This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa File: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (raw, json) Hash identifier: yyVGnNjDV5vrV0Ku2GQqlCfb+baJwW8UpEveCaobaMs= Subject key identifier: 28:75:6D:39:59:03:E8:10:B6:D1:16:C6:1C:DB:5C:BC:AB:B0:84:6E Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Certificate serial: 1D3D9C23040D21C1E4DF07B2411F704BA8BF6C06 Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa Signing time: Thu 11 Dec 2025 15:43:46 +0000 ROA not before: Thu 11 Dec 2025 15:38:46 +0000 ROA not after: Thu 10 Dec 2026 15:43:46 +0000 asID: 263444 IP address blocks: 138.36.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3d:9c:23:04:0d:21:c1:e4:df:07:b2:41:1f:70:4b:a8:bf:6c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Validity Not Before: Dec 11 15:38:46 2025 GMT Not After : Dec 10 15:43:46 2026 GMT Subject: CN=28756D395903E810B6D116C61CDB5CBCABB0846E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:f0:68:80:20:67:8e:8c:63:cd:77:3f:4e: ab:04:ad:b0:e4:c8:9c:a1:56:4a:a3:b5:96:8c:45: 90:1f:af:ce:9a:c5:ff:a0:7b:f8:0c:33:3e:0b:84: 5b:66:b3:da:e2:f5:02:76:74:1a:c4:d0:a8:79:25: 7a:4b:2d:0e:c8:ec:d9:ec:9b:8f:a9:e3:9b:a6:89: 1d:c2:4a:5a:b0:e9:22:24:f4:ed:56:56:5b:c1:f6: 7b:9f:64:98:0b:35:d3:c1:35:82:f8:e5:b6:2f:a0: fd:15:8b:6f:44:69:35:51:ea:52:1e:fb:72:6a:ba: a5:3b:d5:75:82:07:de:9d:9a:b1:83:e9:b8:a2:6e: f6:37:c7:f5:d2:ef:46:a5:56:a0:58:37:99:25:14: 54:a3:29:fe:fa:a0:54:98:19:1e:9f:44:0b:b2:eb: f1:12:8e:9a:17:db:6b:62:e3:ee:83:c0:d4:e3:5e: e0:e2:8f:12:a4:d0:15:a5:98:3d:42:4d:9c:5d:e9: 11:e3:f3:cb:04:fe:e2:3a:52:82:2d:f0:72:9a:75: 93:f1:e2:a8:cd:72:d4:4b:aa:59:65:fd:78:1b:ad: df:75:fa:00:c3:38:8f:00:f4:62:ef:06:90:63:60: 51:7a:da:d8:95:29:01:9f:75:8c:94:5c:90:11:3e: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:6D:39:59:03:E8:10:B6:D1:16:C6:1C:DB:5C:BC:AB:B0:84:6E X509v3 Authority Key Identifier: keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.164.0/24 Signature Algorithm: sha256WithRSAEncryption a5:01:7e:32:5d:98:c2:ff:88:5b:29:61:fe:d7:67:c3:89:12: 46:2f:ec:c5:b2:74:f9:cb:ff:57:65:3d:84:a3:08:04:0f:a8: a2:35:0e:3a:f9:d1:25:63:f7:eb:f3:5a:cd:0b:c5:4a:5e:f1: c1:0e:3c:b4:54:ba:22:c4:9a:a6:a1:41:d7:b6:fc:a6:a0:3e: 64:b7:dd:71:d1:14:c6:b3:2e:25:ed:e2:54:ab:6c:a0:70:d3: 85:69:77:58:db:5b:c1:2c:3f:ae:3f:6a:da:12:26:bd:b2:2c: da:ce:e2:83:2c:81:d1:ad:08:2f:32:6e:e1:7a:87:f0:61:2f: 14:39:5e:f6:c9:99:6f:8c:11:5d:2e:11:0f:f1:55:71:d7:48: cb:58:0a:28:be:7f:e9:e5:7b:ca:fd:67:58:78:91:9b:1f:ba: 8f:2c:1c:d2:69:01:92:e3:1a:f2:04:e4:6c:8b:3f:dc:0d:67: 19:a9:8a:7b:a4:d6:66:c7:9c:e5:dc:87:33:ec:24:b2:3f:87: ef:c0:60:39:70:b4:35:4a:9e:4d:b1:89:6d:e1:ac:42:61:b7: 77:f0:22:72:e2:8d:c5:b3:28:13:66:ba:82:f3:66:45:29:20: 71:4a:ec:37:23:00:40:09:23:03:f6:d1:18:3e:12:e3:61:7a: c1:04:fc:04 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHT2cIwQNIcHk3weyQR9wS6i/bAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3 MDE4NDgwRDAeFw0yNTEyMTExNTM4NDZaFw0yNjEyMTAxNTQzNDZaMDMxMTAvBgNV BAMTKDI4NzU2RDM5NTkwM0U4MTBCNkQxMTZDNjFDREI1Q0JDQUJCMDg0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRXfBogCBnjoxjzXc/TqsErbDk yJyhVkqjtZaMRZAfr86axf+ge/gMMz4LhFtms9ri9QJ2dBrE0Kh5JXpLLQ7I7Nns m4+p45umiR3CSlqw6SIk9O1WVlvB9nufZJgLNdPBNYL45bYvoP0Vi29EaTVR6lIe +3JquqU71XWCB96dmrGD6biibvY3x/XS70alVqBYN5klFFSjKf76oFSYGR6fRAuy 6/ESjpoX22ti4+6DwNTjXuDijxKk0BWlmD1CTZxd6RHj88sE/uI6UoIt8HKadZPx 4qjNctRLqlll/Xgbrd91+gDDOI8A9GLvBpBjYFF62tiVKQGfdYyUXJARPqS5AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUKHVtOVkD6BC20RbGHNtcvKuwhG4wHwYDVR0j BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv MzEzMzM4MmUzMzM2MmUzMTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKJKQwDQYJKoZIhvcNAQELBQADggEBAKUBfjJd mML/iFspYf7XZ8OJEkYv7MWydPnL/1dlPYSjCAQPqKI1Djr50SVj9+vzWs0LxUpe 8cEOPLRUuiLEmqahQde2/KagPmS33XHRFMazLiXt4lSrbKBw04Vpd1jbW8EsP64/ atoSJr2yLNrO4oMsgdGtCC8ybuF6h/BhLxQ5XvbJmW+MEV0uEQ/xVXHXSMtYCii+ f+nle8r9Z1h4kZsfuo8sHNJpAZLjGvIE5GyLP9wNZxmpinuk1mbHnOXchzPsJLI/ h+/AYDlwtDVKnk2xiW3hrEJht3fwInLijcWzKBNmuoLzZkUpIHFK7DcjAEAJIwP2 0Rg+EuNhesEE/AQ= -----END CERTIFICATE-----Generated at Fri Dec 19 11:38:01 2025 by rpki-client