This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e38322e37322e302f32322d3332203d3e20323632373733.roa File: 3137302e38322e37322e302f32322d3332203d3e20323632373733.roa (raw, json) Hash identifier: maaWvDVxA3U8J3gPyoHfSyjpFcGyUqXx6r93sDKFywk= Subject key identifier: 40:99:E8:D9:57:C9:57:FE:33:58:D7:67:A4:DA:01:7D:2D:0F:E6:C2 Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B Certificate serial: 5C2B1ED9DAAB47E04F33CE6D31F1BAD67610EB0C Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e38322e37322e302f32322d3332203d3e20323632373733.roa Signing time: Fri 28 Nov 2025 18:08:21 +0000 ROA not before: Fri 28 Nov 2025 18:03:21 +0000 ROA not after: Fri 27 Nov 2026 18:08:21 +0000 asID: 262773 IP address blocks: 170.82.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2b:1e:d9:da:ab:47:e0:4f:33:ce:6d:31:f1:ba:d6:76:10:eb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B Validity Not Before: Nov 28 18:03:21 2025 GMT Not After : Nov 27 18:08:21 2026 GMT Subject: CN=4099E8D957C957FE3358D767A4DA017D2D0FE6C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:49:41:db:40:f9:73:fc:a1:5f:58:b5:f0: 3d:cb:18:da:08:9a:26:a5:88:08:06:22:16:06:ca: bf:ea:b1:98:53:fc:1d:92:bb:aa:1e:26:c8:49:84: 54:22:bf:a2:91:c2:5c:51:46:b5:b1:0e:03:bb:24: 1d:a1:63:21:4f:bd:90:06:a7:ab:82:49:37:48:14: c6:66:ff:bf:0b:3e:37:85:1b:b4:89:9d:be:1c:ca: e4:13:c5:ee:01:e2:92:a9:0f:66:fa:07:3f:33:fb: 2c:ac:7c:82:c8:67:b7:75:6b:a2:51:59:ee:4f:74: aa:8a:7f:97:ef:c6:9c:eb:4e:c1:e4:03:74:37:ec: e0:c1:0a:94:ad:32:31:15:46:32:de:86:d8:44:b6: c8:c3:f2:87:29:d1:0d:5c:96:9f:b8:81:38:29:e1: c4:4c:df:a2:e7:33:9f:61:0f:91:30:58:ca:be:58: a4:b5:04:9d:a6:9b:17:80:eb:b8:58:66:1c:08:0d: 72:b8:9b:13:f6:5d:b0:f3:68:85:4f:97:66:b3:b4: ae:ee:ab:55:9a:76:54:6b:79:2a:28:cb:2c:f9:6a: 96:79:b4:e0:88:2f:ca:e2:15:ea:be:c8:0c:49:5a: 77:c1:9d:77:bc:d5:e5:a9:0d:4d:1f:35:72:fe:db: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:99:E8:D9:57:C9:57:FE:33:58:D7:67:A4:DA:01:7D:2D:0F:E6:C2 X509v3 Authority Key Identifier: keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e38322e37322e302f32322d3332203d3e20323632373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.72.0/22 Signature Algorithm: sha256WithRSAEncryption cb:c8:f6:18:88:87:56:a4:c0:70:23:85:0f:a4:76:92:2d:5e: bd:03:38:29:5d:1d:81:f3:ed:e8:18:ca:56:b7:76:01:c3:89: 12:a1:9c:09:14:f6:93:31:f9:f8:48:bd:02:22:1a:65:fd:2e: 25:18:11:21:d6:98:8d:4a:56:52:4c:d6:fe:72:ae:a8:8a:b6: 1e:df:e9:f2:85:24:c5:d6:9f:4e:f2:6c:46:64:f9:35:2d:3a: 69:53:d5:3f:37:2b:f4:10:ab:a2:33:b3:d7:fd:d5:97:28:ba: d9:5d:b2:6e:a2:d5:de:94:01:16:4e:a1:35:d7:89:58:af:76: a3:11:b8:c3:c3:e5:f6:17:ad:81:ea:af:ef:52:2a:a5:2b:d3: 89:ba:41:4d:5d:04:bb:0a:47:65:d4:65:cc:d5:13:7f:73:e9: 64:d7:45:5a:0c:e4:86:a9:5d:7c:2b:a9:91:c8:93:38:6b:0a: 73:4e:ff:fb:f0:2c:8a:b0:6c:51:a8:e2:a8:09:4b:65:2c:96: 11:e8:7d:e7:dc:6c:fe:83:01:60:06:3b:dd:7f:38:ce:e1:b4: 85:bc:b4:79:c4:94:ef:94:d8:bf:67:5d:98:27:9a:5c:27:ee: 0a:2f:fb:1c:92:9c:51:bd:5f:79:72:fe:34:1b:76:58:02:94: 29:20:81:ac -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXCse2dqrR+BPM85tMfG61nYQ6wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1 NERCMjY2QjAeFw0yNTExMjgxODAzMjFaFw0yNjExMjcxODA4MjFaMDMxMTAvBgNV BAMTKDQwOTlFOEQ5NTdDOTU3RkUzMzU4RDc2N0E0REEwMTdEMkQwRkU2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznUlB20D5c/yhX1i18D3LGNoI mialiAgGIhYGyr/qsZhT/B2Su6oeJshJhFQiv6KRwlxRRrWxDgO7JB2hYyFPvZAG p6uCSTdIFMZm/78LPjeFG7SJnb4cyuQTxe4B4pKpD2b6Bz8z+yysfILIZ7d1a6JR We5PdKqKf5fvxpzrTsHkA3Q37ODBCpStMjEVRjLehthEtsjD8ocp0Q1clp+4gTgp 4cRM36LnM59hD5EwWMq+WKS1BJ2mmxeA67hYZhwIDXK4mxP2XbDzaIVPl2aztK7u q1WadlRreSooyyz5apZ5tOCIL8riFeq+yAxJWnfBnXe81eWpDU0fNXL+26anAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUQJno2VfJV/4zWNdnpNoBfS0P5sIwHwYDVR0j BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2 MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv MzEzNzMwMmUzODMyMmUzNzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMy MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqlJIMA0GCSqGSIb3DQEBCwUAA4IBAQDLyPYYiIdW pMBwI4UPpHaSLV69AzgpXR2B8+3oGMpWt3YBw4kSoZwJFPaTMfn4SL0CIhpl/S4l GBEh1piNSlZSTNb+cq6oirYe3+nyhSTF1p9O8mxGZPk1LTppU9U/Nyv0EKuiM7PX /dWXKLrZXbJuotXelAEWTqE114lYr3ajEbjDw+X2F62B6q/vUiqlK9OJukFNXQS7 Ckdl1GXM1RN/c+lk10VaDOSGqV18K6mRyJM4awpzTv/78CyKsGxRqOKoCUtlLJYR 6H3n3Gz+gwFgBjvdfzjO4bSFvLR5xJTvlNi/Z12YJ5pcJ+4KL/sckpxRvV95cv40 G3ZYApQpIIGs -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:42 2025 by rpki-client