This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133342e302f32342d3234203d3e20323634353437.roa File: 3133382e302e3133342e302f32342d3234203d3e20323634353437.roa (raw, json) Hash identifier: ub3127nINXdd7UFefVY5GyGeQcGpGogscwyR3hZ93r8= Subject key identifier: B7:CD:72:87:58:C0:9F:A1:40:FE:AC:06:97:F8:89:E8:5F:9F:7B:75 Certificate issuer: /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC Certificate serial: 5F4F2B1EFCA3CBBF395A9435B745BFD7E349870E Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer Subject info access: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133342e302f32342d3234203d3e20323634353437.roa Signing time: Fri 05 Dec 2025 21:18:00 +0000 ROA not before: Fri 05 Dec 2025 21:13:00 +0000 ROA not after: Fri 04 Dec 2026 21:18:00 +0000 asID: 264547 IP address blocks: 138.0.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 15:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4f:2b:1e:fc:a3:cb:bf:39:5a:94:35:b7:45:bf:d7:e3:49:87:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC Validity Not Before: Dec 5 21:13:00 2025 GMT Not After : Dec 4 21:18:00 2026 GMT Subject: CN=B7CD728758C09FA140FEAC0697F889E85F9F7B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:91:0b:a9:7f:a5:59:ff:c0:22:d8:fd:63: 25:01:23:c4:70:a1:cb:cf:6e:2d:d1:70:20:39:4a: b3:9c:ef:4a:3b:6a:eb:43:9b:87:8e:5a:f0:02:95: a5:bc:ea:82:52:e9:3d:cc:6c:96:a6:1e:f1:de:61: 9a:87:2a:63:2f:85:28:2a:46:39:17:2c:40:1a:5e: f6:5c:24:a7:a2:9f:5a:56:5d:0c:b7:fb:fc:2d:d4: c8:69:b4:66:97:2b:f8:9b:0f:ff:a7:2b:c1:0d:32: cc:9b:22:08:53:31:95:59:ce:ad:c0:f4:af:af:52: fb:57:08:f9:0c:ea:95:38:f3:a9:fe:f7:6f:98:05: 66:14:09:47:8e:50:36:6f:bd:cc:2a:f7:fa:79:fd: 23:78:2b:d9:46:fd:cc:59:fc:00:f9:0b:bb:49:ac: 2d:65:75:e0:44:d5:e6:81:d1:df:b8:69:ee:f9:d5: 42:57:6f:fe:30:45:81:78:c5:33:46:56:7e:0e:07: ad:a3:a4:b0:3b:44:8d:4a:c4:df:0d:73:cf:d7:1c: a9:e2:ec:b5:13:26:03:a1:d8:73:d1:e1:a2:7d:f2: f9:c6:05:81:67:30:3c:78:11:91:c8:0e:97:86:de: c7:d2:8e:fb:04:ed:fb:de:cc:5e:12:96:3c:f6:64: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CD:72:87:58:C0:9F:A1:40:FE:AC:06:97:F8:89:E8:5F:9F:7B:75 X509v3 Authority Key Identifier: keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133342e302f32342d3234203d3e20323634353437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.134.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f7:ca:5c:d7:3e:37:9a:63:cb:66:2e:e4:15:6e:81:87:8a: 8d:43:d8:64:63:bf:63:28:ba:b5:59:2e:df:3b:d2:fc:8f:37: 7f:ad:ad:d8:b5:c6:09:1d:57:d5:56:7c:21:45:f3:0f:8d:6d: c3:2b:e9:4e:d1:65:4e:b1:5c:d4:05:c8:d9:c5:2b:95:2e:32: 77:51:3c:ba:79:30:64:d9:7b:81:b1:d4:39:6a:c8:61:f0:42: 6d:12:d0:9e:78:ee:3d:6c:cc:56:9f:16:34:b1:a8:09:04:be: b3:8c:f3:46:d7:58:5d:b2:e8:02:90:33:ba:c7:5e:dd:11:89: 03:86:c2:22:e5:b1:fe:71:f1:ab:25:16:82:5b:f8:4f:dc:8e: 91:7b:8f:0c:f1:50:e5:77:5c:e7:9a:de:f6:c4:ff:0b:3d:94: 0b:10:46:16:05:ac:1f:d9:70:50:9f:84:a5:b0:96:b8:02:fc: b8:80:59:c7:6c:5e:1d:41:fe:8d:2d:bc:83:17:18:59:b4:ec: 51:d1:ff:1a:48:ed:1c:40:ff:17:d1:0b:02:cf:04:1b:3a:02: 8e:8b:f2:fe:e0:b4:8a:0c:f7:46:32:b3:21:a4:d9:e4:06:e5: c7:8e:ea:da:b5:df:d4:f6:33:d1:2f:6b:98:50:dc:22:f5:8d: 03:c4:e0:1e -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUX08rHvyjy785WpQ1t0W/1+NJhw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY0RjdFQkExM0M0M0QxRkI4RUFDQ0JDQzBENDJFOUEy OEJDNUVBQzAeFw0yNTEyMDUyMTEzMDBaFw0yNjEyMDQyMTE4MDBaMDMxMTAvBgNV BAMTKEI3Q0Q3Mjg3NThDMDlGQTE0MEZFQUMwNjk3Rjg4OUU4NUY5RjdCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91JELqX+lWf/AItj9YyUBI8Rw ocvPbi3RcCA5SrOc70o7autDm4eOWvAClaW86oJS6T3MbJamHvHeYZqHKmMvhSgq RjkXLEAaXvZcJKein1pWXQy3+/wt1MhptGaXK/ibD/+nK8ENMsybIghTMZVZzq3A 9K+vUvtXCPkM6pU486n+92+YBWYUCUeOUDZvvcwq9/p5/SN4K9lG/cxZ/AD5C7tJ rC1ldeBE1eaB0d+4ae751UJXb/4wRYF4xTNGVn4OB62jpLA7RI1KxN8Nc8/XHKni 7LUTJgOh2HPR4aJ98vnGBYFnMDx4EZHIDpeG3sfSjvsE7fvezF4Sljz2ZLF1AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUt81yh1jAn6FA/qwGl/iJ6F+fe3UwHwYDVR0j BBgwFoAURk9+uhPEPR+46sy8wNQumii8XqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmtLZEhtY3huRkxOSkJMTDRtTkpiUzMxVVY2d2ZIbWlRZjJRNmJFcENL bzIvMC80NjRGN0VCQTEzQzQzRDFGQjhFQUNDQkNDMEQ0MkU5QTI4QkM1RUFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NEY3RUJBMTNDNDNEMUZC OEVBQ0NCQ0MwRDQyRTlBMjhCQzVFQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZrS2RIbWN4bkZMTkpCTEw0bU5KYlMzMVVWNndmSG1pUWYyUTZiRXBDS28yLzAv MzEzMzM4MmUzMDJlMzEzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0 MzUzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAigCGMA0GCSqGSIb3DQEBCwUAA4IBAQBv98pc1z43 mmPLZi7kFW6Bh4qNQ9hkY79jKLq1WS7fO9L8jzd/ra3YtcYJHVfVVnwhRfMPjW3D K+lO0WVOsVzUBcjZxSuVLjJ3UTy6eTBk2XuBsdQ5ashh8EJtEtCeeO49bMxWnxY0 sagJBL6zjPNG11hdsugCkDO6x17dEYkDhsIi5bH+cfGrJRaCW/hP3I6Re48M8VDl d1znmt72xP8LPZQLEEYWBawf2XBQn4SlsJa4Avy4gFnHbF4dQf6NLbyDFxhZtOxR 0f8aSO0cQP8X0QsCzwQbOgKOi/L+4LSKDPdGMrMhpNnkBuXHjuratd/U9jPRL2uY UNwi9Y0DxOAe -----END CERTIFICATE-----Generated at Tue Dec 23 07:57:41 2025 by rpki-client