This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa File: 3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa (raw, json) Hash identifier: W3tGjY/+pdMldJKze6nq/gkdxOZlRwyERFcu3OEqvts= Subject key identifier: 31:CA:9E:63:3A:FD:11:CB:42:CE:72:7E:A0:AB:53:5B:63:8F:E4:92 Certificate issuer: /CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42 Certificate serial: 5973C93A5F044662980B7BF97101559BE5ED4C0F Authority key identifier: 3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer Subject info access: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa Signing time: Wed 26 Nov 2025 17:27:44 +0000 ROA not before: Wed 26 Nov 2025 17:22:44 +0000 ROA not after: Wed 25 Nov 2026 17:27:44 +0000 asID: 52818 IP address blocks: 191.240.196.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 20:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:73:c9:3a:5f:04:46:62:98:0b:7b:f9:71:01:55:9b:e5:ed:4c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42 Validity Not Before: Nov 26 17:22:44 2025 GMT Not After : Nov 25 17:27:44 2026 GMT Subject: CN=31CA9E633AFD11CB42CE727EA0AB535B638FE492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:3e:61:ff:64:26:53:b4:2b:dd:8f:6f:2f: fc:ea:1b:d1:59:ce:84:00:e0:0e:29:42:62:86:5b: 2b:21:c1:09:9e:55:9c:a5:78:18:9d:3b:5c:96:aa: ad:71:10:fc:1c:88:52:49:3f:0f:b0:b2:d6:d2:24: 9e:e1:11:5a:4f:86:32:2b:63:6e:2e:cd:7b:b3:8e: 1f:44:7a:cf:c5:41:40:29:42:3e:dc:66:9a:15:29: 28:9d:67:98:70:a0:2f:45:a6:59:c9:70:05:b7:5f: f1:c7:34:1c:d3:be:81:89:f7:9b:43:3f:c9:e4:4d: 90:99:80:96:21:d1:3b:c7:e0:7b:7c:98:27:7b:31: 08:3f:a7:c1:08:34:d3:c3:ca:e5:6c:11:33:0f:2a: 4d:38:29:a9:e3:10:d9:7b:f7:84:9e:2c:ac:02:6f: f1:07:2f:14:4e:58:9a:de:ae:ef:b9:ba:89:b8:59: 89:7b:09:54:27:9f:cc:77:0b:dc:8b:fc:7b:70:ea: 7d:f4:dc:a7:39:3c:1a:84:ea:09:21:ff:78:60:e9: 30:13:45:2f:fc:e0:40:b3:1f:ef:80:ca:3a:5b:df: 8f:cb:7a:c3:19:74:f7:e9:09:4d:fa:f4:6d:43:0e: c6:48:05:5a:ad:74:66:b2:73:52:d0:2a:8c:92:69: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CA:9E:63:3A:FD:11:CB:42:CE:72:7E:A0:AB:53:5B:63:8F:E4:92 X509v3 Authority Key Identifier: keyid:3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.240.196.0/22 Signature Algorithm: sha256WithRSAEncryption a0:36:ce:fc:39:2c:90:c3:f2:6a:1e:38:9c:c4:42:7a:6e:88: 4c:78:b3:b2:9f:8e:80:ac:b8:ee:5d:33:b1:47:d5:1b:d0:7b: 8d:60:cf:78:a1:6e:ed:0c:5a:c9:36:c6:5b:11:07:27:4e:fd: 81:f4:d2:8f:88:9f:8b:f4:5a:b5:f4:e5:ce:fe:4e:be:fb:1c: 7a:29:3a:ec:75:ff:b8:aa:64:6f:e5:99:e9:8e:3b:7e:e8:84: ce:a4:80:a9:d5:61:32:83:be:7f:e5:ea:c6:8c:91:91:3e:d0: 7a:a2:ac:1c:fc:3f:58:90:f6:7a:b5:0d:9c:28:0f:17:95:f6: 7e:21:1f:e7:6b:b2:a5:89:4d:19:d9:e7:5c:7b:01:3b:a2:47: 84:8c:c6:e0:ca:ae:83:67:2d:fe:61:01:37:e0:99:d0:bc:0c: 2d:94:da:0b:27:81:82:f2:b0:9b:e1:dd:6f:2e:48:e8:98:3f: 7a:c5:20:d4:a5:fd:f6:13:35:9a:b4:71:15:a3:63:d3:79:2f: cb:40:0a:8e:ea:c2:77:e7:cd:bc:ec:4a:fd:d2:22:37:07:eb: d1:09:65:19:61:0a:2d:6d:17:70:9f:f3:8b:69:21:0c:c0:36: 1b:ab:d5:4f:a6:3c:62:d8:9e:df:1f:7f:4c:cc:cd:6b:ac:33: b3:c5:ff:41 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUWXPJOl8ERmKYC3v5cQFVm+XtTA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyODdDNjNEQkIzRUQwRDA5RURCNzBBMzQ5M0IwMkQ2 Q0ZERkI0MjAeFw0yNTExMjYxNzIyNDRaFw0yNjExMjUxNzI3NDRaMDMxMTAvBgNV BAMTKDMxQ0E5RTYzM0FGRDExQ0I0MkNFNzI3RUEwQUI1MzVCNjM4RkU0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabz5h/2QmU7Qr3Y9vL/zqG9FZ zoQA4A4pQmKGWyshwQmeVZyleBidO1yWqq1xEPwciFJJPw+wstbSJJ7hEVpPhjIr Y24uzXuzjh9Ees/FQUApQj7cZpoVKSidZ5hwoC9FplnJcAW3X/HHNBzTvoGJ95tD P8nkTZCZgJYh0TvH4Ht8mCd7MQg/p8EINNPDyuVsETMPKk04KanjENl794SeLKwC b/EHLxROWJreru+5uom4WYl7CVQnn8x3C9yL/Htw6n303Kc5PBqE6gkh/3hg6TAT RS/84ECzH++Ayjpb34/LesMZdPfpCU369G1DDsZIBVqtdGayc1LQKoySacWfAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUMcqeYzr9EctCznJ+oKtTW2OP5JIwHwYDVR0j BBgwFoAUPih8Y9uz7Q0J7bcKNJOwLWz9+0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2Ey TXIvMC8zRTI4N0M2M0RCQjNFRDBEMDlFREI3MEEzNDkzQjAyRDZDRkRGQjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjg3QzYzREJCM0VEMEQw OUVEQjcwQTM0OTNCMDJENkNGREZCNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hoWU01ajdZOFg3WGFvUTZzUG1yTHRGU1RaWWlaRXBQZHN6OUV6ZmNhMk1yLzAv MzEzOTMxMmUzMjM0MzAyZTMxMzkzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1 MzIzODMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAK/8MQwDQYJKoZIhvcNAQELBQADggEBAKA2zvw5 LJDD8moeOJzEQnpuiEx4s7KfjoCsuO5dM7FH1RvQe41gz3ihbu0MWsk2xlsRBydO /YH00o+In4v0WrX05c7+Tr77HHopOux1/7iqZG/lmemOO37ohM6kgKnVYTKDvn/l 6saMkZE+0HqirBz8P1iQ9nq1DZwoDxeV9n4hH+drsqWJTRnZ51x7ATuiR4SMxuDK roNnLf5hATfgmdC8DC2U2gsngYLysJvh3W8uSOiYP3rFINSl/fYTNZq0cRWjY9N5 L8tACo7qwnfnzbzsSv3SIjcH69EJZRlhCi1tF3Cf84tpIQzANhur1U+mPGLYnt8f f0zMzWusM7PF/0E= -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:23 2025 by rpki-client