This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3132302e302f32322d3232203d3e20323633353336.roa File: 3230312e33332e3132302e302f32322d3232203d3e20323633353336.roa (raw, json) Hash identifier: Kbip5ng+mn8typKRife1OTvYuctXBLA5KhlaCNp6Qj4= Subject key identifier: DD:FB:34:E1:68:4D:11:99:39:C1:15:8A:73:E1:0D:CF:AB:FC:DD:9F Certificate issuer: /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0 Certificate serial: 600E864C7B1D2438F7D9B07E920B88AE7122CBEC Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3132302e302f32322d3232203d3e20323633353336.roa Signing time: Mon 15 Dec 2025 14:31:15 +0000 ROA not before: Mon 15 Dec 2025 14:26:15 +0000 ROA not after: Mon 14 Dec 2026 14:31:15 +0000 asID: 263536 IP address blocks: 201.33.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0e:86:4c:7b:1d:24:38:f7:d9:b0:7e:92:0b:88:ae:71:22:cb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0 Validity Not Before: Dec 15 14:26:15 2025 GMT Not After : Dec 14 14:31:15 2026 GMT Subject: CN=DDFB34E1684D119939C1158A73E10DCFABFCDD9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8b:d2:70:6e:8d:ac:02:ce:2d:38:2a:16:20: ed:e0:0e:c6:05:6f:e8:ae:49:cf:6c:5d:6a:9c:ac: e2:87:c3:3d:3a:5b:28:73:15:46:c4:b8:35:55:cb: 31:39:6f:06:ae:2b:00:7f:6f:a4:96:00:ac:55:98: e0:aa:67:a0:a6:18:bf:ef:62:0b:d8:2f:29:b1:29: 65:04:2e:b2:01:41:dc:b3:17:72:33:50:15:df:cd: ff:89:64:aa:01:6d:0d:e9:d0:23:7c:17:5a:94:ec: 15:c5:9c:6d:38:6d:be:b8:d3:9b:be:d2:c7:82:69: 23:78:a2:c4:d7:26:39:f2:e1:14:31:2d:25:57:d0: 21:7c:13:3f:96:67:f1:d1:b5:60:9d:87:92:17:c4: 60:5d:80:cd:04:b5:5f:bb:2f:75:06:10:75:ea:91: 49:41:c0:c9:00:ae:a3:0f:bf:d8:eb:84:e1:a3:d5: c9:cd:b4:6e:34:21:18:09:39:b2:23:98:a2:41:62: 47:63:84:ec:15:7a:18:38:ea:f8:8e:ca:b0:12:3a: 1d:12:cd:d0:28:c8:9a:4b:31:2b:e5:b4:91:15:49: b5:fb:bc:84:97:a6:59:6a:16:da:e5:d1:1f:62:c0: 68:d4:2e:b3:96:cc:f7:0f:07:69:d4:af:bf:dd:ab: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:34:E1:68:4D:11:99:39:C1:15:8A:73:E1:0D:CF:AB:FC:DD:9F X509v3 Authority Key Identifier: keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3132302e302f32322d3232203d3e20323633353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.120.0/22 Signature Algorithm: sha256WithRSAEncryption 32:37:7a:01:71:fd:2b:82:c8:bc:f9:be:17:b4:39:27:14:7c: 20:88:3e:22:0a:3a:fa:d5:d7:03:ae:06:26:fe:57:b1:fa:f5: 83:2f:bd:14:fe:59:25:ec:66:58:b0:93:7b:13:f1:38:ab:ae: 57:0d:9b:cf:95:8f:30:18:30:9e:85:84:53:51:d1:63:f1:9b: 63:b0:d7:b6:ae:62:5d:d2:01:7c:f5:06:ac:60:7b:b1:4f:30: 09:69:34:9a:5e:85:8a:78:a8:dc:f9:6b:c3:8e:1d:fe:47:04: 97:90:b4:e9:b4:a8:2e:08:d2:55:d2:98:17:0f:bb:d5:c6:47: 01:ad:a8:3e:96:ea:d0:59:d2:1c:ef:14:3f:ef:d8:79:9e:d2: ee:39:d3:c7:18:b8:23:16:77:5a:8e:ba:17:02:4e:cd:87:d3: 74:2e:c3:d0:d5:30:50:c1:88:27:82:73:6f:e9:2d:ab:aa:c2: a0:8f:7b:9d:0a:e2:76:93:02:e6:c1:1c:66:57:e2:f9:0f:02: 27:bd:8c:da:97:e4:ed:30:09:9c:1f:06:df:0e:b2:b6:a4:10: 90:a1:56:d6:25:7b:e7:71:31:04:32:51:29:e9:2e:58:ba:40: 6a:bf:ce:6a:58:84:2c:a4:ce:98:00:64:9d:ff:46:2e:5c:3d: 33:aa:7b:e8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUYA6GTHsdJDj32bB+kguIrnEiy+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDExQUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1 NjgzQUREMDAeFw0yNTEyMTUxNDI2MTVaFw0yNjEyMTQxNDMxMTVaMDMxMTAvBgNV BAMTKERERkIzNEUxNjg0RDExOTkzOUMxMTU4QTczRTEwRENGQUJGQ0REOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxi9Jwbo2sAs4tOCoWIO3gDsYF b+iuSc9sXWqcrOKHwz06WyhzFUbEuDVVyzE5bwauKwB/b6SWAKxVmOCqZ6CmGL/v YgvYLymxKWUELrIBQdyzF3IzUBXfzf+JZKoBbQ3p0CN8F1qU7BXFnG04bb6405u+ 0seCaSN4osTXJjny4RQxLSVX0CF8Ez+WZ/HRtWCdh5IXxGBdgM0EtV+7L3UGEHXq kUlBwMkArqMPv9jrhOGj1cnNtG40IRgJObIjmKJBYkdjhOwVehg46viOyrASOh0S zdAoyJpLMSvltJEVSbX7vISXpllqFtrl0R9iwGjULrOWzPcPB2nUr7/dq3OVAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU3fs04WhNEZk5wRWKc+ENz6v83Z8wHwYDVR0j BBgwFoAU0Rq/XqBzNji0ovzr6slRe1aDrdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw OGIvMS9EMTFBQkY1RUEwNzMzNjM4QjRBMkZDRUJFQUM5NTE3QjU2ODNBREQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUFCRjVFQTA3MzM2MzhC NEEyRkNFQkVBQzk1MTdCNTY4M0FERDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEv MzIzMDMxMmUzMzMzMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzMzNTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALJIXgwDQYJKoZIhvcNAQELBQADggEBADI3egFx /SuCyLz5vhe0OScUfCCIPiIKOvrV1wOuBib+V7H69YMvvRT+WSXsZliwk3sT8Tir rlcNm8+VjzAYMJ6FhFNR0WPxm2Ow17auYl3SAXz1Bqxge7FPMAlpNJpehYp4qNz5 a8OOHf5HBJeQtOm0qC4I0lXSmBcPu9XGRwGtqD6W6tBZ0hzvFD/v2Hme0u4508cY uCMWd1qOuhcCTs2H03Quw9DVMFDBiCeCc2/pLauqwqCPe50K4naTAubBHGZX4vkP Aie9jNqX5O0wCZwfBt8OsrakEJChVtYle+dxMQQyUSnpLli6QGq/zmpYhCykzpgA ZJ3/Ri5cPTOqe+g= -----END CERTIFICATE-----Generated at Sat Dec 20 14:45:31 2025 by rpki-client