This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa File: 3133382e39392e31322e302f32322d3234203d3e20323634313530.roa (raw, json) Hash identifier: WDMbdHrG9LGiHzpTmVjqj74Kg796UBvqJPYmt79f0a4= Subject key identifier: DB:1A:14:A2:07:43:6E:BB:C9:4F:A3:D2:0D:B8:8C:2E:B0:2B:77:74 Certificate issuer: /CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17 Certificate serial: 54F394B8D9D40DB06EDCD8678542B04088DAE8A8 Authority key identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer Subject info access: rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa Signing time: Thu 06 Mar 2025 13:52:03 +0000 ROA not before: Thu 06 Mar 2025 13:47:03 +0000 ROA not after: Thu 05 Mar 2026 13:52:03 +0000 asID: 264150 IP address blocks: 138.99.12.0/22 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 54:f3:94:b8:d9:d4:0d:b0:6e:dc:d8:67:85:42:b0:40:88:da:e8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17 Validity Not Before: Mar 6 13:47:03 2025 GMT Not After : Mar 5 13:52:03 2026 GMT Subject: CN=DB1A14A207436EBBC94FA3D20DB88C2EB02B7774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:02:7a:e4:05:6b:4d:14:d3:dd:b4:d8:68: 02:95:68:f8:f9:e8:1b:d8:db:7c:fc:71:88:b0:bf: 8d:ca:67:b7:42:fd:e0:34:75:5e:c0:23:75:a9:91: 6b:db:c8:9c:c0:4f:1b:6b:01:c9:ec:32:ec:91:68: 09:f3:c1:df:53:8f:01:c6:99:6c:7c:4e:ee:ac:cf: a7:14:5c:b1:c7:8c:46:be:94:e1:33:8a:86:95:da: a1:ce:88:2d:89:12:08:cb:71:3c:08:c6:62:f6:9f: e5:b8:9f:54:d1:0b:c5:fd:6d:8c:ca:e9:aa:b3:33: 80:65:37:77:6d:f4:dc:86:4a:bf:d2:b7:a0:01:9e: fe:99:9e:fb:64:44:cb:96:0e:b0:ee:5c:ad:71:04: 6c:ed:21:24:75:79:17:82:20:67:13:89:ef:65:d7: fe:c4:6b:a0:2a:c8:44:d7:fb:b9:fe:fa:c3:a2:5b: ff:f4:30:f5:e1:3e:ce:07:46:1e:9f:47:3e:86:91: 30:2c:51:03:68:ce:c7:9b:3d:70:db:44:74:63:dd: 3c:21:62:31:46:e2:cc:42:eb:a8:0a:84:10:40:a4: d1:da:be:ac:36:94:23:be:8a:e0:cf:ed:95:d1:0a: 65:06:f6:a7:82:69:e7:5b:57:62:7a:8d:93:27:fe: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1A:14:A2:07:43:6E:BB:C9:4F:A3:D2:0D:B8:8C:2E:B0:2B:77:74 X509v3 Authority Key Identifier: keyid:99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.12.0/22 Signature Algorithm: sha256WithRSAEncryption 46:b5:10:0d:39:58:53:e0:16:28:8b:a8:bc:26:53:db:fb:b7: 11:2b:36:c8:49:e1:1b:2b:44:f9:2e:14:18:a1:14:7b:18:06: 51:47:cf:97:5f:a3:36:85:0d:b7:7d:95:99:1c:9d:3a:2d:ab: 84:7f:fe:c5:81:ed:7f:9a:4a:f6:06:bd:b8:01:7e:d4:06:d5: 03:3c:d8:3e:ac:32:89:30:e5:67:c7:b8:b3:1b:31:c4:b4:ed: 71:e4:62:76:27:5d:73:2f:d2:90:0c:79:16:ef:d4:fa:6f:3b: a0:ac:bd:4b:ac:91:9d:aa:b8:5e:e0:64:9d:5a:7b:4a:a0:47: 37:ae:33:fd:4d:db:ff:78:ae:22:b0:26:91:28:35:c3:36:ec: 48:d1:c8:d7:cb:20:ef:a3:9c:71:81:6f:1f:dd:56:ab:8e:1c: 29:9e:5f:e2:1d:01:a2:62:2c:03:c3:1c:63:1b:ef:9a:02:2c: cf:38:62:bd:91:08:4a:84:09:32:6a:88:83:40:ae:f2:5c:18: 94:22:8e:56:70:b8:0a:3e:72:a9:aa:62:35:55:e5:70:42:91: b6:6d:42:fd:a8:35:d0:83:79:f7:97:d8:1a:ff:29:2e:02:3f: e0:42:8b:47:96:04:11:2f:2b:65:5c:57:02:2e:17:01:a3:e4: be:32:6b:2d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUVPOUuNnUDbBu3NhnhUKwQIja6KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkyN0MxNEVBMzVCQ0U5RjJCNzM2QUREQ0MwREUwQjFB MDdDOUUxNzAeFw0yNTAzMDYxMzQ3MDNaFw0yNjAzMDUxMzUyMDNaMDMxMTAvBgNV BAMTKERCMUExNEEyMDc0MzZFQkJDOTRGQTNEMjBEQjg4QzJFQjAyQjc3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKygJ65AVrTRTT3bTYaAKVaPj5 6BvY23z8cYiwv43KZ7dC/eA0dV7AI3WpkWvbyJzATxtrAcnsMuyRaAnzwd9TjwHG mWx8Tu6sz6cUXLHHjEa+lOEzioaV2qHOiC2JEgjLcTwIxmL2n+W4n1TRC8X9bYzK 6aqzM4BlN3dt9NyGSr/St6ABnv6ZnvtkRMuWDrDuXK1xBGztISR1eReCIGcTie9l 1/7Ea6AqyETX+7n++sOiW//0MPXhPs4HRh6fRz6GkTAsUQNozsebPXDbRHRj3Twh YjFG4sxC66gKhBBApNHavqw2lCO+iuDP7ZXRCmUG9qeCaedbV2J6jZMn/ijDAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU2xoUogdDbrvJT6PSDbiMLrArd3QwHwYDVR0j BBgwFoAUmSfBTqNbzp8rc2rdzA3gsaB8nhcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTl2RlNlS1RQcTE3UFpRNEhtQlFSVUZzZ1h1TFAyNlRYeDUxNHduRnhH czEvMi85OTI3QzE0RUEzNUJDRTlGMkI3MzZBRERDQzBERTBCMUEwN0M5RTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MjdDMTRFQTM1QkNFOUYy QjczNkFERENDMERFMEIxQTA3QzlFMTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0U5dkZTZUtUUHExN1BaUTRIbUJRUlVGc2dYdUxQMjZUWHg1MTR3bkZ4R3MxLzIv MzEzMzM4MmUzOTM5MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0 MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCimMMMA0GCSqGSIb3DQEBCwUAA4IBAQBGtRANOVhT 4BYoi6i8JlPb+7cRKzbISeEbK0T5LhQYoRR7GAZRR8+XX6M2hQ23fZWZHJ06LauE f/7Fge1/mkr2Br24AX7UBtUDPNg+rDKJMOVnx7izGzHEtO1x5GJ2J11zL9KQDHkW 79T6bzugrL1LrJGdqrhe4GSdWntKoEc3rjP9Tdv/eK4isCaRKDXDNuxI0cjXyyDv o5xxgW8f3Varjhwpnl/iHQGiYiwDwxxjG++aAizPOGK9kQhKhAkyaoiDQK7yXBiU Io5WcLgKPnKpqmI1VeVwQpG2bUL9qDXQg3n3l9ga/ykuAj/gQotHlgQRLytlXFcC LhcBo+S+Mmst -----END CERTIFICATE-----Generated at Mon Dec 22 06:13:49 2025 by rpki-client