This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3132342e302f32322d3232203d3e20323633353336.roa File: 3230312e33332e3132342e302f32322d3232203d3e20323633353336.roa (raw, json) Hash identifier: Ude8lhQrFkGXaxrrYwUKoEuneIlhkytgOif8dORt51c= Subject key identifier: 42:2B:36:4A:7C:60:66:12:87:FE:79:D5:76:E7:36:2B:FC:8D:3E:74 Certificate issuer: /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0 Certificate serial: 3750DBF5739BBC610842BDD3B26354AD37CA8AFF Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3132342e302f32322d3232203d3e20323633353336.roa Signing time: Mon 15 Dec 2025 14:31:24 +0000 ROA not before: Mon 15 Dec 2025 14:26:24 +0000 ROA not after: Mon 14 Dec 2026 14:31:24 +0000 asID: 263536 IP address blocks: 201.33.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:50:db:f5:73:9b:bc:61:08:42:bd:d3:b2:63:54:ad:37:ca:8a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0 Validity Not Before: Dec 15 14:26:24 2025 GMT Not After : Dec 14 14:31:24 2026 GMT Subject: CN=422B364A7C60661287FE79D576E7362BFC8D3E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:35:34:e8:da:dd:be:05:62:12:6d:3b:c0: 0f:33:79:4d:14:b1:14:f7:7e:b5:a6:28:f5:b5:03: 37:f1:df:7b:cc:09:a5:36:9d:1d:21:60:c7:1c:2c: 1a:46:9e:e6:b4:36:e4:d0:90:e4:eb:89:3e:8f:bb: a0:2b:2c:98:28:bb:6d:79:19:04:86:16:7d:8d:3b: 1f:f0:da:2a:02:59:2d:bd:63:e1:0a:91:ef:3d:8b: 19:c4:8c:9d:74:94:b4:b4:2d:8d:30:49:e0:3d:5c: 93:4a:b7:5b:3f:5e:2d:9e:26:e3:fc:92:a7:50:11: cb:fa:02:d9:3f:83:5b:f7:7f:9b:25:f3:60:01:aa: 0b:57:ae:e0:48:a0:a8:66:7c:56:4f:35:a1:5b:c1: 2a:f4:c8:45:5b:44:40:5d:48:98:ed:45:7e:7e:df: 91:a9:d4:48:a1:44:7a:89:98:a4:d3:b9:1e:f5:32: f2:28:af:bb:5b:be:5b:ec:6e:7f:79:26:d4:f2:fb: 60:3e:4f:7e:12:5f:df:04:db:82:5c:17:21:db:15: 9a:a6:a4:3c:92:25:fc:90:01:f3:72:87:9d:65:24: bc:8e:f3:b5:95:5b:ec:2b:a1:5f:5c:b6:92:25:04: 9d:ea:1d:51:4b:eb:10:78:8c:58:a6:0a:39:69:c6: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2B:36:4A:7C:60:66:12:87:FE:79:D5:76:E7:36:2B:FC:8D:3E:74 X509v3 Authority Key Identifier: keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3132342e302f32322d3232203d3e20323633353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.124.0/22 Signature Algorithm: sha256WithRSAEncryption ad:5d:48:72:6e:21:b2:1c:4e:dc:a6:b1:0e:27:bf:46:9d:d0: c4:a3:bd:e7:60:09:28:27:a0:da:e8:83:74:f7:a8:2a:97:fd: 18:68:80:cb:40:39:72:b4:78:28:6f:99:21:6c:29:aa:e5:87: cc:25:74:86:96:f9:e6:9c:2b:c2:82:92:0d:1e:1d:b2:34:bb: fd:86:86:d4:69:9f:a1:f0:32:18:e5:fe:49:d5:3f:77:63:67: 55:52:e6:f6:a7:99:c4:cd:8d:ce:e2:d1:dc:0a:31:7b:81:97: 75:72:28:e0:c1:be:18:ba:ed:cd:9d:92:71:f1:09:21:f9:c9: 86:f7:c2:e8:c2:cb:d8:04:4d:3a:e3:a1:02:45:e9:83:8a:03: 7d:28:d6:39:65:26:92:70:80:12:b7:34:15:e9:7b:ec:b7:ae: 66:69:a3:1f:42:ab:2c:ee:65:b7:94:47:13:11:c2:d0:d3:c7: 2f:f1:ba:85:00:35:49:17:8f:51:4d:e9:79:2b:e0:8b:f2:60: 42:5a:7c:11:eb:aa:7b:f5:53:0d:51:87:c7:b3:88:01:a6:7a: d6:6f:5e:db:c0:3a:3e:79:d1:f5:ac:76:52:20:9d:47:2c:87: 2b:4e:63:96:37:bf:12:fc:65:28:0f:55:1a:47:5a:5a:dc:7a: 6d:0d:f8:29 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUN1Db9XObvGEIQr3TsmNUrTfKiv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDExQUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1 NjgzQUREMDAeFw0yNTEyMTUxNDI2MjRaFw0yNjEyMTQxNDMxMjRaMDMxMTAvBgNV BAMTKDQyMkIzNjRBN0M2MDY2MTI4N0ZFNzlENTc2RTczNjJCRkM4RDNFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuzU06NrdvgViEm07wA8zeU0U sRT3frWmKPW1Azfx33vMCaU2nR0hYMccLBpGnua0NuTQkOTriT6Pu6ArLJgou215 GQSGFn2NOx/w2ioCWS29Y+EKke89ixnEjJ10lLS0LY0wSeA9XJNKt1s/Xi2eJuP8 kqdQEcv6Atk/g1v3f5sl82ABqgtXruBIoKhmfFZPNaFbwSr0yEVbREBdSJjtRX5+ 35Gp1EihRHqJmKTTuR71MvIor7tbvlvsbn95JtTy+2A+T34SX98E24JcFyHbFZqm pDySJfyQAfNyh51lJLyO87WVW+wroV9ctpIlBJ3qHVFL6xB4jFimCjlpxl35AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQis2SnxgZhKH/nnVduc2K/yNPnQwHwYDVR0j BBgwFoAU0Rq/XqBzNji0ovzr6slRe1aDrdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw OGIvMS9EMTFBQkY1RUEwNzMzNjM4QjRBMkZDRUJFQUM5NTE3QjU2ODNBREQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUFCRjVFQTA3MzM2MzhC NEEyRkNFQkVBQzk1MTdCNTY4M0FERDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEv MzIzMDMxMmUzMzMzMmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzMzNTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALJIXwwDQYJKoZIhvcNAQELBQADggEBAK1dSHJu IbIcTtymsQ4nv0ad0MSjvedgCSgnoNrog3T3qCqX/RhogMtAOXK0eChvmSFsKarl h8wldIaW+eacK8KCkg0eHbI0u/2GhtRpn6HwMhjl/knVP3djZ1VS5vanmcTNjc7i 0dwKMXuBl3VyKODBvhi67c2dknHxCSH5yYb3wujCy9gETTrjoQJF6YOKA30o1jll JpJwgBK3NBXpe+y3rmZpox9CqyzuZbeURxMRwtDTxy/xuoUANUkXj1FN6Xkr4Ivy YEJafBHrqnv1Uw1Rh8eziAGmetZvXtvAOj550fWsdlIgnUcshytOY5Y3vxL8ZSgP VRpHWlrcem0N+Ck= -----END CERTIFICATE-----Generated at Sat Dec 20 14:45:31 2025 by rpki-client