This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa File: 3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa (raw, json) Hash identifier: pvhmYStxF+RAbJG2l/Zq+ApuXxsPyJFV3IQA0u2VpCs= Subject key identifier: 1B:84:F0:93:23:37:93:B1:34:77:5F:EB:22:BD:C9:12:2D:E0:C3:68 Certificate issuer: /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Certificate serial: 56A88D4425C97751B71C976D47E0ECCBED31BEB0 Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa Signing time: Wed 17 Dec 2025 18:11:32 +0000 ROA not before: Wed 17 Dec 2025 18:06:32 +0000 ROA not after: Wed 16 Dec 2026 18:11:32 +0000 asID: 264425 IP address blocks: 131.221.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 18:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a8:8d:44:25:c9:77:51:b7:1c:97:6d:47:e0:ec:cb:ed:31:be:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Validity Not Before: Dec 17 18:06:32 2025 GMT Not After : Dec 16 18:11:32 2026 GMT Subject: CN=1B84F093233793B134775FEB22BDC9122DE0C368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:a8:87:8f:30:cc:bc:9a:cc:3f:39:a4:f6: 70:47:ff:6e:44:ba:98:44:cf:e9:1c:3d:20:21:7f: 2d:90:b3:9b:e2:11:8a:5e:e7:e9:44:73:5d:96:e4: 4e:f8:cc:2c:4a:d6:8c:f3:7a:4c:0f:0c:14:8f:e0: dd:b8:70:dd:1f:72:a0:a3:31:8a:ec:54:00:9f:99: e8:e2:a7:a1:64:24:f2:f9:4e:dd:19:14:00:70:12: 5b:f7:c0:9f:23:d6:8e:bd:11:eb:8c:1b:6a:29:a1: c7:6a:f3:8d:d4:78:f8:42:10:ac:d1:40:ef:5a:51: 25:bb:19:28:49:1b:77:f7:ea:8d:44:fe:7d:9a:0c: 82:69:c5:88:ac:64:82:9c:5d:7e:9d:fa:2e:73:39: c9:4a:df:72:fb:4e:33:29:be:46:c6:86:90:e0:3e: 31:72:6c:c1:4d:32:dc:5c:94:a2:79:07:b7:fa:8c: 3b:24:51:4a:c4:1e:71:8e:4c:f5:0a:b6:32:cb:fb: c1:c7:e6:f1:f8:8d:dc:b9:79:f9:53:26:3e:97:a1: 42:04:a2:88:01:94:a0:72:b4:25:6b:ff:c5:ca:4a: f5:2a:98:57:ac:33:6c:6c:72:e4:66:b9:53:72:f3: f1:fc:8b:00:7f:33:6e:31:c7:03:97:46:d5:dd:65: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:84:F0:93:23:37:93:B1:34:77:5F:EB:22:BD:C9:12:2D:E0:C3:68 X509v3 Authority Key Identifier: keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.184.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:fc:7f:ab:e8:73:0c:7d:b4:b9:94:a9:0c:a5:8e:78:48:10: 2b:4b:10:ad:24:5a:e2:d2:59:b2:92:7b:00:87:11:8a:6a:61: ca:31:e1:07:16:4d:31:64:88:72:53:56:fb:be:ee:83:aa:ba: 2f:f7:f6:87:8b:32:db:43:04:2e:2e:d5:67:ff:fc:17:53:40: da:ee:e5:b3:7e:94:43:f1:42:5d:c9:f6:80:a3:ce:0c:3d:d9: b8:04:a5:99:f8:31:2e:ba:84:3c:47:55:1f:36:3e:0a:88:ef: e2:e1:ba:d3:c8:c9:55:fb:71:f9:f8:b4:2d:f8:77:42:ac:eb: 06:a3:fa:b6:09:28:90:af:5d:a7:46:a4:38:85:24:06:5e:bd: af:f8:24:bd:30:0d:34:66:49:84:c0:d0:6e:84:1b:cb:1f:a2: 79:1b:e2:ca:d3:40:70:70:74:ae:a5:8e:52:3e:eb:fa:ed:b6: 89:68:05:dc:3f:74:57:5d:0e:fa:a3:08:e7:96:7f:16:9a:d4: e5:6c:eb:ef:77:e1:a4:6f:9f:ec:b2:da:d6:9e:d9:51:60:45: 4c:62:de:92:0a:79:21:34:e6:5a:a2:9f:9e:df:12:83:0b:2b: 4e:f0:31:f6:cc:de:cf:ea:fb:d8:96:27:29:11:8b:53:05:cb: c2:df:61:b0 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUVqiNRCXJd1G3HJdtR+Dsy+0xvrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBNjJDQ0FFQTE1NEJGQTcyQjBDRTk5M0RBMDJDMUFE Q0VBNTIxNTAeFw0yNTEyMTcxODA2MzJaFw0yNjEyMTYxODExMzJaMDMxMTAvBgNV BAMTKDFCODRGMDkzMjMzNzkzQjEzNDc3NUZFQjIyQkRDOTEyMkRFMEMzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MKiHjzDMvJrMPzmk9nBH/25E uphEz+kcPSAhfy2Qs5viEYpe5+lEc12W5E74zCxK1ozzekwPDBSP4N24cN0fcqCj MYrsVACfmejip6FkJPL5Tt0ZFABwElv3wJ8j1o69EeuMG2opocdq843UePhCEKzR QO9aUSW7GShJG3f36o1E/n2aDIJpxYisZIKcXX6d+i5zOclK33L7TjMpvkbGhpDg PjFybMFNMtxclKJ5B7f6jDskUUrEHnGOTPUKtjLL+8HH5vH4jdy5eflTJj6XoUIE oogBlKBytCVr/8XKSvUqmFesM2xscuRmuVNy8/H8iwB/M24xxwOXRtXdZQCXAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUG4TwkyM3k7E0d1/rIr3JEi3gw2gwHwYDVR0j BBgwFoAUc6YsyuoVS/pysM6ZPaAsGtzqUhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC83M0E2MkNDQUVBMTU0QkZBNzJCMENFOTkzREEwMkMxQURDRUE1MjE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczQTYyQ0NBRUExNTRCRkE3 MkIwQ0U5OTNEQTAyQzFBRENFQTUyMTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzEzMzMxMmUzMjMyMzEyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPduDANBgkqhkiG9w0BAQsFAAOCAQEAjfx/ q+hzDH20uZSpDKWOeEgQK0sQrSRa4tJZspJ7AIcRimphyjHhBxZNMWSIclNW+77u g6q6L/f2h4sy20MELi7VZ//8F1NA2u7ls36UQ/FCXcn2gKPODD3ZuASlmfgxLrqE PEdVHzY+Cojv4uG608jJVftx+fi0Lfh3QqzrBqP6tgkokK9dp0akOIUkBl69r/gk vTANNGZJhMDQboQbyx+ieRviytNAcHB0rqWOUj7r+u22iWgF3D90V10O+qMI55Z/ FprU5Wzr73fhpG+f7LLa1p7ZUWBFTGLekgp5ITTmWqKfnt8SgwsrTvAx9szez+r7 2JYnKRGLUwXLwt9hsA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:21 2025 by rpki-client