This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa File: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (raw, json) Hash identifier: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI= Subject key identifier: 90:E6:C0:8C:C5:0E:63:0B:C8:5B:C6:44:43:A7:94:84:CF:60:F4:0F Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 04687A62F1B142D3E0735E04A6E0D66B4A67456A Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa Signing time: Fri 21 Nov 2025 15:20:54 +0000 ROA not before: Fri 21 Nov 2025 15:15:54 +0000 ROA not after: Fri 20 Nov 2026 15:20:54 +0000 asID: 53158 IP address blocks: 186.209.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:68:7a:62:f1:b1:42:d3:e0:73:5e:04:a6:e0:d6:6b:4a:67:45:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Nov 21 15:15:54 2025 GMT Not After : Nov 20 15:20:54 2026 GMT Subject: CN=90E6C08CC50E630BC85BC64443A79484CF60F40F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:1f:8e:59:93:d4:f0:88:7c:2a:fd:cc:17: 80:02:be:0c:95:e3:ce:2e:27:56:9f:ae:b6:d0:38: 4b:81:c6:50:39:2b:2b:88:5d:d4:e9:06:87:d3:54: 86:20:fe:b8:a4:50:6e:99:d5:97:de:d5:39:e0:4a: 29:c4:5e:9c:9f:a5:5e:b5:b1:84:b0:74:12:a8:17: 59:39:f0:43:8b:dd:14:60:0f:f3:71:85:0c:bf:c7: fc:46:c5:f8:94:b5:4e:e1:75:79:c1:7a:56:d9:71: 18:37:28:a1:81:b6:7a:7a:b8:16:3a:10:3e:0f:03: cf:f2:80:7e:77:1b:bc:7a:be:dc:87:8b:ac:9c:73: 5f:1a:fa:0c:2c:84:1e:ca:6b:be:e2:cf:aa:2c:a1: 38:73:7f:b5:dc:b8:c8:08:c0:6f:7c:70:a9:f4:e7: 57:2b:bf:8c:0b:80:1e:77:fd:3b:1d:18:69:24:eb: 25:d1:34:18:3f:2b:e8:54:08:a0:d5:04:35:fd:d0: 03:41:b6:86:e4:5d:d5:1c:6c:23:b7:c7:0c:ed:2f: 53:64:9e:d2:d3:43:46:fb:d0:6b:37:75:f9:c3:0e: 38:d2:21:f8:c7:a4:4a:f2:1e:ff:b1:0e:19:09:f7: f6:62:59:4e:eb:a9:38:96:31:ac:ad:2c:55:55:2a: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E6:C0:8C:C5:0E:63:0B:C8:5B:C6:44:43:A7:94:84:CF:60:F4:0F X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.209.48.0/20 Signature Algorithm: sha256WithRSAEncryption 51:5c:ef:dd:9d:c4:c3:7f:ff:f4:81:52:68:f4:7e:b5:5f:1c: 96:e1:3e:2a:9b:12:35:70:bd:4a:93:bf:3f:b1:3e:09:27:9e: b1:77:c4:73:ea:b1:6c:94:b6:93:be:ea:20:cc:e5:31:e3:3d: d3:90:d9:62:47:35:5f:d5:af:b6:4c:37:d8:81:9e:44:c3:be: 5a:c3:11:6e:1e:1d:6d:15:a7:d5:c9:5e:49:78:2b:f5:24:4a: e9:c0:5f:cd:82:5b:fa:09:5e:9a:c8:94:c6:ff:89:b5:38:d1: 5a:96:ad:55:18:6d:cc:48:da:2a:9e:1d:11:5a:90:6e:ee:71: 17:56:92:c1:70:f7:78:97:b5:e8:54:f2:20:30:5a:f0:3b:3b: 19:b0:19:f1:e8:78:7b:e5:ce:9c:06:7f:1c:c2:22:d0:41:78: 29:eb:03:b6:c8:0f:6c:db:8f:d3:a7:16:7c:9b:94:5a:b4:af: e0:10:a4:99:11:ef:28:80:e2:ac:28:03:b7:f2:bb:49:b6:ba: 9f:d0:77:9e:9c:53:12:b3:fc:29:5e:11:9d:3c:07:ef:b3:37: fb:98:29:a2:ae:36:3f:4f:9b:19:ac:6a:8c:50:97:f7:2a:17: 38:85:a7:81:b7:bd:d5:8c:d3:c0:a2:a6:b8:90:ca:90:46:24: 2f:2c:a2:78 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUBGh6YvGxQtPgc14EpuDWa0pnRWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNTExMjExNTE1NTRaFw0yNjExMjAxNTIwNTRaMDMxMTAvBgNV BAMTKDkwRTZDMDhDQzUwRTYzMEJDODVCQzY0NDQzQTc5NDg0Q0Y2MEY0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwx+OWZPU8Ih8Kv3MF4ACvgyV 484uJ1afrrbQOEuBxlA5KyuIXdTpBofTVIYg/rikUG6Z1Zfe1TngSinEXpyfpV61 sYSwdBKoF1k58EOL3RRgD/NxhQy/x/xGxfiUtU7hdXnBelbZcRg3KKGBtnp6uBY6 ED4PA8/ygH53G7x6vtyHi6ycc18a+gwshB7Ka77iz6osoThzf7XcuMgIwG98cKn0 51crv4wLgB53/TsdGGkk6yXRNBg/K+hUCKDVBDX90ANBtobkXdUcbCO3xwztL1Nk ntLTQ0b70Gs3dfnDDjjSIfjHpEryHv+xDhkJ9/ZiWU7rqTiWMaytLFVVKrCzAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUkObAjMUOYwvIW8ZEQ6eUhM9g9A8wHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzEz ODM2MmUzMjMwMzkyZTM0MzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMzMzEz NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQEutEwMA0GCSqGSIb3DQEBCwUAA4IBAQBRXO/dncTDf//0 gVJo9H61XxyW4T4qmxI1cL1Kk78/sT4JJ56xd8Rz6rFslLaTvuogzOUx4z3TkNli RzVf1a+2TDfYgZ5Ew75awxFuHh1tFafVyV5JeCv1JErpwF/Nglv6CV6ayJTG/4m1 ONFalq1VGG3MSNoqnh0RWpBu7nEXVpLBcPd4l7XoVPIgMFrwOzsZsBnx6Hh75c6c Bn8cwiLQQXgp6wO2yA9s24/TpxZ8m5RatK/gEKSZEe8ogOKsKAO38rtJtrqf0Hee nFMSs/wpXhGdPAfvszf7mCmirjY/T5sZrGqMUJf3Khc4haeBt73VjNPAoqa4kMqQ RiQvLKJ4 -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:26 2025 by rpki-client