This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3234203d3e20323633303733.roa File: 3133382e302e3139362e302f32322d3234203d3e20323633303733.roa (raw, json) Hash identifier: GQX8IpAoI1TwHWPLB28YXp2bnNWUbyxKmbejuFXhNYQ= Subject key identifier: E4:2B:E4:AC:6D:BE:4D:2E:CF:D5:2C:3D:F3:83:81:F2:79:1E:30:A6 Certificate issuer: /CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920 Certificate serial: 47F5765A2476829C861B3FDE19898A8968ED31DC Authority key identifier: E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3234203d3e20323633303733.roa Signing time: Wed 31 Dec 2025 14:13:29 +0000 ROA not before: Wed 31 Dec 2025 14:08:29 +0000 ROA not after: Wed 30 Dec 2026 14:13:29 +0000 asID: 263073 IP address blocks: 138.0.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 08:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f5:76:5a:24:76:82:9c:86:1b:3f:de:19:89:8a:89:68:ed:31:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920 Validity Not Before: Dec 31 14:08:29 2025 GMT Not After : Dec 30 14:13:29 2026 GMT Subject: CN=E42BE4AC6DBE4D2ECFD52C3DF38381F2791E30A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:a8:e2:27:ae:1b:c8:af:44:7f:a2:5e:a8: 84:0e:48:9c:63:e9:fe:e8:86:42:00:c9:da:a6:97: 53:48:91:86:bf:1e:9b:c7:dc:68:12:a7:5a:6a:7b: 48:42:47:b6:25:44:5e:57:16:40:16:54:32:3b:7e: ed:f6:a7:37:dd:6b:d7:b2:f4:6c:97:8f:12:29:01: 51:dc:59:6b:62:87:29:07:84:d3:5c:62:25:2a:c0: 8e:34:9b:4e:b1:18:70:c6:51:d1:4d:47:0d:19:b4: 24:bc:20:68:cf:7b:e6:89:da:28:17:9f:66:5f:86: cb:24:6f:a1:ac:7e:ea:fc:bb:42:66:91:37:af:51: ce:c0:bb:64:73:23:59:7e:db:04:71:04:e9:04:36: a0:27:78:96:57:fc:8f:7e:7b:61:18:4e:a0:41:76: 1c:66:c9:c1:da:7d:94:ba:4b:83:67:8d:f1:46:2a: 34:cf:1d:40:0c:35:8d:85:67:95:45:20:43:26:7a: 53:c8:4e:d5:2f:1a:71:f1:13:40:69:f7:9a:fe:8c: d9:18:85:e7:3b:df:ba:95:7c:b2:cd:63:c7:c9:ec: 5a:49:44:d8:03:3f:db:43:24:b8:af:d4:11:b8:87: 82:28:99:6e:66:a4:ac:c2:83:03:d2:89:fb:43:6d: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2B:E4:AC:6D:BE:4D:2E:CF:D5:2C:3D:F3:83:81:F2:79:1E:30:A6 X509v3 Authority Key Identifier: keyid:E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3234203d3e20323633303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.196.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:7e:70:a2:78:40:bf:92:a3:7e:9b:4c:a7:12:3b:0e:e1:76: 59:6a:bf:40:14:64:51:36:2c:75:62:fe:c0:d7:d5:6a:f3:f7: 86:6d:90:64:64:31:53:ed:74:76:fc:05:0f:48:1c:23:eb:86: 98:93:6d:17:29:c1:c9:6b:88:67:64:06:ad:6e:ea:24:9f:8c: 90:12:67:ce:6e:7f:5f:df:9f:f6:07:4e:7b:30:e1:c7:bf:f9: d4:3a:20:df:c4:a8:ae:89:57:cc:4b:be:72:d6:87:ac:df:a1: 1a:f8:8f:b7:3f:9d:5a:f6:35:37:91:f9:ab:78:40:45:0d:f8: 10:71:56:61:57:9a:0a:16:d2:8b:d9:f0:fe:b3:f7:c9:56:c8: e4:02:be:41:c1:a0:62:87:93:60:e1:d4:0c:bc:68:05:de:f8: aa:46:39:70:30:8c:7c:ae:b8:c1:c7:ff:e7:2f:c8:38:4e:53: 8c:9e:b5:43:bb:34:8d:40:94:79:df:31:a7:f5:d4:50:c4:e7: ca:7d:1d:c6:29:66:f5:72:e7:70:bd:8d:b1:74:9d:77:b8:81: 26:98:6b:ce:45:57:77:8c:43:c1:ed:4a:26:86:5b:99:1a:f8: 46:88:8f:ca:ba:90:86:e3:b8:be:29:18:bb:0a:2b:4c:95:29: 34:3a:30:84 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUR/V2WiR2gpyGGz/eGYmKiWjtMdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZBM0JCODc1RTNDMDk5RjBCNzUyN0I1NzE3NUFDQkMy QzUyQzkyMDAeFw0yNTEyMzExNDA4MjlaFw0yNjEyMzAxNDEzMjlaMDMxMTAvBgNV BAMTKEU0MkJFNEFDNkRCRTREMkVDRkQ1MkMzREYzODM4MUYyNzkxRTMwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADajiJ64byK9Ef6JeqIQOSJxj 6f7ohkIAydqml1NIkYa/HpvH3GgSp1pqe0hCR7YlRF5XFkAWVDI7fu32pzfda9ey 9GyXjxIpAVHcWWtihykHhNNcYiUqwI40m06xGHDGUdFNRw0ZtCS8IGjPe+aJ2igX n2Zfhsskb6Gsfur8u0JmkTevUc7Au2RzI1l+2wRxBOkENqAneJZX/I9+e2EYTqBB dhxmycHafZS6S4NnjfFGKjTPHUAMNY2FZ5VFIEMmelPITtUvGnHxE0Bp95r+jNkY hec737qVfLLNY8fJ7FpJRNgDP9tDJLiv1BG4h4IomW5mpKzCgwPSiftDbUr1AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU5CvkrG2+TS7P1Sw984OB8nkeMKYwHwYDVR0j BBgwFoAU5qO7h148CZ8LdSe1cXWsvCxSySAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi a20vMC9FNkEzQkI4NzVFM0MwOTlGMEI3NTI3QjU3MTc1QUNCQzJDNTJDOTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2QTNCQjg3NUUzQzA5OUYw Qjc1MjdCNTcxNzVBQ0JDMkM1MkM5MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv MzEzMzM4MmUzMDJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCigDEMA0GCSqGSIb3DQEBCwUAA4IBAQAffnCieEC/ kqN+m0ynEjsO4XZZar9AFGRRNix1Yv7A19Vq8/eGbZBkZDFT7XR2/AUPSBwj64aY k20XKcHJa4hnZAatbuokn4yQEmfObn9f35/2B057MOHHv/nUOiDfxKiuiVfMS75y 1oes36Ea+I+3P51a9jU3kfmreEBFDfgQcVZhV5oKFtKL2fD+s/fJVsjkAr5BwaBi h5Ng4dQMvGgF3viqRjlwMIx8rrjBx//nL8g4TlOMnrVDuzSNQJR53zGn9dRQxOfK fR3GKWb1cudwvY2xdJ13uIEmmGvORVd3jEPB7UomhluZGvhGiI/KupCG47i+KRi7 CitMlSk0OjCE -----END CERTIFICATE-----Generated at Fri Jan 9 22:40:27 2026 by rpki-client