This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa File: 3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa (raw, json) Hash identifier: E/lXI46o0nPZz+GzgHAEBqFnqp1UWte+HszwrqETh0M= Subject key identifier: 4E:B6:F6:72:D2:A8:2B:FA:26:71:52:C1:7C:EB:11:D3:53:B9:70:A4 Certificate issuer: /CN=0E4505B615A77637C74454BD3C6435A5388878F0 Certificate serial: 6037022B13DF164C39080A7725A1BA420429983C Authority key identifier: 0E:45:05:B6:15:A7:76:37:C7:44:54:BD:3C:64:35:A5:38:88:78:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E4505B615A77637C74454BD3C6435A5388878F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa Signing time: Sat 08 Nov 2025 14:12:32 +0000 ROA not before: Sat 08 Nov 2025 14:07:32 +0000 ROA not after: Sat 07 Nov 2026 14:12:32 +0000 asID: 266353 IP address blocks: 170.239.140.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0E4505B615A77637C74454BD3C6435A5388878F0.crl rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0E4505B615A77637C74454BD3C6435A5388878F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E4505B615A77637C74454BD3C6435A5388878F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Dec 2025 18:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:37:02:2b:13:df:16:4c:39:08:0a:77:25:a1:ba:42:04:29:98:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4505B615A77637C74454BD3C6435A5388878F0 Validity Not Before: Nov 8 14:07:32 2025 GMT Not After : Nov 7 14:12:32 2026 GMT Subject: CN=4EB6F672D2A82BFA267152C17CEB11D353B970A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:6f:e4:94:ca:d7:d7:0b:33:6a:3a:ce:85: 96:05:7b:cd:3b:cb:e6:ee:b5:8c:94:28:10:6a:5a: 01:c7:15:f0:5c:3f:38:c9:68:68:9e:3f:4e:86:95: 14:61:cb:9e:f7:87:ae:09:99:39:4b:07:7a:00:0d: 26:e5:52:18:d1:c7:22:d5:e6:dc:82:67:a4:8c:4f: 0b:dd:89:31:03:16:2e:c0:c9:f4:a9:e1:a7:65:6d: 38:f0:d8:b2:2b:39:fe:21:f3:8c:2f:55:4f:a1:6e: 03:96:a9:6c:7f:ac:e3:4e:5b:94:6f:d7:59:a1:6a: 9a:f9:c9:c4:32:8e:63:ad:49:c8:c7:14:01:c5:28: a0:09:e3:83:e8:52:bb:8d:ab:15:29:7a:06:93:1e: 73:77:19:7f:84:d5:31:5b:2b:3a:e5:ed:aa:15:09: cd:f1:3a:71:eb:70:37:82:33:65:19:24:e7:eb:1f: 72:ab:84:93:1c:ce:dc:e7:dc:b0:12:5f:45:67:45: 03:a2:b2:fe:c3:04:8c:da:7a:d6:11:b9:e6:33:1b: 07:d9:68:7a:49:23:06:99:1d:bf:fe:31:09:b8:31: 9c:30:0d:0d:72:d0:5a:3d:1a:e1:12:ca:81:b8:7a: b6:d5:55:cb:57:33:bb:b5:ad:ab:18:50:7a:ec:72: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B6:F6:72:D2:A8:2B:FA:26:71:52:C1:7C:EB:11:D3:53:B9:70:A4 X509v3 Authority Key Identifier: keyid:0E:45:05:B6:15:A7:76:37:C7:44:54:BD:3C:64:35:A5:38:88:78:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0E4505B615A77637C74454BD3C6435A5388878F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E4505B615A77637C74454BD3C6435A5388878F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.239.140.0/22 Signature Algorithm: sha256WithRSAEncryption 41:28:34:33:a8:f2:fc:f4:f4:ca:34:3f:b5:eb:0a:ae:12:1e: 42:0e:ae:bd:af:50:ce:e0:35:9b:4a:2e:6c:0a:94:12:53:bb: 47:51:ca:ff:21:b6:98:86:83:1a:f7:3b:27:cc:22:1a:ef:1d: fd:e3:7a:49:67:a8:4f:bc:ca:b2:4a:51:5b:e8:23:8e:43:6d: 50:8c:3c:f6:49:d5:28:bf:ce:fb:41:30:01:15:d4:4a:4a:65: e6:e7:14:3f:62:39:51:79:54:1f:2c:72:c7:1e:f0:f2:de:dc: 56:92:02:fc:ed:e7:5a:9d:fa:52:60:dd:6c:a2:f1:3c:f2:f9: a5:92:0b:d8:c0:bd:04:9f:29:0f:cf:1f:25:ae:fa:18:d6:23: 07:c2:35:8e:a5:7e:23:a5:0c:96:04:7a:d6:b7:ee:fa:87:4b: eb:83:4e:60:78:9b:15:c3:2e:44:50:c0:fa:bd:46:99:cb:6c: 1c:ec:95:11:1a:37:81:67:ea:60:a4:9b:e3:ca:83:13:a4:97: 61:ec:67:47:e9:5e:2b:64:a1:32:22:f3:dc:3c:f6:48:af:4d: 35:17:00:1a:30:00:0f:1b:b4:52:54:81:7d:23:8e:0a:61:e5: c4:28:c7:8f:ec:fb:9f:1d:03:59:f9:4d:e0:f6:c8:2d:23:53: 6d:1e:b7:0e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUYDcCKxPfFkw5CAp3JaG6QgQpmDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0NTA1QjYxNUE3NzYzN0M3NDQ1NEJEM0M2NDM1QTUz ODg4NzhGMDAeFw0yNTExMDgxNDA3MzJaFw0yNjExMDcxNDEyMzJaMDMxMTAvBgNV BAMTKDRFQjZGNjcyRDJBODJCRkEyNjcxNTJDMTdDRUIxMUQzNTNCOTcwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiG/klMrX1wszajrOhZYFe807 y+butYyUKBBqWgHHFfBcPzjJaGieP06GlRRhy573h64JmTlLB3oADSblUhjRxyLV 5tyCZ6SMTwvdiTEDFi7AyfSp4adlbTjw2LIrOf4h84wvVU+hbgOWqWx/rONOW5Rv 11mhapr5ycQyjmOtScjHFAHFKKAJ44PoUruNqxUpegaTHnN3GX+E1TFbKzrl7aoV Cc3xOnHrcDeCM2UZJOfrH3KrhJMcztzn3LASX0VnRQOisv7DBIzaetYRueYzGwfZ aHpJIwaZHb/+MQm4MZwwDQ1y0Fo9GuESyoG4erbVVctXM7u1rasYUHrscm8LAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUTrb2ctKoK/omcVLBfOsR01O5cKQwHwYDVR0j BBgwFoAUDkUFthWndjfHRFS9PGQ1pTiIePAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1BZM29pbVBackRvUWZCR2htWkJoZGVUalR1WVpoYThQeVRtM3lNNm5q TnAvMC8wRTQ1MDVCNjE1QTc3NjM3Qzc0NDU0QkQzQzY0MzVBNTM4ODg3OEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFNDUwNUI2MTVBNzc2MzdD NzQ0NTRCRDNDNjQzNUE1Mzg4ODc4RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNQWTNvaW1QWnJEb1FmQkdobVpCaGRlVGpUdVlaaGE4UHlUbTN5TTZuak5wLzAv MzEzNzMwMmUzMjMzMzkyZTMxMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNjMzMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrvjDANBgkqhkiG9w0BAQsFAAOCAQEAQSg0 M6jy/PT0yjQ/tesKrhIeQg6uva9QzuA1m0oubAqUElO7R1HK/yG2mIaDGvc7J8wi Gu8d/eN6SWeoT7zKskpRW+gjjkNtUIw89knVKL/O+0EwARXUSkpl5ucUP2I5UXlU Hyxyxx7w8t7cVpIC/O3nWp36UmDdbKLxPPL5pZIL2MC9BJ8pD88fJa76GNYjB8I1 jqV+I6UMlgR61rfu+odL64NOYHibFcMuRFDA+r1GmctsHOyVERo3gWfqYKSb48qD E6SXYexnR+leK2ShMiLz3Dz2SK9NNRcAGjAADxu0UlSBfSOOCmHlxCjHj+z7nx0D WflN4PbILSNTbR63Dg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:31:59 2025 by rpki-client