85:ea:58:0a: 0f:b6:61:6a:e4:77:9c:73:54:a7:26:21:8a:b3:0a: 99:b1:ac:d3:d6:90:6e:82:d7:68:df:d4:2c:c5:1e: f1:c7:44:1c:dc:93:c5:a2:3b:61:29:86:b1:51:c4: 1e:00:66:ec:0f:70:dd:74:71:fa:6d:c4:96:d9:6e: d7:d5:91:97:85:12:47:35:02:6a:6f:50:72:c0:f9: 62:1b:0e:16:2f:a2:ed:e1:dc:59:78:d0:e2:63:b7: b5:6e:43:94:da:c2:97:0b:94:7d:be:96:f9:16:67: e6:db:fe:a7:e0:2a:df:8b:a0:79:0b:12:25:98:ca: 83:58:42:56:17:8e:d0:31:6b:3e:17:51:21:52:c8: c0:5a:8e:70:63:c5:05:de:54:3b:08:a6:e9:f6:30: c3:47:c2:0a:40:94:43:24:b2:2e:cd:c4:38:4d:26: 4f:80:e0:bf:f2:35:d7:7d:16:78:36:f4:c3:c5:13: 23:e7:ee:f1:4c:46:9c:6f:99:6a:d7:49:57:81:a8: 84:77:0b:fb:5a:0e:03:88:37:99:c5:4c:bf:8d:85: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DA:E0:BD:92:F8:36:59:AE:AC:7A:04:89:06:28:E6:60:4C:F7:35 X509v3 Authority Key Identifier: keyid:CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.251.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:2d:60:12:5e:20:ac:3e:31:58:b1:9e:3c:fc:b4:6c:b9:4f: fb:4d:05:9f:db:fc:3a:c7:d9:78:c6:bb:09:85:13:5a:a8:79: ea:f0:10:5b:52:4c:64:4e:53:57:79:40:af:fe:e3:00:95:e0: a1:55:ac:e2:78:c1:56:35:c0:a9:79:98:cf:6e:80:82:8e:8e: 77:04:e4:f5:33:e5:bd:7d:82:38:68:02:f9:a5:61:fc:c9:7c: c7:ee:29:36:60:ce:30:95:e1:36:5b:15:92:73:6a:dc:2a:26: 22:e8:f5:81:88:ef:08:09:6e:21:9b:be:b1:83:b3:60:7c:e2: ff:d6:8d:77:02:52:e4:48:b0:a0:3e:89:89:b9:6e:0f:2a:89: 98:67:8f:54:e0:d0:cd:c4:bc:55:4d:b6:85:85:78:42:32:a3: 76:52:b6:c1:47:e1:51:09:4a:69:ee:bb:c8:92:6e:2e:9c:3b: 69:8a:6e:9b:38:85:d3:76:e3:f8:69:05:01:10:4f:b3:fc:da: 80:98:ca:6a:05:b6:f8:36:41:3a:1f:89:e2:3e:d4:36:8e:b0: d8:08:e2:83:d4:e8:38:cc:3c:bf:48:e0:3e:0e:06:c9:6a:21: 3e:27:c5:02:58:78:79:b2:d3:1f:62:ce:c8:e7:7f:cf:62:66: c3:52:fe:05 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUbqtGzOXiRPbOKkX/TXHX+Vt3bMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDc2NjY5OUJCQjZCNTFDQjkzNEZENEY4RTg2RUI4 MURBNkE5OTAeFw0yNTEyMDEyMDA2MDhaFw0yNjExMzAyMDExMDhaMDMxMTAvBgNV BAMTKDEzREFFMEJEOTJGODM2NTlBRUFDN0EwNDg5MDYyOEU2NjA0Q0Y3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6B0o2WVOF3BQrc5RQD0rVZKDv esUHksMdPG6ovnel/PzYu7J22OiAhepYCg+2YWrkd5xzVKcmIYqzCpmxrNPWkG6C 12jf1CzFHvHHRBzck8WiO2EphrFRxB4AZuwPcN10cfptxJbZbtfVkZeFEkc1Ampv UHLA+WIbDhYvou3h3Fl40OJjt7VuQ5TawpcLlH2+lvkWZ+bb/qfgKt+LoHkLEiWY yoNYQlYXjtAxaz4XUSFSyMBajnBjxQXeVDsIpun2MMNHwgpAlEMksi7NxDhNJk+A 4L/yNdd9Fng29MPFEyPn7vFMRpxvmWrXSVeBqIR3C/taDgOIN5nFTL+Nhe41AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUE9rgvZL4NlmurHoEiQYo5mBM9zUwHwYDVR0j BBgwFoAUzaB2Zpm7trUcuTT9T46G64HaapkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3 azcvMC9DREEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQTA3NjY2OTlCQkI2QjUx Q0I5MzRGRDRGOEU4NkVCODFEQTZBOTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hVS0praDZMc3Z5a2VwdG1CcXFVcGpBWWtaQTlvMm0xQXpLVDlIdzJ2d2s3LzAv MzEzNzMwMmUzMjM0MzUyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNjMwMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1+zANBgkqhkiG9w0BAQsFAAOCAQEASy1g El4grD4xWLGePPy0bLlP+00Fn9v8OsfZeMa7CYUTWqh56vAQW1JMZE5TV3lAr/7j AJXgoVWs4njBVjXAqXmYz26Ago6OdwTk9TPlvX2COGgC+aVh/Ml8x+4pNmDOMJXh NlsVknNq3ComIuj1gYjvCAluIZu+sYOzYHzi/9aNdwJS5EiwoD6JibluDyqJmGeP VODQzcS8VU22hYV4QjKjdlK2wUfhUQlKae67yJJuLpw7aYpumziF03bj+GkFARBP s/zagJjKagW2+DZBOh+J4j7UNo6w2Ajig9ToOMw8v0jgPg4GyWohPifFAlh4ebLT H2LOyOd/z2Jmw1L+BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:03:17 2025 by rpki-client