This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131322e302f32322d3232203d3e20323633353336.roa File: 3230312e33332e3131322e302f32322d3232203d3e20323633353336.roa (raw, json) Hash identifier: J3J+icnUTTSPUyQG7zHiezTbIB6IblVRxRkK8/GTuCA= Subject key identifier: 40:12:89:87:F2:44:01:90:C8:4F:42:69:7D:AD:52:52:BB:53:F5:AB Certificate issuer: /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0 Certificate serial: 0E6F96A48A3BF6F580B2D9DCEFD7E5B0F011E221 Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131322e302f32322d3232203d3e20323633353336.roa Signing time: Mon 15 Dec 2025 14:29:46 +0000 ROA not before: Mon 15 Dec 2025 14:24:46 +0000 ROA not after: Mon 14 Dec 2026 14:29:46 +0000 asID: 263536 IP address blocks: 201.33.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6f:96:a4:8a:3b:f6:f5:80:b2:d9:dc:ef:d7:e5:b0:f0:11:e2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0 Validity Not Before: Dec 15 14:24:46 2025 GMT Not After : Dec 14 14:29:46 2026 GMT Subject: CN=40128987F2440190C84F42697DAD5252BB53F5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:16:86:48:72:8d:fa:01:99:67:00:65:d3: 14:e1:b1:82:c8:76:4c:3e:5d:06:6a:d2:03:de:a7: 13:81:c8:84:19:ae:8a:e7:27:aa:82:db:49:65:cd: d9:4c:29:77:30:af:ad:36:97:df:98:f2:80:72:64: f8:1a:ca:a2:de:bc:b2:a9:66:aa:7f:21:ad:2e:bc: 6a:47:28:4d:3f:ca:69:e0:e6:48:70:df:bf:6e:bf: 09:1b:53:3b:9d:81:1e:c5:b8:9d:cc:88:a8:ba:f3: ab:a3:c9:27:72:12:ed:bf:f0:c1:38:d8:ce:29:31: 22:07:60:01:e6:fb:41:12:24:49:66:aa:89:1f:ca: 3f:eb:dc:5c:7c:c2:61:c4:d3:aa:d7:6b:2c:3f:1e: 2f:be:b0:32:e6:87:8d:93:ed:a3:4d:6c:9c:75:4b: 34:73:8e:42:fb:70:07:58:5c:eb:9b:ce:48:79:0f: 2f:79:92:ce:77:c6:8c:c3:ab:ea:9f:17:8c:41:8f: 6f:a3:51:c9:27:4d:58:94:59:f2:c8:4b:f6:c5:ab: 34:cc:ef:1b:32:ac:df:c6:0e:b7:86:ee:47:2f:87: 32:3a:0b:0f:ef:23:4d:56:18:ee:48:08:56:c9:70: bd:d6:44:e5:78:af:6a:1f:8b:94:d2:d6:44:4e:e5: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:12:89:87:F2:44:01:90:C8:4F:42:69:7D:AD:52:52:BB:53:F5:AB X509v3 Authority Key Identifier: keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131322e302f32322d3232203d3e20323633353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.112.0/22 Signature Algorithm: sha256WithRSAEncryption b4:a9:e0:71:23:58:23:09:2f:5b:a9:c1:e1:e8:cd:d4:34:41: 07:8e:7d:c9:17:8e:a0:14:50:23:ae:bd:c4:38:46:55:dc:94: 35:1b:83:97:97:a4:29:86:4c:29:f2:29:9f:45:c1:e6:03:c6: 43:47:5f:b5:7b:df:e7:a8:1e:31:00:34:c1:e5:af:93:60:31: b2:dc:e2:51:97:58:63:b9:00:94:f0:c5:5d:70:f5:2e:97:ad: 7b:9f:fa:42:dc:c1:bd:53:93:f7:d7:b6:6c:d4:13:3a:81:ef: c1:e3:d3:67:42:67:ad:a4:a0:42:fa:66:3b:3b:6b:80:d3:6a: 97:d5:37:6d:19:72:7b:93:65:1c:a1:e3:f2:ee:ae:77:c3:71: 18:a8:e8:6a:47:ae:46:15:3f:df:d1:25:f1:25:51:c8:e8:c1: 54:7d:26:54:76:91:58:07:0d:a1:96:ee:74:8f:b3:14:1d:ca: 41:91:4f:a6:e1:8e:d5:1e:8d:4d:e8:49:b7:b5:b0:65:2c:a3: 50:0c:3f:d8:70:7e:29:36:5a:5a:9c:55:63:3b:48:c7:fd:8a: f3:c4:68:dc:19:ed:96:ff:88:0e:f3:ae:ba:ab:5d:6a:4e:f7: ce:3c:0a:96:bc:32:fe:1e:35:2c:96:ef:1c:91:c7:0d:ef:94: 7c:df:e5:50 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUDm+WpIo79vWAstnc79flsPAR4iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDExQUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1 NjgzQUREMDAeFw0yNTEyMTUxNDI0NDZaFw0yNjEyMTQxNDI5NDZaMDMxMTAvBgNV BAMTKDQwMTI4OTg3RjI0NDAxOTBDODRGNDI2OTdEQUQ1MjUyQkI1M0Y1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vRaGSHKN+gGZZwBl0xThsYLI dkw+XQZq0gPepxOByIQZrornJ6qC20llzdlMKXcwr602l9+Y8oByZPgayqLevLKp Zqp/Ia0uvGpHKE0/ymng5khw379uvwkbUzudgR7FuJ3MiKi686ujySdyEu2/8ME4 2M4pMSIHYAHm+0ESJElmqokfyj/r3Fx8wmHE06rXayw/Hi++sDLmh42T7aNNbJx1 SzRzjkL7cAdYXOubzkh5Dy95ks53xozDq+qfF4xBj2+jUcknTViUWfLIS/bFqzTM 7xsyrN/GDreG7kcvhzI6Cw/vI01WGO5ICFbJcL3WROV4r2ofi5TS1kRO5aCTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQBKJh/JEAZDIT0Jpfa1SUrtT9aswHwYDVR0j BBgwFoAU0Rq/XqBzNji0ovzr6slRe1aDrdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw OGIvMS9EMTFBQkY1RUEwNzMzNjM4QjRBMkZDRUJFQUM5NTE3QjU2ODNBREQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUFCRjVFQTA3MzM2MzhC NEEyRkNFQkVBQzk1MTdCNTY4M0FERDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEv MzIzMDMxMmUzMzMzMmUzMTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzMzNTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALJIXAwDQYJKoZIhvcNAQELBQADggEBALSp4HEj WCMJL1upweHozdQ0QQeOfckXjqAUUCOuvcQ4RlXclDUbg5eXpCmGTCnyKZ9FweYD xkNHX7V73+eoHjEANMHlr5NgMbLc4lGXWGO5AJTwxV1w9S6XrXuf+kLcwb1Tk/fX tmzUEzqB78Hj02dCZ62koEL6Zjs7a4DTapfVN20ZcnuTZRyh4/LurnfDcRio6GpH rkYVP9/RJfElUcjowVR9JlR2kVgHDaGW7nSPsxQdykGRT6bhjtUejU3oSbe1sGUs o1AMP9hwfik2WlqcVWM7SMf9ivPEaNwZ7Zb/iA7zrrqrXWpO9848Cpa8Mv4eNSyW 7xyRxw3vlHzf5VA= -----END CERTIFICATE-----Generated at Sat Dec 20 14:45:31 2025 by rpki-client