This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa File: 3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (raw, json) Hash identifier: AMezI+3/VYL+4dEHq7wfOMm5kyTBcVPmAvTT7WTDOpY= Subject key identifier: 69:41:86:30:0F:B9:07:87:5F:FF:1B:CC:F8:04:CB:B9:BE:FD:EC:12 Certificate issuer: /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Certificate serial: 61F1C2D9A34FDE243D5AD1B9D86E7E82D600AA6C Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject info access: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa Signing time: Mon 22 Dec 2025 15:34:13 +0000 ROA not before: Mon 22 Dec 2025 15:29:13 +0000 ROA not after: Mon 21 Dec 2026 15:34:13 +0000 asID: 270418 IP address blocks: 190.111.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 11:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f1:c2:d9:a3:4f:de:24:3d:5a:d1:b9:d8:6e:7e:82:d6:00:aa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Validity Not Before: Dec 22 15:29:13 2025 GMT Not After : Dec 21 15:34:13 2026 GMT Subject: CN=694186300FB907875FFF1BCCF804CBB9BEFDEC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:ee:37:e4:82:62:ab:5a:17:f3:0d:c3:0f: c8:05:d4:9f:ee:b9:d7:7e:15:b9:ed:05:43:e1:02: d4:51:33:0d:fb:11:d9:51:62:6d:21:7e:dd:88:ad: 30:97:32:78:a9:78:a7:bb:b3:d0:c7:12:70:61:3f: cd:6f:9f:47:11:71:30:93:cc:df:28:b4:be:1d:b3: d7:5c:5f:ca:68:7f:1f:01:4e:c3:7a:79:c0:71:85: 0b:44:fa:3c:87:2a:86:18:3a:d7:de:b7:3c:1e:0d: d4:83:42:81:dd:f5:8c:7e:f4:c2:ce:00:41:92:7c: 26:42:e3:41:04:18:ad:2a:4b:07:b5:8e:1f:76:b5: cd:73:38:58:a5:93:88:df:19:a4:46:af:69:ae:54: 80:d3:ac:4f:52:7a:84:4f:dd:70:16:d8:a6:49:85: 0e:c8:79:0a:2c:05:37:14:aa:a6:3e:ae:48:8f:20: 3c:89:5b:cc:3e:d3:b9:91:5e:0d:e6:1d:95:51:c3: 7e:74:4a:c8:dd:dc:8b:85:44:22:7f:f2:a3:6a:d6: ef:36:d6:40:f7:13:1b:28:0f:35:20:86:9d:a6:d8: 19:17:1b:a9:13:db:18:cb:a9:f4:11:fb:44:1c:41: 02:59:41:f3:1d:c3:26:3a:d9:37:b5:82:e6:72:1f: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:41:86:30:0F:B9:07:87:5F:FF:1B:CC:F8:04:CB:B9:BE:FD:EC:12 X509v3 Authority Key Identifier: keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.168.0/22 Signature Algorithm: sha256WithRSAEncryption 23:0d:bf:31:d8:28:28:05:ff:df:9d:46:41:5b:0a:6e:71:16: 89:61:0e:01:bd:56:3b:a1:1a:07:4b:14:6d:58:8e:80:be:b5: 47:ff:01:0a:c8:a2:b9:5f:82:23:cd:af:3d:3e:df:78:dc:b2: 8e:bb:db:97:c0:97:74:bd:1b:b7:0d:7c:36:90:89:e1:e2:a6: d8:ef:4f:95:86:5d:10:3d:7b:e7:5d:8b:0e:af:7c:7a:26:72: bb:00:6f:ee:5c:93:7f:08:09:4b:00:f1:7c:7d:9b:a4:3a:b2: 6a:39:04:53:57:8b:e6:fe:32:61:fb:b8:d7:55:91:78:72:02: 69:6b:89:12:7e:00:ac:46:ac:2f:6d:98:1d:3c:11:44:ab:86: 1a:f1:17:ad:5c:06:ea:64:81:37:f6:89:a9:89:5e:72:09:6e: b6:a1:8b:86:ae:15:d0:d2:01:db:d3:64:89:61:62:7a:eb:fa: e6:5e:26:ad:e9:a5:84:82:3f:a8:5e:7e:6d:2a:22:5a:4a:18: 14:f1:c1:fb:11:19:d8:b2:2b:c4:15:93:42:79:ce:0a:6f:ee: 47:7a:2c:6f:fc:2f:d5:9e:1f:45:f3:75:5e:16:c3:aa:8e:45: 1c:e7:0a:53:84:60:97:d3:94:e9:52:79:5b:c8:e2:fe:d1:88: dc:c1:a9:cd -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUYfHC2aNP3iQ9WtG52G5+gtYAqmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFRjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUx ODhERTg0MjAeFw0yNTEyMjIxNTI5MTNaFw0yNjEyMjExNTM0MTNaMDMxMTAvBgNV BAMTKDY5NDE4NjMwMEZCOTA3ODc1RkZGMUJDQ0Y4MDRDQkI5QkVGREVDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6+435IJiq1oX8w3DD8gF1J/u udd+FbntBUPhAtRRMw37EdlRYm0hft2IrTCXMnipeKe7s9DHEnBhP81vn0cRcTCT zN8otL4ds9dcX8pofx8BTsN6ecBxhQtE+jyHKoYYOtfetzweDdSDQoHd9Yx+9MLO AEGSfCZC40EEGK0qSwe1jh92tc1zOFilk4jfGaRGr2muVIDTrE9SeoRP3XAW2KZJ hQ7IeQosBTcUqqY+rkiPIDyJW8w+07mRXg3mHZVRw350Ssjd3IuFRCJ/8qNq1u82 1kD3ExsoDzUghp2m2BkXG6kT2xjLqfQR+0QcQQJZQfMdwyY62Te1guZyH14zAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUaUGGMA+5B4df/xvM+ATLub797BIwHwYDVR0j BBgwFoAUze8f1mkNzO1SBTOO4Lx9DhiN6EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5 YUcvMC9DREVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERUYxRkQ2NjkwRENDRUQ1 MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVLMUI1RGlNc2hwQ3R4d3pqV1U5V3hjeVJEWkcyeEo4REpHcnlxQkw2eWFHLzAv MzEzOTMwMmUzMTMxMzEyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzczMDM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5vqDANBgkqhkiG9w0BAQsFAAOCAQEAIw2/ MdgoKAX/351GQVsKbnEWiWEOAb1WO6EaB0sUbViOgL61R/8BCsiiuV+CI82vPT7f eNyyjrvbl8CXdL0btw18NpCJ4eKm2O9PlYZdED17512LDq98eiZyuwBv7lyTfwgJ SwDxfH2bpDqyajkEU1eL5v4yYfu411WReHICaWuJEn4ArEasL22YHTwRRKuGGvEX rVwG6mSBN/aJqYlecglutqGLhq4V0NIB29NkiWFieuv65l4mremlhII/qF5+bSoi WkoYFPHB+xEZ2LIrxBWTQnnOCm/uR3osb/wv1Z4fRfN1XhbDqo5FHOcKU4Rgl9OU 6VJ5W8ji/tGI3MGpzQ== -----END CERTIFICATE-----Generated at Tue Dec 23 13:10:46 2025 by rpki-client