This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa File: 3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa (raw, json) Hash identifier: TnrDZrm5IeFKDts8/NT8oV8wF1CEp18CLZumFVya2Gs= Subject key identifier: 57:32:FB:87:01:C8:5F:C8:73:2F:F4:B8:8A:CB:F1:60:23:B1:DA:AD Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Certificate serial: 2F200B815CFFDA6BE60BD1E3B111F28A1FB1936A Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa Signing time: Thu 13 Nov 2025 02:25:35 +0000 ROA not before: Thu 13 Nov 2025 02:20:35 +0000 ROA not after: Thu 12 Nov 2026 02:25:35 +0000 asID: 270561 IP address blocks: 189.85.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 18:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:20:0b:81:5c:ff:da:6b:e6:0b:d1:e3:b1:11:f2:8a:1f:b1:93:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Validity Not Before: Nov 13 02:20:35 2025 GMT Not After : Nov 12 02:25:35 2026 GMT Subject: CN=5732FB8701C85FC8732FF4B88ACBF16023B1DAAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:fb:57:1b:0f:00:b5:97:d3:8b:3b:1d:10: ff:2a:7a:bb:9d:ec:d4:6d:36:e7:3a:f5:75:55:d1: 45:8d:30:84:3a:83:13:19:35:2c:c9:26:36:26:bb: bb:c0:23:24:a3:e3:93:a3:58:1f:0e:96:43:e2:e0: b4:f6:a4:5b:05:cb:8a:23:83:ef:2a:06:c2:c5:ef: 1d:ab:a3:ea:19:78:2d:93:17:75:7a:a2:4b:3a:94: eb:e2:6d:ad:79:c1:3f:15:7f:12:b9:36:c1:cc:42: 5c:55:cf:34:e1:b9:5d:af:5e:15:b4:56:06:f9:68: 80:42:3d:61:03:a0:67:44:7c:be:6c:a3:08:19:14: 9a:89:5c:00:74:af:bf:64:03:be:14:9c:b7:0b:54: b1:72:4b:dd:d6:3d:48:b8:fb:23:30:f3:3c:93:27: 51:67:a8:9a:8e:3e:2d:e7:2e:12:b1:fa:4c:6c:a9: b8:99:48:94:94:31:f2:9d:ad:98:43:77:04:fe:c4: da:70:f2:eb:f3:15:94:7d:2b:9d:27:db:bc:00:f7: 8e:40:c7:43:78:06:80:77:87:3c:99:e1:a5:25:05: 6d:e2:00:52:41:f4:c9:3e:d0:2c:12:f2:97:ec:e1: 42:28:a6:a0:12:1a:14:b1:1e:3a:f8:2a:3f:c6:7f: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:32:FB:87:01:C8:5F:C8:73:2F:F4:B8:8A:CB:F1:60:23:B1:DA:AD X509v3 Authority Key Identifier: keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.118.0/23 Signature Algorithm: sha256WithRSAEncryption bd:09:d7:41:cf:77:13:5b:01:17:eb:fa:bb:9f:ce:11:0b:ce: 76:92:f9:3e:7c:7a:94:79:7d:cd:7b:c4:e1:17:9f:4d:d0:63: b2:26:3b:3b:30:c2:07:4e:2f:4e:a1:4b:74:25:81:c6:80:90: fd:7d:93:3c:65:14:e4:8f:52:cf:91:89:93:83:63:a1:3e:b0: 6a:46:01:7a:3c:af:e8:f2:cb:3d:0c:fb:48:3d:2b:85:11:86: 5d:88:9a:40:09:64:3d:45:bd:3a:2b:7a:b1:37:52:9f:42:8c: b2:64:70:f7:e1:26:32:e3:20:09:59:db:dc:d5:df:0f:96:52: ef:c4:d9:a5:53:99:00:22:30:5c:cc:7e:ef:c7:d5:ea:0f:20: 60:5d:fc:05:49:f3:57:5d:3a:ad:62:36:ef:e2:c2:78:ad:47: 04:b7:d0:0f:eb:2e:78:61:b9:30:6b:17:5c:f8:84:e6:f1:03: a7:03:95:87:ab:20:9e:5c:e7:42:2a:ce:e7:01:d7:b0:b6:34: 45:d2:f4:08:64:30:63:68:cb:43:34:68:94:77:08:0f:92:e9: 78:fd:1c:ad:89:b7:84:94:b2:df:39:7e:1e:4f:b2:25:27:76: bc:0f:e6:69:39:77:b0:fb:06:b3:8d:43:5c:be:fd:b3:51:2c: d3:ad:ea:be -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIULyALgVz/2mvmC9HjsRHyih+xk2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlF Qjk5MTNEOTAeFw0yNTExMTMwMjIwMzVaFw0yNjExMTIwMjI1MzVaMDMxMTAvBgNV BAMTKDU3MzJGQjg3MDFDODVGQzg3MzJGRjRCODhBQ0JGMTYwMjNCMURBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvPtXGw8AtZfTizsdEP8qerud 7NRtNuc69XVV0UWNMIQ6gxMZNSzJJjYmu7vAIySj45OjWB8OlkPi4LT2pFsFy4oj g+8qBsLF7x2ro+oZeC2TF3V6oks6lOviba15wT8VfxK5NsHMQlxVzzThuV2vXhW0 Vgb5aIBCPWEDoGdEfL5sowgZFJqJXAB0r79kA74UnLcLVLFyS93WPUi4+yMw8zyT J1FnqJqOPi3nLhKx+kxsqbiZSJSUMfKdrZhDdwT+xNpw8uvzFZR9K50n27wA945A x0N4BoB3hzyZ4aUlBW3iAFJB9Mk+0CwS8pfs4UIopqASGhSxHjr4Kj/GfxdRAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUVzL7hwHIX8hzL/S4isvxYCOx2q0wHwYDVR0j BBgwFoAU12rJUlySmfjZ8mhTpSRkGeuZE9kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9SNUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtU LzAvRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlFQjk5MTNEOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENzZBQzk1MjVDOTI5OUY4RDlG MjY4NTNBNTI0NjQxOUVCOTkxM0Q5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S NUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtULzAvMzEz ODM5MmUzODM1MmUzMTMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAz NTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAG9VXYwDQYJKoZIhvcNAQELBQADggEBAL0J10HPdxNb ARfr+rufzhELznaS+T58epR5fc17xOEXn03QY7ImOzswwgdOL06hS3QlgcaAkP19 kzxlFOSPUs+RiZODY6E+sGpGAXo8r+jyyz0M+0g9K4URhl2ImkAJZD1FvTorerE3 Up9CjLJkcPfhJjLjIAlZ29zV3w+WUu/E2aVTmQAiMFzMfu/H1eoPIGBd/AVJ81dd Oq1iNu/iwnitRwS30A/rLnhhuTBrF1z4hObxA6cDlYerIJ5c50IqzucB17C2NEXS 9AhkMGNoy0M0aJR3CA+S6Xj9HK2Jt4SUst85fh5PsiUndrwP5mk5d7D7BrONQ1y+ /bNRLNOt6r4= -----END CERTIFICATE-----Generated at Thu Dec 18 22:40:35 2025 by rpki-client