This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa File: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (raw, json) Hash identifier: TgqVKEsBk1TX9J4+B1IoZRyz8I4TeO5XyWnnkjNwCOg= Subject key identifier: 5D:FE:D1:D9:AB:41:C6:A5:20:89:50:F6:C7:F8:87:6A:37:BB:46:0F Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Certificate serial: 47E90AF561DC7C9689817464E799C454951ACB0E Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa Signing time: Thu 11 Dec 2025 15:43:49 +0000 ROA not before: Thu 11 Dec 2025 15:38:49 +0000 ROA not after: Thu 10 Dec 2026 15:43:49 +0000 asID: 263444 IP address blocks: 138.36.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e9:0a:f5:61:dc:7c:96:89:81:74:64:e7:99:c4:54:95:1a:cb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Validity Not Before: Dec 11 15:38:49 2025 GMT Not After : Dec 10 15:43:49 2026 GMT Subject: CN=5DFED1D9AB41C6A5208950F6C7F8876A37BB460F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:43:53:2f:03:57:98:ea:34:48:c1:e6:e0: 77:3e:53:64:ac:e6:be:1c:0f:2d:67:83:98:16:f1: 65:ab:1f:ae:4b:6c:f7:ce:2f:45:8a:2f:d7:7d:43: 2c:44:9b:b9:ea:21:90:6a:a1:7a:5b:92:a3:31:c6: bb:57:07:74:82:80:da:1e:0c:33:3d:5e:fb:af:9e: f0:29:cd:98:42:29:78:c0:f0:58:39:fc:4f:bc:a7: d8:33:12:e4:12:33:4c:21:fa:83:64:fa:d7:72:17: d9:1f:a0:ea:db:46:9f:03:56:07:9b:cb:4e:dc:a6: 9f:c1:de:5d:51:bd:6f:20:88:d2:7a:51:bc:cd:a9: b4:b4:fd:5b:d0:19:ba:a3:05:a4:17:a8:82:a4:35: 9b:82:b4:d6:12:b2:04:18:cb:5c:e3:d2:72:c9:05: 4e:6d:bc:fe:27:1b:12:5d:12:b9:26:09:4d:60:05: 5f:f7:72:45:4e:e3:38:54:91:0f:ca:77:82:85:93: d1:7b:c1:51:55:ba:dc:ac:ef:46:21:56:38:ac:25: 9d:e7:0a:29:1d:2c:0a:2b:fb:7d:44:cc:e2:bb:9a: bd:77:dd:09:d7:3e:0c:82:fe:95:27:cb:98:65:a9: dc:6f:51:ef:46:8a:be:57:69:01:3b:4c:39:d5:eb: 9c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:D1:D9:AB:41:C6:A5:20:89:50:F6:C7:F8:87:6A:37:BB:46:0F X509v3 Authority Key Identifier: keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.164.0/22 Signature Algorithm: sha256WithRSAEncryption 53:66:9f:4e:5b:03:cb:2e:64:35:07:51:fd:d3:fd:bb:13:69: 5e:2a:05:4b:86:64:26:ae:c0:36:2d:6e:f6:f8:79:1e:21:84: 4a:78:44:5c:18:29:28:f2:1b:d9:dc:2c:a1:2f:c0:d0:c7:9a: 4c:f0:d8:aa:80:e3:73:12:67:2d:29:fb:74:b4:82:10:de:82: 5f:fd:b0:57:71:a8:46:68:46:53:0e:04:a3:e6:dd:09:34:f3: 00:fe:c8:0b:4a:ec:0a:b0:33:3b:59:10:3d:2e:b1:cd:4f:c8: 46:41:47:ed:7b:8d:ed:e1:4f:ee:10:70:b6:d4:f5:cb:d6:56: 82:e9:bd:35:fe:8f:86:e4:26:b7:98:08:64:1e:92:b8:1e:d8: 94:7f:1f:eb:86:4b:99:a5:79:6c:e7:11:d0:3d:7f:b6:04:11: 6e:23:28:5a:92:ac:a2:80:e5:1b:28:b5:3c:f4:23:14:ce:72: 4e:bd:b7:1a:d3:01:a9:5c:1f:e9:8a:09:64:12:86:f4:bf:0a: 8b:7c:7d:aa:c7:61:f9:6e:34:3e:be:f9:00:3c:82:41:76:c9: 4a:44:bf:9e:79:de:04:f6:48:3b:13:18:d6:69:7f:c2:cb:c5: 38:b4:da:2c:26:05:1b:f4:02:d9:96:c3:7c:45:ff:79:ad:e7: e2:b2:8d:19 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUR+kK9WHcfJaJgXRk55nEVJUayw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3 MDE4NDgwRDAeFw0yNTEyMTExNTM4NDlaFw0yNjEyMTAxNTQzNDlaMDMxMTAvBgNV BAMTKDVERkVEMUQ5QUI0MUM2QTUyMDg5NTBGNkM3Rjg4NzZBMzdCQjQ2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNENTLwNXmOo0SMHm4Hc+U2Ss 5r4cDy1ng5gW8WWrH65LbPfOL0WKL9d9QyxEm7nqIZBqoXpbkqMxxrtXB3SCgNoe DDM9XvuvnvApzZhCKXjA8Fg5/E+8p9gzEuQSM0wh+oNk+tdyF9kfoOrbRp8DVgeb y07cpp/B3l1RvW8giNJ6UbzNqbS0/VvQGbqjBaQXqIKkNZuCtNYSsgQYy1zj0nLJ BU5tvP4nGxJdErkmCU1gBV/3ckVO4zhUkQ/Kd4KFk9F7wVFVutys70YhVjisJZ3n CikdLAor+31EzOK7mr133QnXPgyC/pUny5hlqdxvUe9Gir5XaQE7TDnV65z1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUXf7R2atBxqUgiVD2x/iHaje7Rg8wHwYDVR0j BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv MzEzMzM4MmUzMzM2MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzMzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKJKQwDQYJKoZIhvcNAQELBQADggEBAFNmn05b A8suZDUHUf3T/bsTaV4qBUuGZCauwDYtbvb4eR4hhEp4RFwYKSjyG9ncLKEvwNDH mkzw2KqA43MSZy0p+3S0ghDegl/9sFdxqEZoRlMOBKPm3Qk08wD+yAtK7AqwMztZ ED0usc1PyEZBR+17je3hT+4QcLbU9cvWVoLpvTX+j4bkJreYCGQekrge2JR/H+uG S5mleWznEdA9f7YEEW4jKFqSrKKA5RsotTz0IxTOck69txrTAalcH+mKCWQShvS/ Cot8farHYfluND6++QA8gkF2yUpEv5553gT2SDsTGNZpf8LLxTi02iwmBRv0AtmW w3xF/3mt5+KyjRk= -----END CERTIFICATE-----Generated at Fri Dec 19 11:37:04 2025 by rpki-client