This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa File: 3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa (raw, json) Hash identifier: 8dw0DdaHzzrONMaMchvnz81RqzlNAHK7paZGtaUXsTU= Subject key identifier: 97:A9:9B:83:66:8D:4C:78:DF:E6:08:26:1F:0B:F1:67:2B:FF:65:85 Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B Certificate serial: 7876A3BC65A665BA6FD4E0B09F0565F6EF1038C4 Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa Signing time: Fri 28 Nov 2025 18:08:21 +0000 ROA not before: Fri 28 Nov 2025 18:03:21 +0000 ROA not after: Fri 27 Nov 2026 18:08:21 +0000 asID: 262773 IP address blocks: 138.94.156.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:76:a3:bc:65:a6:65:ba:6f:d4:e0:b0:9f:05:65:f6:ef:10:38:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B Validity Not Before: Nov 28 18:03:21 2025 GMT Not After : Nov 27 18:08:21 2026 GMT Subject: CN=97A99B83668D4C78DFE608261F0BF1672BFF6585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:43:d0:95:10:3a:03:af:b2:a8:2d:9f:b5:ba: e0:3c:a5:a4:37:89:ef:f2:57:66:25:21:98:0c:86: 47:57:5d:a9:dc:7d:4d:ca:4e:b9:7c:df:50:7b:ce: 41:b8:c6:71:50:4d:ed:2b:c4:a2:9e:6f:db:ab:0e: ab:66:fc:0c:7d:8f:d3:8a:4e:7d:45:1a:98:fd:f1: 65:6f:71:a6:ae:49:e7:01:a0:a3:c0:31:9f:2e:9f: 22:2d:a1:90:d3:11:c6:7b:cb:95:2f:23:4d:bd:bb: 50:47:92:97:7f:17:f0:dd:2e:b8:0f:67:f2:7f:ea: 27:59:5d:0a:68:0a:09:3c:a4:fb:a5:31:c2:ae:20: f1:95:41:9a:25:86:62:46:29:65:97:a5:a8:f3:b9: 16:b6:43:67:73:12:65:25:4f:d2:b0:e8:91:45:23: 12:52:df:76:f1:d0:6d:a3:75:b2:5a:25:11:e9:b7: c3:49:46:88:49:71:b5:bd:c1:ce:fa:f9:be:21:d5: 78:69:30:3b:3c:1e:4e:49:0b:1e:7b:66:d9:08:0d: 7b:54:87:cf:dc:ea:55:35:01:9b:c1:8a:e9:43:05: c3:1e:a5:37:3a:a2:0e:70:72:c4:12:58:d3:34:47: 0f:8a:84:24:5c:bb:3a:3e:09:48:41:e1:fc:d9:40: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A9:9B:83:66:8D:4C:78:DF:E6:08:26:1F:0B:F1:67:2B:FF:65:85 X509v3 Authority Key Identifier: keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.156.0/22 Signature Algorithm: sha256WithRSAEncryption 26:b0:5d:3b:f5:9c:89:97:58:95:9b:9b:4e:14:3a:bc:3b:81: cf:fe:4c:09:5d:71:4c:a7:65:ee:27:74:f8:a2:03:77:7c:78: 74:d0:f1:09:4d:52:83:41:3e:a5:71:52:de:9b:34:4a:a0:0f: b2:67:54:30:d7:01:b0:e0:9b:73:f2:d3:dd:6b:24:f8:f0:db: b5:b4:c1:4c:fc:2c:19:a6:62:58:41:ae:e2:43:90:3e:b3:19: 2c:e9:62:cf:06:85:d4:68:65:67:a4:1c:5d:4c:03:72:00:c2: 01:4f:55:de:f7:b2:56:e2:4a:3d:4a:54:ad:e1:f7:bf:09:6e: 4b:93:4d:5f:c2:bd:16:2e:9f:ad:af:f9:7e:67:e0:90:c5:4f: 4e:f6:6e:08:4e:32:5d:30:31:97:d3:aa:0f:fb:c3:12:02:b8: 0c:d8:00:b1:29:35:62:11:13:c2:92:b4:02:f2:73:ef:44:e2: 79:7f:a8:9f:3e:89:23:fb:0e:5d:2d:7a:21:57:32:90:e3:05: 77:b1:0a:25:2e:46:39:4e:59:31:f4:11:c5:28:10:2a:7c:7b: 6a:ed:20:de:7d:98:63:d9:ba:4e:03:00:77:0c:f2:aa:d3:fb: fc:4a:28:cb:30:08:ee:6f:9e:6c:36:5a:95:18:30:d9:c1:2d: 69:c7:0b:0e -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUeHajvGWmZbpv1OCwnwVl9u8QOMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1 NERCMjY2QjAeFw0yNTExMjgxODAzMjFaFw0yNjExMjcxODA4MjFaMDMxMTAvBgNV BAMTKDk3QTk5QjgzNjY4RDRDNzhERkU2MDgyNjFGMEJGMTY3MkJGRjY1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRQ9CVEDoDr7KoLZ+1uuA8paQ3 ie/yV2YlIZgMhkdXXancfU3KTrl831B7zkG4xnFQTe0rxKKeb9urDqtm/Ax9j9OK Tn1FGpj98WVvcaauSecBoKPAMZ8unyItoZDTEcZ7y5UvI029u1BHkpd/F/DdLrgP Z/J/6idZXQpoCgk8pPulMcKuIPGVQZolhmJGKWWXpajzuRa2Q2dzEmUlT9Kw6JFF IxJS33bx0G2jdbJaJRHpt8NJRohJcbW9wc76+b4h1XhpMDs8Hk5JCx57ZtkIDXtU h8/c6lU1AZvBiulDBcMepTc6og5wcsQSWNM0Rw+KhCRcuzo+CUhB4fzZQEw1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUl6mbg2aNTHjf5ggmHwvxZyv/ZYUwHwYDVR0j BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2 MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv MzEzMzM4MmUzOTM0MmUzMTM1MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKXpwwDQYJKoZIhvcNAQELBQADggEBACawXTv1 nImXWJWbm04UOrw7gc/+TAldcUynZe4ndPiiA3d8eHTQ8QlNUoNBPqVxUt6bNEqg D7JnVDDXAbDgm3Py091rJPjw27W0wUz8LBmmYlhBruJDkD6zGSzpYs8GhdRoZWek HF1MA3IAwgFPVd73slbiSj1KVK3h978JbkuTTV/CvRYun62v+X5n4JDFT072bghO Ml0wMZfTqg/7wxICuAzYALEpNWIRE8KStALyc+9E4nl/qJ8+iSP7Dl0teiFXMpDj BXexCiUuRjlOWTH0EcUoECp8e2rtIN59mGPZuk4DAHcM8qrT+/xKKMswCO5vnmw2 WpUYMNnBLWnHCw4= -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:01 2025 by rpki-client