This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa File: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (raw, json) Hash identifier: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc= Subject key identifier: 3D:6C:EB:00:39:BE:45:19:53:80:37:27:C0:DC:1E:D6:B4:2B:C1:3B Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 38CEE7ECE6FEE4529C31A5D7302C08013E99E89D Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa Signing time: Fri 21 Nov 2025 15:20:54 +0000 ROA not before: Fri 21 Nov 2025 15:15:54 +0000 ROA not after: Fri 20 Nov 2026 15:20:54 +0000 asID: 53158 IP address blocks: 186.209.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ce:e7:ec:e6:fe:e4:52:9c:31:a5:d7:30:2c:08:01:3e:99:e8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Nov 21 15:15:54 2025 GMT Not After : Nov 20 15:20:54 2026 GMT Subject: CN=3D6CEB0039BE451953803727C0DC1ED6B42BC13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:50:11:36:56:24:1e:0c:8f:4b:7a:ab:c3: 57:22:2a:ff:51:13:5b:18:21:ac:03:b7:c6:30:b7: 8f:7d:72:71:c5:64:14:72:98:51:23:a8:e2:01:85: e5:b7:21:ee:84:63:15:25:07:fa:a3:74:4e:b5:e8: 2c:fb:ea:21:e5:b3:94:cb:ed:db:21:33:6b:3b:7b: f0:03:68:37:92:fa:ec:ec:5b:fd:4e:ac:b9:9a:fb: e6:48:0d:67:95:56:ca:64:69:88:51:56:f3:2d:93: ca:60:dd:c4:c7:86:b9:f4:1a:7e:ee:31:1f:61:88: da:bb:f3:d5:17:17:26:d8:49:0a:06:81:4b:ad:dd: 06:23:17:e5:c8:bb:b9:89:49:60:a9:70:46:4f:f5: 8f:37:84:51:98:95:fc:d0:5f:99:23:c6:b9:b4:4b: 54:5d:07:6a:7a:97:0c:3e:a5:4e:80:81:6c:e0:0e: af:b8:3f:78:56:d4:7b:1f:5f:dc:b9:ee:44:27:95: 39:3d:d8:c5:df:d5:4f:f9:f9:d1:d9:b9:32:ff:9c: 55:15:44:a8:cd:29:2d:9a:90:56:02:59:c4:b8:17: 8c:2d:2f:11:51:88:ef:0c:22:bb:e1:3f:f9:99:70: 6e:db:fa:9f:67:4c:00:98:da:62:bb:46:68:19:7f: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6C:EB:00:39:BE:45:19:53:80:37:27:C0:DC:1E:D6:B4:2B:C1:3B X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.209.32.0/20 Signature Algorithm: sha256WithRSAEncryption 21:18:5a:8c:f8:a3:41:82:1c:d4:4e:d3:88:39:a6:1e:98:50: 81:8d:68:d1:73:c7:f9:e6:f3:a2:47:61:d7:49:a3:c0:30:75: b3:ca:4f:6c:c9:c3:70:6e:2a:1c:d4:59:35:6e:56:89:32:d3: 84:c7:48:d7:24:70:76:dc:d5:a4:87:3a:4d:a3:cb:57:0e:79: a0:08:1d:dc:95:8b:57:c9:74:a8:b0:a5:62:7f:2e:e9:fb:68: 26:78:f3:b3:dd:35:55:33:0a:93:82:ee:5e:3f:70:6c:cf:66: 4d:4a:3d:0b:24:02:78:1d:14:eb:12:be:4a:9a:3c:5f:4c:be: cf:4b:9b:28:6f:23:3c:0b:69:a7:a1:54:bc:bd:85:19:03:c0: 12:c2:86:f5:f4:96:b7:67:0f:47:98:d8:08:6b:0d:fe:30:d3: 1d:86:c4:6e:c3:b1:b4:70:33:af:97:bc:ff:12:cf:35:60:e1: 28:86:55:17:8c:63:72:d5:87:ee:44:be:f9:9d:59:74:a8:19: 8a:32:5b:79:d0:80:c3:ce:22:42:c7:07:08:04:8c:c2:0d:00: d0:83:c2:8c:a0:76:ec:6c:77:d7:7f:56:ba:d9:7d:08:f7:8e: 08:db:04:ec:24:81:d1:e0:69:b8:fc:5d:7a:27:88:ad:f8:1c: 5c:e7:8c:73 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUOM7n7Ob+5FKcMaXXMCwIAT6Z6J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNTExMjExNTE1NTRaFw0yNjExMjAxNTIwNTRaMDMxMTAvBgNV BAMTKDNENkNFQjAwMzlCRTQ1MTk1MzgwMzcyN0MwREMxRUQ2QjQyQkMxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5FARNlYkHgyPS3qrw1ciKv9R E1sYIawDt8Ywt499cnHFZBRymFEjqOIBheW3Ie6EYxUlB/qjdE616Cz76iHls5TL 7dshM2s7e/ADaDeS+uzsW/1OrLma++ZIDWeVVspkaYhRVvMtk8pg3cTHhrn0Gn7u MR9hiNq789UXFybYSQoGgUut3QYjF+XIu7mJSWCpcEZP9Y83hFGYlfzQX5kjxrm0 S1RdB2p6lww+pU6AgWzgDq+4P3hW1HsfX9y57kQnlTk92MXf1U/5+dHZuTL/nFUV RKjNKS2akFYCWcS4F4wtLxFRiO8MIrvhP/mZcG7b+p9nTACY2mK7RmgZf8pZAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUPWzrADm+RRlTgDcnwNwe1rQrwTswHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzEz ODM2MmUzMjMwMzkyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMzMzEz NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQEutEgMA0GCSqGSIb3DQEBCwUAA4IBAQAhGFqM+KNBghzU TtOIOaYemFCBjWjRc8f55vOiR2HXSaPAMHWzyk9sycNwbioc1Fk1blaJMtOEx0jX JHB23NWkhzpNo8tXDnmgCB3clYtXyXSosKVify7p+2gmePOz3TVVMwqTgu5eP3Bs z2ZNSj0LJAJ4HRTrEr5KmjxfTL7PS5sobyM8C2mnoVS8vYUZA8ASwob19Ja3Zw9H mNgIaw3+MNMdhsRuw7G0cDOvl7z/Es81YOEohlUXjGNy1YfuRL75nVl0qBmKMlt5 0IDDziJCxwcIBIzCDQDQg8KMoHbsbHfXf1a62X0I944I2wTsJIHR4Gm4/F16J4it +Bxc54xz -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:07 2025 by rpki-client