This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/3133382e3132312e32342e302f32322d3234203d3e20323634323735.roa File: 3133382e3132312e32342e302f32322d3234203d3e20323634323735.roa (raw, json) Hash identifier: kZAXLtLVt+ntoKZh1KtpxG7YN2Z3jbkRVbUq0yMpdXo= Subject key identifier: 6F:91:EC:CA:90:C7:BC:58:D4:F4:34:10:50:9A:72:EF:7A:F5:E1:13 Certificate issuer: /CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797 Certificate serial: 75977D7DF24A7A43C759AC39523270FBDABE6A16 Authority key identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer Subject info access: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/3133382e3132312e32342e302f32322d3234203d3e20323634323735.roa Signing time: Wed 17 Dec 2025 23:22:47 +0000 ROA not before: Wed 17 Dec 2025 23:17:47 +0000 ROA not after: Wed 16 Dec 2026 23:22:47 +0000 asID: 264275 IP address blocks: 138.121.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 21:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:97:7d:7d:f2:4a:7a:43:c7:59:ac:39:52:32:70:fb:da:be:6a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797 Validity Not Before: Dec 17 23:17:47 2025 GMT Not After : Dec 16 23:22:47 2026 GMT Subject: CN=6F91ECCA90C7BC58D4F43410509A72EF7AF5E113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:08:ac:4a:fd:ed:d2:33:16:bb:84:ab:cf: 92:26:c0:38:0a:c0:f4:c7:15:1e:61:8c:4d:31:2f: 2e:00:65:15:7e:de:b6:6b:4c:dd:38:79:1b:f4:a4: 67:9e:19:e5:ba:bd:b0:6f:87:b2:01:bd:1e:86:f6: e3:0e:54:e5:ed:c2:cd:e5:19:a5:bf:5a:90:5e:9b: ad:c1:af:a7:0e:7c:fe:30:e1:c7:f0:d2:f8:f2:93: 75:80:24:22:87:04:b0:9e:c6:7d:02:d1:09:fe:cd: a6:1d:f6:f1:d6:b4:11:b5:45:d7:09:9a:24:53:31: 3e:e9:70:33:e0:5f:6a:d5:cd:79:e1:c6:fc:28:3a: c5:c8:60:f0:da:63:fb:83:49:fb:97:ca:c2:e8:30: ef:7c:4a:6e:ed:56:e7:25:4f:b5:3e:83:e9:fc:52: a0:cf:b1:4a:98:ff:68:2e:46:69:39:c7:f1:5b:46: 82:b5:44:f0:31:66:4f:43:e0:f1:91:a0:c9:0f:b6: 83:cc:e9:44:37:aa:4a:89:f7:d5:1c:08:ef:3f:ce: 95:8f:00:f8:55:14:98:1e:cc:63:7a:b4:bc:53:af: 43:27:62:64:c2:79:0a:42:df:a9:7d:6d:7e:7a:fe: 39:e4:e9:7c:f5:7d:d6:4f:e6:a5:5f:14:6d:88:ce: 07:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:EC:CA:90:C7:BC:58:D4:F4:34:10:50:9A:72:EF:7A:F5:E1:13 X509v3 Authority Key Identifier: keyid:D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/3133382e3132312e32342e302f32322d3234203d3e20323634323735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.24.0/22 Signature Algorithm: sha256WithRSAEncryption 61:21:bd:c1:a7:8d:c7:98:30:29:b0:24:8f:33:82:2c:28:98: c3:14:3e:f0:9f:bf:b5:20:65:a9:2e:27:5e:d9:d6:ba:60:b3: 33:fa:2d:d8:34:0a:41:46:24:76:d2:42:df:2d:3c:f1:9a:37: 8e:56:37:8b:b7:11:7e:43:80:9f:53:35:14:fe:2e:7c:7a:9a: 30:81:a7:da:e5:81:3e:ac:d8:49:c4:10:bb:26:09:ec:16:2a: 20:5c:c2:cb:31:30:62:df:81:dc:eb:10:29:d4:f3:17:87:4d: 61:22:bf:b1:37:54:0d:7b:dd:5c:85:69:7f:93:25:7d:d1:af: a2:d2:37:70:1a:ce:ae:2f:c8:8d:98:59:3c:05:c2:05:98:88: 6f:71:c8:d9:0d:a0:fa:7e:43:97:fe:73:89:52:9e:42:6e:5b: 4e:94:f1:81:26:d5:81:7b:f7:73:34:09:ba:b4:43:f6:cd:f5: 30:52:68:96:c4:36:8b:6b:23:5e:be:61:27:24:05:ae:b5:fc: cc:24:2f:1d:bf:7b:83:1e:71:9f:c0:ad:7e:64:e7:66:0d:ab: 2b:8f:9c:4c:c3:21:a3:c1:22:98:a9:f8:45:72:cc:75:16:0d: 59:e3:ea:94:cb:93:d4:76:e2:9f:3a:08:0d:2a:0d:84:a1:d7: c0:c8:72:99 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUdZd9ffJKekPHWaw5UjJw+9q+ahYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEYxN0U4RkVBQTcxMTQwMzI3RkY4MzRGQzAxRTVE RDQwRTc5NzAeFw0yNTEyMTcyMzE3NDdaFw0yNjEyMTYyMzIyNDdaMDMxMTAvBgNV BAMTKDZGOTFFQ0NBOTBDN0JDNThENEY0MzQxMDUwOUE3MkVGN0FGNUUxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0wisSv3t0jMWu4Srz5ImwDgK wPTHFR5hjE0xLy4AZRV+3rZrTN04eRv0pGeeGeW6vbBvh7IBvR6G9uMOVOXtws3l GaW/WpBem63Br6cOfP4w4cfw0vjyk3WAJCKHBLCexn0C0Qn+zaYd9vHWtBG1RdcJ miRTMT7pcDPgX2rVzXnhxvwoOsXIYPDaY/uDSfuXysLoMO98Sm7tVuclT7U+g+n8 UqDPsUqY/2guRmk5x/FbRoK1RPAxZk9D4PGRoMkPtoPM6UQ3qkqJ99UcCO8/zpWP APhVFJgezGN6tLxTr0MnYmTCeQpC36l9bX56/jnk6Xz1fdZP5qVfFG2IzgcTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUb5HsypDHvFjU9DQQUJpy73r14RMwHwYDVR0j BBgwFoAU2cTxfo/qpxFAMn/4NPwB5d1A55cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjdwVXhBYnpyS2M3Unk3aFhkbWFSRUtETmpkdHNySm5xOTJ1dk53NnMy WEwvMC9EOUM0RjE3RThGRUFBNzExNDAzMjdGRjgzNEZDMDFFNURENDBFNzk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QzRGMTdFOEZFQUE3MTE0 MDMyN0ZGODM0RkMwMUU1REQ0MEU3OTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzI3cFV4QWJ6cktjN1J5N2hYZG1hUkVLRE5qZHRzckpucTkydXZOdzZzMlhMLzAv MzEzMzM4MmUzMTMyMzEyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKeRgwDQYJKoZIhvcNAQELBQADggEBAGEhvcGn jceYMCmwJI8zgiwomMMUPvCfv7UgZakuJ17Z1rpgszP6Ldg0CkFGJHbSQt8tPPGa N45WN4u3EX5DgJ9TNRT+Lnx6mjCBp9rlgT6s2EnEELsmCewWKiBcwssxMGLfgdzr ECnU8xeHTWEiv7E3VA173VyFaX+TJX3Rr6LSN3Aazq4vyI2YWTwFwgWYiG9xyNkN oPp+Q5f+c4lSnkJuW06U8YEm1YF793M0Cbq0Q/bN9TBSaJbENotrI16+YSckBa61 /MwkLx2/e4MecZ/ArX5k52YNqyuPnEzDIaPBIpip+EVyzHUWDVnj6pTLk9R24p86 CA0qDYSh18DIcpk= -----END CERTIFICATE-----Generated at Sun Dec 21 23:02:30 2025 by rpki-client