This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e203237303536.roa File: 3138392e38352e3131372e302f32342d3234203d3e203237303536.roa (raw, json) Hash identifier: 7M4PHxGFY4B2Gwb8GvpfO9tOo+yDRj/Wl4uUjFXWU4E= Subject key identifier: E7:AA:95:85:C0:2B:09:33:9E:B4:35:77:C9:BD:8E:2B:D9:38:1D:D3 Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Certificate serial: 2460AD3FE79E965CA104ACF0274A75E709C0BEF0 Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e203237303536.roa Signing time: Thu 13 Nov 2025 02:25:37 +0000 ROA not before: Thu 13 Nov 2025 02:20:37 +0000 ROA not after: Thu 12 Nov 2026 02:25:37 +0000 asID: 27056 IP address blocks: 189.85.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 18:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:60:ad:3f:e7:9e:96:5c:a1:04:ac:f0:27:4a:75:e7:09:c0:be:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Validity Not Before: Nov 13 02:20:37 2025 GMT Not After : Nov 12 02:25:37 2026 GMT Subject: CN=E7AA9585C02B09339EB43577C9BD8E2BD9381DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:e4:43:2e:21:f9:be:48:0e:ac:c7:67:fc: 55:19:75:b5:ad:31:b8:7e:14:f1:af:62:19:33:84: b3:78:b3:f0:20:6b:2b:04:52:c3:ea:95:65:65:75: 8b:f5:a1:66:14:b0:ec:6e:dd:a6:23:ab:64:43:93: 56:c5:b1:56:c0:85:af:5e:a2:9f:d5:36:da:68:09: 8b:e2:24:b7:d4:e1:b1:eb:e9:66:31:08:8e:ce:ca: 9c:19:36:a2:08:5b:0f:e9:1a:c9:0d:e9:5d:98:ce: 6f:98:95:e9:72:5d:17:5c:52:9a:09:5f:10:96:4c: 4b:9a:52:f8:02:8e:d7:68:3d:dc:06:5a:77:74:0d: 22:89:cf:b5:7b:64:1f:d8:b4:c8:25:5f:7e:3f:a1: e7:3b:9e:f3:9e:3f:f6:75:d0:58:7e:1b:8e:e6:67: be:80:04:b9:91:73:88:04:43:04:0d:6a:a9:71:6d: e7:8f:49:75:e4:a2:9a:a6:17:3c:fa:94:a5:4d:90: e2:47:16:0f:ca:da:c7:d7:d6:2e:f3:c3:6f:80:8e: a9:ab:ea:f8:69:6e:06:8f:f0:fa:d7:bd:d3:ec:4f: 4c:46:4d:c2:61:d9:75:55:2b:9f:1a:b7:83:59:7c: 57:e0:ac:ff:63:5e:28:15:9c:d9:77:c4:ca:e1:ca: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AA:95:85:C0:2B:09:33:9E:B4:35:77:C9:BD:8E:2B:D9:38:1D:D3 X509v3 Authority Key Identifier: keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e203237303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.117.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c2:01:04:57:c1:9f:97:19:51:0c:ca:9c:60:8b:3c:9a:62: 0f:a3:4e:24:70:d1:b5:08:15:3f:57:52:b3:b3:fe:da:68:7a: dc:05:21:9f:98:6b:81:0b:b4:b4:cb:1d:8b:60:90:15:52:82: 12:17:62:c0:c6:f1:40:47:09:95:62:cf:b2:41:f5:34:38:96: bb:47:17:53:90:84:85:ec:4b:7b:b9:c9:cd:78:63:bb:74:a9: 9e:13:8b:ac:a1:59:66:7b:2f:b4:d6:e8:84:93:28:d2:62:91: fb:31:20:2a:88:eb:fb:65:c4:f2:a9:e0:1e:0d:02:39:95:fb: 38:06:34:60:23:b7:08:36:7a:6e:fa:a5:a7:a2:75:c6:52:30: 94:14:5c:2a:c6:e8:3c:88:43:a0:70:84:0c:a6:4d:cf:fe:53: ee:ec:b3:f6:a9:ff:aa:89:07:d8:59:fc:46:f7:8d:7a:e6:9b: 0b:b4:34:e2:76:0c:67:41:2a:54:38:dd:16:b9:a4:32:2b:73: 78:1d:8d:23:af:c0:c6:43:0f:ce:de:bf:23:a5:96:06:dc:ea: aa:64:eb:56:10:a4:75:78:84:0b:4e:0b:bc:26:57:1b:4c:62: 7b:aa:67:8c:00:68:7e:46:db:57:f5:0f:b2:87:d3:e3:64:46: 42:43:b6:d7 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUJGCtP+eellyhBKzwJ0p15wnAvvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlF Qjk5MTNEOTAeFw0yNTExMTMwMjIwMzdaFw0yNjExMTIwMjI1MzdaMDMxMTAvBgNV BAMTKEU3QUE5NTg1QzAyQjA5MzM5RUI0MzU3N0M5QkQ4RTJCRDkzODFERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsuRDLiH5vkgOrMdn/FUZdbWt Mbh+FPGvYhkzhLN4s/AgaysEUsPqlWVldYv1oWYUsOxu3aYjq2RDk1bFsVbAha9e op/VNtpoCYviJLfU4bHr6WYxCI7OypwZNqIIWw/pGskN6V2Yzm+YlelyXRdcUpoJ XxCWTEuaUvgCjtdoPdwGWnd0DSKJz7V7ZB/YtMglX34/oec7nvOeP/Z10Fh+G47m Z76ABLmRc4gEQwQNaqlxbeePSXXkopqmFzz6lKVNkOJHFg/K2sfX1i7zw2+Ajqmr 6vhpbgaP8PrXvdPsT0xGTcJh2XVVK58at4NZfFfgrP9jXigVnNl3xMrhytS/AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU56qVhcArCTOetDV3yb2OK9k4HdMwHwYDVR0j BBgwFoAU12rJUlySmfjZ8mhTpSRkGeuZE9kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9SNUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtU LzAvRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlFQjk5MTNEOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENzZBQzk1MjVDOTI5OUY4RDlG MjY4NTNBNTI0NjQxOUVCOTkxM0Q5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S NUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtULzAvMzEz ODM5MmUzODM1MmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz NTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAvVV1MA0GCSqGSIb3DQEBCwUAA4IBAQCBwgEEV8GflxlR DMqcYIs8mmIPo04kcNG1CBU/V1Kzs/7aaHrcBSGfmGuBC7S0yx2LYJAVUoISF2LA xvFARwmVYs+yQfU0OJa7RxdTkISF7Et7ucnNeGO7dKmeE4usoVlmey+01uiEkyjS YpH7MSAqiOv7ZcTyqeAeDQI5lfs4BjRgI7cINnpu+qWnonXGUjCUFFwqxug8iEOg cIQMpk3P/lPu7LP2qf+qiQfYWfxG94165psLtDTidgxnQSpUON0WuaQyK3N4HY0j r8DGQw/O3r8jpZYG3OqqZOtWEKR1eIQLTgu8JlcbTGJ7qmeMAGh+RttX9Q+yh9Pj ZEZCQ7bX -----END CERTIFICATE-----Generated at Thu Dec 18 22:40:35 2025 by rpki-client