This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e37382e3135322e302f32322d3234203d3e20323635313431.roa File: 3137302e37382e3135322e302f32322d3234203d3e20323635313431.roa (raw, json) Hash identifier: 7maYC/K6izATibxiaGC9gV+13aX1i0f9VmxkzjHaHvw= Subject key identifier: 25:0C:FA:9A:F5:71:6B:E6:87:36:3B:02:F5:5F:B7:06:CB:B4:D0:D6 Certificate issuer: /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4 Certificate serial: 33BB59E53B405506EB704D179EB264F6054B3DC1 Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer Subject info access: rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e37382e3135322e302f32322d3234203d3e20323635313431.roa Signing time: Tue 23 Dec 2025 14:57:28 +0000 ROA not before: Tue 23 Dec 2025 14:52:28 +0000 ROA not after: Tue 22 Dec 2026 14:57:28 +0000 asID: 265141 IP address blocks: 170.78.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 15:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bb:59:e5:3b:40:55:06:eb:70:4d:17:9e:b2:64:f6:05:4b:3d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4 Validity Not Before: Dec 23 14:52:28 2025 GMT Not After : Dec 22 14:57:28 2026 GMT Subject: CN=250CFA9AF5716BE687363B02F55FB706CBB4D0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:33:e8:9c:23:11:a7:17:52:d8:73:50:f7: 28:91:de:19:8e:04:a9:00:42:71:1a:97:cc:49:33: 01:98:ff:ed:03:82:11:20:f4:1f:12:97:ca:9f:46: 37:94:4a:83:02:0f:3f:9f:ab:e1:0f:27:b4:fc:d0: 28:df:50:84:86:5e:9d:b7:3a:aa:02:d3:9f:df:a8: d7:e7:8b:4c:0e:d8:94:0a:1b:89:d6:3c:41:ac:f4: d0:9f:33:28:1a:d0:ab:83:f0:ed:dc:cb:b3:4d:10: f2:9e:4a:5a:9a:1d:9c:5f:c9:a0:3a:a3:e3:21:74: 36:02:f1:e3:76:a5:55:70:71:88:13:03:a2:d3:c7: af:51:54:77:aa:e9:19:02:62:c1:f4:55:92:84:e7: e9:8e:23:ed:f6:fb:c7:67:ef:d5:b7:47:28:71:29: dc:22:f8:5f:d3:64:63:bf:25:c2:f4:93:f8:e6:ef: 1e:25:a1:b8:f1:16:b6:30:b0:b6:84:fb:ff:7d:7b: 2b:bb:9c:1f:b9:b4:ac:7b:15:4f:ed:2e:93:6e:3d: 16:da:60:38:e3:1e:eb:f6:6c:00:e1:a8:bd:4c:1c: 4c:72:1a:05:e7:d7:1a:50:45:ee:a7:c9:f4:0a:b4: 76:55:e2:da:e4:47:fd:d6:54:a2:16:87:7e:fc:6b: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0C:FA:9A:F5:71:6B:E6:87:36:3B:02:F5:5F:B7:06:CB:B4:D0:D6 X509v3 Authority Key Identifier: keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e37382e3135322e302f32322d3234203d3e20323635313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.152.0/22 Signature Algorithm: sha256WithRSAEncryption 42:72:ea:22:5f:73:26:fe:c1:57:42:e6:8c:a9:20:64:63:2f: 3d:42:d8:c6:3c:70:4f:0a:87:85:08:96:d1:b6:0e:bd:86:e7: 73:5d:0c:2f:02:7a:b7:6a:02:54:b6:80:6a:40:a8:9a:5e:79: cc:65:03:77:76:5e:18:84:5f:25:93:d3:d2:7f:b5:65:5f:d8: d8:0b:9a:b0:19:c8:85:17:4e:1f:fe:30:78:cd:19:b0:c5:26: 5f:8e:53:19:82:0c:ec:0a:e7:76:8f:23:60:3c:58:36:22:6d: a1:f9:c1:d1:2e:01:6a:aa:7b:b9:30:1e:a5:e2:a1:d5:52:36: d1:90:a4:72:19:ee:57:f4:0c:65:4e:d1:19:f1:ab:21:03:f3: 79:93:14:07:a1:a2:47:4a:f7:a2:6c:e6:3f:e7:3f:26:2b:01: 73:9b:e6:b0:a9:78:2e:f0:4e:d8:02:18:42:68:f0:10:79:c5: 22:ec:22:d4:27:df:d6:f9:55:b0:a6:09:be:c6:94:c5:17:2f: 89:39:d0:69:77:83:d5:a2:01:31:96:9f:be:ae:af:02:e2:ac: 29:d3:81:ec:2f:7e:de:90:eb:5d:e0:c6:41:e3:49:a1:2f:0c: 94:ac:00:63:69:81:9b:e1:b2:dd:c1:12:66:2b:b9:00:5f:0f: e9:33:86:e8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUM7tZ5TtAVQbrcE0XnrJk9gVLPcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNzdCODg1NUY2MURGMkFENjgxODVERDA5NzdCQ0I0 MkM3MDhGNDAeFw0yNTEyMjMxNDUyMjhaFw0yNjEyMjIxNDU3MjhaMDMxMTAvBgNV BAMTKDI1MENGQTlBRjU3MTZCRTY4NzM2M0IwMkY1NUZCNzA2Q0JCNEQwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApTPonCMRpxdS2HNQ9yiR3hmO BKkAQnEal8xJMwGY/+0DghEg9B8Sl8qfRjeUSoMCDz+fq+EPJ7T80CjfUISGXp23 OqoC05/fqNfni0wO2JQKG4nWPEGs9NCfMyga0KuD8O3cy7NNEPKeSlqaHZxfyaA6 o+MhdDYC8eN2pVVwcYgTA6LTx69RVHeq6RkCYsH0VZKE5+mOI+32+8dn79W3Ryhx Kdwi+F/TZGO/JcL0k/jm7x4lobjxFrYwsLaE+/99eyu7nB+5tKx7FU/tLpNuPRba YDjjHuv2bADhqL1MHExyGgXn1xpQRe6nyfQKtHZV4trkR/3WVKIWh378a2JFAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUJQz6mvVxa+aHNjsC9V+3Bsu00NYwHwYDVR0j BBgwFoAUP+d7iFX2HfKtaBhd0Jd7y0LHCPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j djEvMC8zRkU3N0I4ODU1RjYxREYyQUQ2ODE4NUREMDk3N0JDQjQyQzcwOEY0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRTc3Qjg4NTVGNjFERjJB RDY4MTg1REQwOTc3QkNCNDJDNzA4RjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VYWndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzAv MzEzNzMwMmUzNzM4MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzUzMTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKqTpgwDQYJKoZIhvcNAQELBQADggEBAEJy6iJf cyb+wVdC5oypIGRjLz1C2MY8cE8Kh4UIltG2Dr2G53NdDC8CerdqAlS2gGpAqJpe ecxlA3d2XhiEXyWT09J/tWVf2NgLmrAZyIUXTh/+MHjNGbDFJl+OUxmCDOwK53aP I2A8WDYibaH5wdEuAWqqe7kwHqXiodVSNtGQpHIZ7lf0DGVO0RnxqyED83mTFAeh okdK96Js5j/nPyYrAXOb5rCpeC7wTtgCGEJo8BB5xSLsItQn39b5VbCmCb7GlMUX L4k50Gl3g9WiATGWn76urwLirCnTgewvft6Q613gxkHjSaEvDJSsAGNpgZvhst3B EmYruQBfD+kzhug= -----END CERTIFICATE-----Generated at Tue Dec 23 20:01:43 2025 by rpki-client