This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e203237303536.roa File: 3138392e38352e3131382e302f32332d3233203d3e203237303536.roa (raw, json) Hash identifier: WkRh4q3yCsmxYgDqDCuNGHualbNnJe0+bWfw5u+/ozk= Subject key identifier: 18:33:B1:16:15:BD:91:73:10:D8:B6:E2:50:F3:0F:4D:A7:4D:1A:14 Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Certificate serial: 0935612C2CC64839E8B3506FD3CA9BA90ADE9E78 Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e203237303536.roa Signing time: Thu 13 Nov 2025 02:25:37 +0000 ROA not before: Thu 13 Nov 2025 02:20:37 +0000 ROA not after: Thu 12 Nov 2026 02:25:37 +0000 asID: 27056 IP address blocks: 189.85.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 18:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:35:61:2c:2c:c6:48:39:e8:b3:50:6f:d3:ca:9b:a9:0a:de:9e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Validity Not Before: Nov 13 02:20:37 2025 GMT Not After : Nov 12 02:25:37 2026 GMT Subject: CN=1833B11615BD917310D8B6E250F30F4DA74D1A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:c9:1d:cd:91:fe:77:b2:be:e9:f1:d8:47: 5a:ef:18:0b:6c:42:b8:75:e2:bc:d6:5b:83:e9:20: 63:1b:a0:1f:9e:fd:a6:04:b2:51:ab:68:a2:b1:4d: e1:99:34:6d:bc:6a:24:75:d9:78:cf:93:41:e7:f6: c3:08:4a:16:35:81:9e:60:c6:9c:82:a3:65:76:96: bd:fa:41:0f:35:fa:6c:c0:fa:75:f6:4c:4f:f4:39: e1:3a:78:93:e6:7d:d2:a3:70:3d:b0:22:d1:3a:5e: de:93:bf:ca:23:c4:ed:16:94:35:ee:f8:2d:f3:c8: 91:66:8a:64:e9:03:de:c3:8c:b2:28:e7:32:7e:45: 3b:aa:9e:c0:a4:38:7d:8b:c2:47:c4:16:92:ed:ed: 89:48:98:c5:3b:d5:a1:90:0d:01:4e:f0:7f:52:8b: 78:7f:da:ba:38:44:11:6e:a7:09:7e:89:47:b7:10: 1e:b7:1d:b0:04:d9:bd:60:c4:c0:fc:e9:ad:8a:48: 04:e5:83:cd:3d:10:fb:9e:b2:88:4f:af:ba:73:74: d4:73:a6:16:05:62:67:86:dc:5a:13:3a:cc:e7:c6: 17:29:8b:b8:ac:de:b9:a6:0b:4e:b5:4a:3e:7f:ab: a4:6b:d0:ee:c3:ff:1c:85:86:f6:a9:d6:61:c2:4f: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:33:B1:16:15:BD:91:73:10:D8:B6:E2:50:F3:0F:4D:A7:4D:1A:14 X509v3 Authority Key Identifier: keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e203237303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.118.0/23 Signature Algorithm: sha256WithRSAEncryption a0:48:07:6d:16:60:8f:69:44:d0:28:ad:4c:78:fc:24:46:ac: c5:97:7d:70:64:68:fe:73:8b:d6:01:e2:91:3b:f3:7b:7f:2d: a9:62:b3:de:0d:fc:51:d2:5b:77:ef:45:e1:de:64:ba:11:64: e0:8a:2e:70:05:6d:4e:91:4e:e2:06:f1:b2:9d:cc:aa:5d:26: c7:c7:1b:0b:7d:3d:41:50:b5:86:9f:75:59:e1:eb:19:0f:18: a6:60:ac:89:2e:b8:1b:a0:1a:87:26:20:cc:0f:21:ea:b9:e9: 39:f7:5c:bc:8b:36:dd:90:a7:d3:29:71:c8:2d:cf:37:b6:c9: 35:3a:c1:a0:8c:fe:01:5c:d1:72:47:63:03:ab:72:e6:a1:ac: 96:3c:e1:fd:99:1d:25:55:1f:fe:a4:22:f3:b8:6a:b9:dd:5d: 98:a3:a9:d5:7f:49:36:f1:4e:4b:71:e4:21:99:4c:30:d9:07: 7b:09:42:0e:77:ac:68:1f:ff:cb:00:b9:52:87:6e:78:16:d4: 5d:96:f5:5c:ea:ca:2d:62:91:b0:57:31:9c:98:fc:e0:07:a7: 98:a9:46:b3:a1:d8:b9:b7:f0:46:76:d4:8b:6c:21:3a:65:a5: 59:2a:61:7d:e0:17:3c:f8:0e:ff:b1:da:a2:00:7b:a9:9d:36: e7:fa:74:9c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUCTVhLCzGSDnos1Bv08qbqQrenngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlF Qjk5MTNEOTAeFw0yNTExMTMwMjIwMzdaFw0yNjExMTIwMjI1MzdaMDMxMTAvBgNV BAMTKDE4MzNCMTE2MTVCRDkxNzMxMEQ4QjZFMjUwRjMwRjREQTc0RDFBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGI8kdzZH+d7K+6fHYR1rvGAts Qrh14rzWW4PpIGMboB+e/aYEslGraKKxTeGZNG28aiR12XjPk0Hn9sMIShY1gZ5g xpyCo2V2lr36QQ81+mzA+nX2TE/0OeE6eJPmfdKjcD2wItE6Xt6Tv8ojxO0WlDXu +C3zyJFmimTpA97DjLIo5zJ+RTuqnsCkOH2LwkfEFpLt7YlImMU71aGQDQFO8H9S i3h/2ro4RBFupwl+iUe3EB63HbAE2b1gxMD86a2KSATlg809EPuesohPr7pzdNRz phYFYmeG3FoTOsznxhcpi7is3rmmC061Sj5/q6Rr0O7D/xyFhvap1mHCT4ttAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUGDOxFhW9kXMQ2LbiUPMPTadNGhQwHwYDVR0j BBgwFoAU12rJUlySmfjZ8mhTpSRkGeuZE9kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9SNUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtU LzAvRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlFQjk5MTNEOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENzZBQzk1MjVDOTI5OUY4RDlG MjY4NTNBNTI0NjQxOUVCOTkxM0Q5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S NUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtULzAvMzEz ODM5MmUzODM1MmUzMTMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAz NTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBvVV2MA0GCSqGSIb3DQEBCwUAA4IBAQCgSAdtFmCPaUTQ KK1MePwkRqzFl31wZGj+c4vWAeKRO/N7fy2pYrPeDfxR0lt370Xh3mS6EWTgii5w BW1OkU7iBvGyncyqXSbHxxsLfT1BULWGn3VZ4esZDximYKyJLrgboBqHJiDMDyHq uek591y8izbdkKfTKXHILc83tsk1OsGgjP4BXNFyR2MDq3LmoayWPOH9mR0lVR/+ pCLzuGq53V2Yo6nVf0k28U5LceQhmUww2Qd7CUIOd6xoH//LALlSh254FtRdlvVc 6sotYpGwVzGcmPzgB6eYqUazodi5t/BGdtSLbCE6ZaVZKmF94Bc8+A7/sdqiAHup nTbn+nSc -----END CERTIFICATE-----Generated at Thu Dec 18 22:40:35 2025 by rpki-client