This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa File: 3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa (raw, json) Hash identifier: bahN75Khgj6xlNi2kbbIn1LBVS+TPCRezuTrNZ9yFgM= Subject key identifier: 0F:C8:8C:96:A5:41:67:35:39:E0:8B:30:80:44:D0:53:37:5A:28:20 Certificate issuer: /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Certificate serial: 5C33445B37B6B33AC9FD7614713705F392503AB0 Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject info access: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa Signing time: Thu 11 Dec 2025 12:56:21 +0000 ROA not before: Thu 11 Dec 2025 12:51:21 +0000 ROA not after: Thu 10 Dec 2026 12:56:21 +0000 asID: 271274 IP address blocks: 190.12.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 13:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:33:44:5b:37:b6:b3:3a:c9:fd:76:14:71:37:05:f3:92:50:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Validity Not Before: Dec 11 12:51:21 2025 GMT Not After : Dec 10 12:56:21 2026 GMT Subject: CN=0FC88C96A541673539E08B308044D053375A2820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:5d:ed:1d:61:da:50:15:03:c3:be:44:ec: d6:f5:47:16:56:3f:20:e6:d7:36:3d:87:4a:7d:78: e9:53:ea:0b:03:b2:9e:64:10:c0:10:fc:9c:75:01: 25:ad:31:5f:b9:51:c1:1d:9a:d7:b3:62:d5:3e:bc: 20:49:2c:a2:2a:44:68:34:d4:d6:f0:2f:7e:14:a5: 88:46:43:8f:11:08:98:63:35:7a:bb:46:20:77:8b: b5:6c:4a:ac:84:92:12:09:6d:89:e2:3c:0f:a4:72: ec:a0:41:fb:8d:53:e8:97:a1:58:27:d6:d4:b5:4c: c4:a3:fa:8b:13:97:0d:46:a9:f9:ec:ca:70:4f:d9: 6d:a7:7b:9b:95:35:5e:59:23:22:db:ca:be:2d:6a: b2:d4:94:57:9f:74:81:27:41:e0:fd:cc:a5:10:21: ca:96:88:0e:60:db:5f:33:2f:19:f3:31:b6:70:87: b8:f5:d0:c8:cb:ec:77:1c:40:5e:ef:00:de:1b:89: bb:63:ad:77:40:e2:6d:99:73:03:d7:b6:b1:7b:76: 34:bc:88:ed:b6:54:2f:2c:11:29:15:bb:ad:7a:17: d2:7a:df:97:04:6b:3c:ed:e1:f3:b9:42:9a:0a:9f: e4:24:4c:4e:9e:be:0a:50:96:16:b4:ea:94:bb:6d: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:8C:96:A5:41:67:35:39:E0:8B:30:80:44:D0:53:37:5A:28:20 X509v3 Authority Key Identifier: keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.12.136.0/22 Signature Algorithm: sha256WithRSAEncryption 53:7c:76:fb:f2:79:87:dc:53:76:94:ed:13:c6:52:08:ec:60: d7:2e:c3:0f:b5:2a:35:5b:50:f7:47:0e:f9:b4:4e:76:df:7b: af:db:f6:22:a4:f6:69:d2:81:bf:2d:81:79:88:4f:dd:2a:81: f8:c7:41:2b:cf:cd:73:e4:92:1c:b9:7a:02:a5:41:c1:cd:06: a5:13:21:08:fe:79:24:2e:c8:b6:0d:33:ff:86:78:6c:03:76: 95:cb:9e:1c:0c:44:6c:7d:92:73:1e:d9:1e:ea:99:e2:9e:bd: 31:ff:4e:29:e3:d1:b6:2d:37:e9:f0:8b:bf:96:e1:a6:9e:09: dd:ed:fd:47:a3:0d:73:14:2c:71:c8:4b:17:09:7d:97:c2:64: e1:49:0c:85:06:0f:8a:11:b0:4c:5b:39:52:5c:11:cd:89:08: 1d:cb:c6:ab:63:35:3f:e9:23:31:5c:ae:6b:b2:9e:76:b9:d1: cf:c6:50:91:9d:55:b5:ff:4a:db:c5:d0:90:c3:04:59:70:d3: 9b:91:0f:67:13:3a:21:fb:41:87:e5:c7:42:7e:b8:39:26:e8: 94:02:30:d0:13:50:a3:f9:ed:f1:86:ef:92:ea:dc:00:0e:03: a0:57:60:4e:26:0b:54:e5:64:3d:7a:6a:48:a6:23:1a:db:62: 1f:6b:5b:50 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUXDNEWze2szrJ/XYUcTcF85JQOrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFDQzg4QzdGRDQ5RUVCNDE2OUJDQzdGQzM2NkREQUQ3 NTBDMTQ3ODAeFw0yNTEyMTExMjUxMjFaFw0yNjEyMTAxMjU2MjFaMDMxMTAvBgNV BAMTKDBGQzg4Qzk2QTU0MTY3MzUzOUUwOEIzMDgwNDREMDUzMzc1QTI4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXV3tHWHaUBUDw75E7Nb1RxZW PyDm1zY9h0p9eOlT6gsDsp5kEMAQ/Jx1ASWtMV+5UcEdmtezYtU+vCBJLKIqRGg0 1NbwL34UpYhGQ48RCJhjNXq7RiB3i7VsSqyEkhIJbYniPA+kcuygQfuNU+iXoVgn 1tS1TMSj+osTlw1GqfnsynBP2W2ne5uVNV5ZIyLbyr4tarLUlFefdIEnQeD9zKUQ IcqWiA5g218zLxnzMbZwh7j10MjL7HccQF7vAN4bibtjrXdA4m2ZcwPXtrF7djS8 iO22VC8sESkVu616F9J635cEazzt4fO5QpoKn+QkTE6evgpQlha06pS7bSOHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUD8iMlqVBZzU54IswgETQUzdaKCAwHwYDVR0j BBgwFoAUocyIx/1J7rQWm8x/w2bdrXUMFHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFh N3UvMC9BMUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQ0M4OEM3RkQ0OUVFQjQx NjlCQ0M3RkMzNjZEREFENzUwQzE0NzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RmaFQ3akoyQ21ZOTRHRVZLeDhneW1TQ1A4NEhkUGs4VGtFU0VzWlpRYTd1LzAv MzEzOTMwMmUzMTMyMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3 MzEzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAK+DIgwDQYJKoZIhvcNAQELBQADggEBAFN8dvvy eYfcU3aU7RPGUgjsYNcuww+1KjVbUPdHDvm0Tnbfe6/b9iKk9mnSgb8tgXmIT90q gfjHQSvPzXPkkhy5egKlQcHNBqUTIQj+eSQuyLYNM/+GeGwDdpXLnhwMRGx9knMe 2R7qmeKevTH/Tinj0bYtN+nwi7+W4aaeCd3t/UejDXMULHHISxcJfZfCZOFJDIUG D4oRsExbOVJcEc2JCB3LxqtjNT/pIzFcrmuynna50c/GUJGdVbX/StvF0JDDBFlw 05uRD2cTOiH7QYflx0J+uDkm6JQCMNATUKP57fGG75Lq3AAOA6BXYE4mC1TlZD16 akimIxrbYh9rW1A= -----END CERTIFICATE-----Generated at Tue Dec 23 16:11:33 2025 by rpki-client