This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa File: 3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa (raw, json) Hash identifier: DL6OBnR7RVAwYFM2OAHnWV+opRQq/CMPNpb9eaJnOyc= Subject key identifier: 3F:FF:A2:89:F5:C7:86:B6:B4:52:F1:74:4A:B3:26:A6:C1:96:A1:D3 Certificate issuer: /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Certificate serial: 76F6D0716B5E31017E0D6DE5FB9253EB5D94447E Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa Signing time: Wed 17 Dec 2025 18:11:32 +0000 ROA not before: Wed 17 Dec 2025 18:06:32 +0000 ROA not after: Wed 16 Dec 2026 18:11:32 +0000 asID: 264425 IP address blocks: 131.221.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 18:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f6:d0:71:6b:5e:31:01:7e:0d:6d:e5:fb:92:53:eb:5d:94:44:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Validity Not Before: Dec 17 18:06:32 2025 GMT Not After : Dec 16 18:11:32 2026 GMT Subject: CN=3FFFA289F5C786B6B452F1744AB326A6C196A1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:cb:06:0f:1d:67:e1:ae:eb:f4:c9:a0:24: 0c:f2:d0:3a:2c:62:01:27:a5:42:90:d9:f6:a1:4d: 10:79:a3:40:a5:a7:cc:b3:b4:5d:05:28:ea:08:1e: 42:33:ed:29:93:7b:f5:0f:7e:7e:aa:de:67:1e:cd: 6a:9b:97:19:de:f4:25:97:3d:35:b9:ed:77:6f:09: 35:26:17:09:20:35:b3:66:19:2d:e5:67:b2:19:9d: 03:9d:82:d5:42:46:b5:d0:68:d0:c6:63:59:af:4c: d6:0c:7c:8c:c8:e5:d1:fb:f1:e5:c8:d0:44:a5:d7: c9:8a:a1:20:de:10:46:a4:50:75:c0:29:c2:66:24: 08:9d:4e:5c:e7:90:a5:44:f5:2a:b5:57:13:d4:4a: 79:49:6a:2d:ac:04:12:d6:94:58:0b:a7:e0:b9:ae: 39:0a:e9:25:1d:ea:1b:1b:bd:d3:ba:ec:92:b1:36: b7:52:97:a2:80:37:7d:7b:6d:f0:39:84:07:92:56: a4:81:a0:0d:59:e7:05:2b:78:b4:d3:3e:dd:f5:04: 0c:fc:68:57:51:c1:ae:50:0b:c1:31:45:a9:80:1c: d9:f7:d5:2f:0f:71:9a:a6:cd:77:de:84:d3:fa:e6: ad:1a:41:5c:5f:b6:96:cd:f7:c1:96:e1:a8:93:46: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FF:A2:89:F5:C7:86:B6:B4:52:F1:74:4A:B3:26:A6:C1:96:A1:D3 X509v3 Authority Key Identifier: keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.186.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:48:5b:54:68:5f:7b:a0:77:da:8d:e0:2a:c3:e7:3f:95:88: 07:2e:f7:17:f6:2f:ec:36:5b:b7:f7:73:43:3a:8d:41:7b:39: 2a:7e:60:98:00:97:1f:5f:e7:6c:16:be:36:e8:96:45:5e:65: 4f:1f:6d:e1:29:54:72:91:3a:ef:ca:fa:f6:51:4d:9e:ae:5b: 6c:78:1d:8d:84:04:bd:ef:64:bc:7f:9e:fb:2e:bd:17:42:24: 9c:16:d8:19:87:cf:f5:83:82:00:df:cf:ef:8d:12:8d:d9:20: 2e:0d:f9:f4:40:79:73:b0:28:4c:6e:9e:b8:75:45:7e:4a:18: c2:d5:0e:07:48:07:60:39:22:89:f3:60:7a:99:f9:be:9c:da: b5:dc:25:db:ee:08:30:53:86:c9:b7:49:bc:1a:f5:73:05:c6: f3:4f:93:2c:de:34:96:a6:d0:0c:7e:f1:6a:f8:24:4f:d3:7d: 81:4c:d6:48:ef:07:6c:b3:65:c9:0f:82:ed:4c:1e:f5:e9:c2: 70:fb:96:0f:8c:91:e7:4a:71:5c:a5:11:4e:f6:98:15:45:70: f7:5d:1b:e9:03:3c:e4:3b:5c:ea:ff:83:28:01:7c:89:34:5a: df:f1:04:c3:ba:79:06:61:a7:87:86:50:07:d7:f8:d1:c8:2c: 5f:9f:0a:4d -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUdvbQcWteMQF+DW3l+5JT612URH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBNjJDQ0FFQTE1NEJGQTcyQjBDRTk5M0RBMDJDMUFE Q0VBNTIxNTAeFw0yNTEyMTcxODA2MzJaFw0yNjEyMTYxODExMzJaMDMxMTAvBgNV BAMTKDNGRkZBMjg5RjVDNzg2QjZCNDUyRjE3NDRBQjMyNkE2QzE5NkExRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQssGDx1n4a7r9MmgJAzy0Dos YgEnpUKQ2fahTRB5o0Clp8yztF0FKOoIHkIz7SmTe/UPfn6q3mcezWqblxne9CWX PTW57XdvCTUmFwkgNbNmGS3lZ7IZnQOdgtVCRrXQaNDGY1mvTNYMfIzI5dH78eXI 0ESl18mKoSDeEEakUHXAKcJmJAidTlznkKVE9Sq1VxPUSnlJai2sBBLWlFgLp+C5 rjkK6SUd6hsbvdO67JKxNrdSl6KAN317bfA5hAeSVqSBoA1Z5wUreLTTPt31BAz8 aFdRwa5QC8ExRamAHNn31S8PcZqmzXfehNP65q0aQVxftpbN98GW4aiTRrRFAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUP/+iifXHhra0UvF0SrMmpsGWodMwHwYDVR0j BBgwFoAUc6YsyuoVS/pysM6ZPaAsGtzqUhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC83M0E2MkNDQUVBMTU0QkZBNzJCMENFOTkzREEwMkMxQURDRUE1MjE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczQTYyQ0NBRUExNTRCRkE3 MkIwQ0U5OTNEQTAyQzFBRENFQTUyMTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzEzMzMxMmUzMjMyMzEyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYPdujANBgkqhkiG9w0BAQsFAAOCAQEAekhb VGhfe6B32o3gKsPnP5WIBy73F/Yv7DZbt/dzQzqNQXs5Kn5gmACXH1/nbBa+NuiW RV5lTx9t4SlUcpE678r69lFNnq5bbHgdjYQEve9kvH+e+y69F0IknBbYGYfP9YOC AN/P740SjdkgLg359EB5c7AoTG6euHVFfkoYwtUOB0gHYDkiifNgepn5vpzatdwl 2+4IMFOGybdJvBr1cwXG80+TLN40lqbQDH7xavgkT9N9gUzWSO8HbLNlyQ+C7Uwe 9enCcPuWD4yR50pxXKURTvaYFUVw910b6QM85Dtc6v+DKAF8iTRa3/EEw7p5BmGn h4ZQB9f40cgsX58KTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:09:49 2025 by rpki-client