This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135352e302f32342d3234203d3e20323638323537.roa File: 3133382e3138352e3135352e302f32342d3234203d3e20323638323537.roa (raw, json) Hash identifier: TmwJc6hmtHKV2UlRiO4BP6YwPjBgZRSN5uwP6bI0vds= Subject key identifier: 8C:96:8F:71:95:BC:1B:41:1B:B2:C4:5F:14:03:0E:37:C5:22:71:32 Certificate issuer: /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0 Certificate serial: 3AE8BA73CB8A0D76D5D1442FAF61B4E7D921508F Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135352e302f32342d3234203d3e20323638323537.roa Signing time: Fri 05 Dec 2025 18:03:28 +0000 ROA not before: Fri 05 Dec 2025 17:58:28 +0000 ROA not after: Fri 04 Dec 2026 18:03:28 +0000 asID: 268257 IP address blocks: 138.185.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 22:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e8:ba:73:cb:8a:0d:76:d5:d1:44:2f:af:61:b4:e7:d9:21:50:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0 Validity Not Before: Dec 5 17:58:28 2025 GMT Not After : Dec 4 18:03:28 2026 GMT Subject: CN=8C968F7195BC1B411BB2C45F14030E37C5227132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:b3:9a:83:62:35:42:88:81:dc:01:29:d7: 1c:5e:49:47:11:41:e2:b0:58:d4:c9:20:65:12:0f: 67:1b:6e:6f:e6:18:24:88:91:1f:b8:93:8e:e7:01: b2:76:17:dd:21:58:1c:c8:9d:69:27:98:b3:01:1c: d5:29:98:b2:91:02:c8:b4:74:f2:0c:52:f6:9d:5a: 76:9b:8c:ef:44:c2:0f:18:bd:06:6d:99:5c:3f:a8: 78:67:aa:58:e6:e9:ac:be:f0:16:83:42:78:c2:88: 0e:b8:a3:b9:29:1e:9e:53:00:84:78:c0:29:6f:01: c8:6c:cc:76:dd:5b:07:66:2a:dd:de:88:4c:80:6c: 0c:22:22:6e:7e:9f:52:8b:7c:9b:d9:16:66:d7:ef: 54:66:06:a5:87:a5:2e:b6:5f:1f:25:74:5f:14:e0: 30:56:b3:aa:5a:10:5d:a7:fb:4b:a7:f8:65:61:5f: 66:69:57:62:07:f5:a3:8b:11:78:58:6a:7d:53:16: 1c:36:8b:da:76:65:41:85:b7:e6:fe:a4:4d:cf:b7: 8c:10:31:3c:43:0d:52:42:0d:59:9c:a0:ab:5d:da: ab:5a:87:4d:8d:d7:41:14:38:d8:0a:c2:e2:f4:e0: 51:f4:10:5c:37:f3:33:fe:4f:8e:a6:a3:c7:38:03: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:96:8F:71:95:BC:1B:41:1B:B2:C4:5F:14:03:0E:37:C5:22:71:32 X509v3 Authority Key Identifier: keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135352e302f32342d3234203d3e20323638323537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.155.0/24 Signature Algorithm: sha256WithRSAEncryption 32:21:cc:6d:88:ac:0b:fa:9e:f4:15:4e:d6:04:76:2d:2f:93: ac:a0:36:82:c9:b3:58:6c:85:5e:17:6a:f1:1e:ed:15:43:f4: aa:f7:0b:fb:f3:11:ff:ff:c0:d5:c1:d9:5f:8d:1d:39:2f:9d: 1e:02:a0:9b:07:bb:2e:bf:5a:aa:68:74:55:12:6e:7f:0b:94: 50:06:26:a6:3a:a6:54:3b:af:83:ec:52:1d:8f:00:a6:2c:2b: 21:c5:59:33:8a:31:1e:a9:08:0a:b8:c1:59:bc:1b:ff:2d:77: bf:a6:57:39:3d:7e:29:b9:aa:ef:63:aa:86:ca:96:48:f9:12: d1:5f:f2:fb:ed:ae:bf:5f:92:49:d6:7d:21:18:60:3a:60:20: 54:b0:24:e0:59:15:18:93:d8:ff:b6:9e:84:98:64:eb:56:45: b1:64:10:6d:47:19:cc:a7:6e:be:76:3a:c6:7f:07:07:20:d0: 5a:30:8c:71:48:f8:f5:88:64:cf:bb:72:fa:1d:00:b9:bf:80: b9:c3:ed:c1:38:86:a5:fb:b7:b0:77:91:e7:12:f9:9d:2c:24: 33:90:72:b2:3c:be:1f:ff:cf:a5:55:3c:d3:24:7a:e7:0b:90: 9e:f5:35:25:94:61:03:4a:3a:2f:d0:8e:56:26:8d:e0:5e:83: b4:4a:ca:fd -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUOui6c8uKDXbV0UQvr2G059khUI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzOTVDMDE4NUZCMjhFMEZEQTM1NjFGREVFMjAyMjI3 QzFDQzhEMDAeFw0yNTEyMDUxNzU4MjhaFw0yNjEyMDQxODAzMjhaMDMxMTAvBgNV BAMTKDhDOTY4RjcxOTVCQzFCNDExQkIyQzQ1RjE0MDMwRTM3QzUyMjcxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCLOag2I1QoiB3AEp1xxeSUcR QeKwWNTJIGUSD2cbbm/mGCSIkR+4k47nAbJ2F90hWBzInWknmLMBHNUpmLKRAsi0 dPIMUvadWnabjO9Ewg8YvQZtmVw/qHhnqljm6ay+8BaDQnjCiA64o7kpHp5TAIR4 wClvAchszHbdWwdmKt3eiEyAbAwiIm5+n1KLfJvZFmbX71RmBqWHpS62Xx8ldF8U 4DBWs6paEF2n+0un+GVhX2ZpV2IH9aOLEXhYan1TFhw2i9p2ZUGFt+b+pE3Pt4wQ MTxDDVJCDVmcoKtd2qtah02N10EUONgKwuL04FH0EFw38zP+T46mo8c4A8WHAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUjJaPcZW8G0EbssRfFAMON8UicTIwHwYDVR0j BBgwFoAUlTlcAYX7KOD9o1Yf3uICInwcyNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTFlNEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxR blgvMC85NTM5NUMwMTg1RkIyOEUwRkRBMzU2MUZERUUyMDIyMjdDMUNDOEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1Mzk1QzAxODVGQjI4RTBG REEzNTYxRkRFRTIwMjIyN0MxQ0M4RDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzUxZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAv MzEzMzM4MmUzMTM4MzUyZTMxMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzODMyMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq5mzANBgkqhkiG9w0BAQsFAAOCAQEAMiHM bYisC/qe9BVO1gR2LS+TrKA2gsmzWGyFXhdq8R7tFUP0qvcL+/MR///A1cHZX40d OS+dHgKgmwe7Lr9aqmh0VRJufwuUUAYmpjqmVDuvg+xSHY8ApiwrIcVZM4oxHqkI CrjBWbwb/y13v6ZXOT1+Kbmq72OqhsqWSPkS0V/y++2uv1+SSdZ9IRhgOmAgVLAk 4FkVGJPY/7aehJhk61ZFsWQQbUcZzKduvnY6xn8HByDQWjCMcUj49Yhkz7ty+h0A ub+AucPtwTiGpfu3sHeR5xL5nSwkM5Bysjy+H//PpVU80yR65wuQnvU1JZRhA0o6 L9COViaN4F6DtErK/Q== -----END CERTIFICATE-----Generated at Sat Dec 20 08:51:36 2025 by rpki-client