This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31322e302f32322d3234203d3e20323634313131.roa File: 3133382e39372e31322e302f32322d3234203d3e20323634313131.roa (raw, json) Hash identifier: ozLZITcvOZFtd87UH3XdPzdpfHYvtgJZ/K8WKGrxMIk= Subject key identifier: 97:2D:62:38:C0:61:7B:82:44:38:AE:E6:C6:A2:2D:DF:B7:96:14:F8 Certificate issuer: /CN=515B950829908AADA6288C237B01B1EA0D226D2E Certificate serial: 651931F74DF784026B348EB2DDBFA2247DC9D80C Authority key identifier: 51:5B:95:08:29:90:8A:AD:A6:28:8C:23:7B:01:B1:EA:0D:22:6D:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer Subject info access: rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31322e302f32322d3234203d3e20323634313131.roa Signing time: Mon 22 Dec 2025 20:13:28 +0000 ROA not before: Mon 22 Dec 2025 20:08:28 +0000 ROA not after: Mon 21 Dec 2026 20:13:28 +0000 asID: 264111 IP address blocks: 138.97.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.crl rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:19:31:f7:4d:f7:84:02:6b:34:8e:b2:dd:bf:a2:24:7d:c9:d8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515B950829908AADA6288C237B01B1EA0D226D2E Validity Not Before: Dec 22 20:08:28 2025 GMT Not After : Dec 21 20:13:28 2026 GMT Subject: CN=972D6238C0617B824438AEE6C6A22DDFB79614F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:9f:12:58:55:0e:93:17:7c:c8:87:79:23: 80:24:6a:bb:a5:9f:64:d6:2b:59:15:47:e7:95:99: 62:a4:19:53:bd:24:fc:e0:90:cd:14:0c:94:90:63: 0c:40:b1:0e:8a:bd:d3:ef:0f:33:68:16:7a:30:28: 63:db:4e:89:9d:94:f2:32:fb:db:02:a1:e8:27:47: 86:cb:d4:dd:d9:a1:a2:4e:38:0f:e1:09:d3:79:7e: 04:50:7a:53:59:6c:a7:5c:b3:0f:f8:c6:ce:6a:f7: 30:2d:2b:7c:4e:98:fe:ac:26:65:97:b9:d4:d6:cc: 90:35:94:50:73:2d:54:91:ac:e4:d4:d9:ac:2d:eb: 70:72:55:1f:24:01:8b:50:6c:8f:28:75:80:fb:a6: 35:8a:07:98:90:2a:56:37:92:28:27:79:cc:ce:56: cf:de:05:f3:38:5b:f2:79:90:2a:88:16:fb:b4:92: 8a:f7:7a:18:e4:3a:0c:3f:0a:35:26:32:96:ae:60: 0b:5d:88:19:14:59:e8:6e:56:17:84:cc:ee:db:29: 9d:4f:22:e4:b5:40:ae:78:f2:07:33:c9:82:3a:0b: e7:cf:32:23:d3:89:c8:90:d3:cb:6e:af:fa:3e:b4: 0e:7c:7d:43:75:ba:27:82:2f:32:9b:0e:4b:0d:ef: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2D:62:38:C0:61:7B:82:44:38:AE:E6:C6:A2:2D:DF:B7:96:14:F8 X509v3 Authority Key Identifier: keyid:51:5B:95:08:29:90:8A:AD:A6:28:8C:23:7B:01:B1:EA:0D:22:6D:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31322e302f32322d3234203d3e20323634313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.12.0/22 Signature Algorithm: sha256WithRSAEncryption 41:f2:ab:cd:4c:d5:fe:7c:c7:b2:e6:15:0d:6c:a1:ea:5b:5d: a9:bc:77:51:63:54:18:74:5b:2f:99:07:a8:18:e9:24:7f:9f: cd:7b:67:25:d5:2c:0a:9e:4b:4a:11:e7:35:e7:a5:86:69:22: 5d:d8:9a:0a:45:c4:15:57:6d:64:05:43:73:6a:62:23:22:5a: 41:e7:95:92:5a:dc:4c:64:8c:61:06:ea:31:9b:9c:44:8f:16: 31:c4:03:5b:43:b6:37:0c:ec:ce:d9:59:26:5e:a9:cd:b1:d7: c6:d8:54:61:af:5b:4d:55:7a:d1:8a:90:d0:e5:88:46:74:8e: 0e:40:c1:b5:71:87:77:25:c7:13:22:bb:e3:06:75:51:c3:84: 8a:fc:29:4e:32:19:95:60:98:f3:cc:46:2b:b8:05:36:5e:20: fc:89:ab:4c:d4:8c:0e:a1:01:f1:5a:14:fc:a7:53:4c:5c:87: 6e:81:3a:ac:a6:d0:bd:ac:81:0e:4e:b1:30:3a:73:1d:39:73: 01:5f:9d:53:cd:8a:f2:52:c5:1a:b1:d2:b1:f9:38:83:7c:8f: 4f:66:95:e0:26:fa:bd:e4:fb:e2:ab:bd:3a:5e:0f:6c:80:5c: b9:87:d5:b4:11:8b:c9:e3:64:2e:8c:e1:a1:08:a0:a5:cc:73: 40:87:55:9e -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZRkx9033hAJrNI6y3b+iJH3J2AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1Qjk1MDgyOTkwOEFBREE2Mjg4QzIzN0IwMUIxRUEw RDIyNkQyRTAeFw0yNTEyMjIyMDA4MjhaFw0yNjEyMjEyMDEzMjhaMDMxMTAvBgNV BAMTKDk3MkQ2MjM4QzA2MTdCODI0NDM4QUVFNkM2QTIyRERGQjc5NjE0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP158SWFUOkxd8yId5I4Akarul n2TWK1kVR+eVmWKkGVO9JPzgkM0UDJSQYwxAsQ6KvdPvDzNoFnowKGPbTomdlPIy +9sCoegnR4bL1N3ZoaJOOA/hCdN5fgRQelNZbKdcsw/4xs5q9zAtK3xOmP6sJmWX udTWzJA1lFBzLVSRrOTU2awt63ByVR8kAYtQbI8odYD7pjWKB5iQKlY3kigneczO Vs/eBfM4W/J5kCqIFvu0kor3ehjkOgw/CjUmMpauYAtdiBkUWehuVheEzO7bKZ1P IuS1QK548gczyYI6C+fPMiPTiciQ08tur/o+tA58fUN1uieCLzKbDksN701RAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUly1iOMBhe4JEOK7mxqIt37eWFPgwHwYDVR0j BBgwFoAUUVuVCCmQiq2mKIwjewGx6g0ibS4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDI0MThFRXRXNFpycGlIeVFUWVhqWFdXQTQ5NGk4TG8yd01nbzFQdmVG c1ovMC81MTVCOTUwODI5OTA4QUFEQTYyODhDMjM3QjAxQjFFQTBEMjI2RDJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxNUI5NTA4Mjk5MDhBQURB NjI4OEMyMzdCMDFCMUVBMEQyMjZEMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0gyNDE4RUV0VzRacnBpSHlRVFlYalhXV0E0OTRpOExvMndNZ28xUHZlRnNaLzAv MzEzMzM4MmUzOTM3MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0 MzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCimEMMA0GCSqGSIb3DQEBCwUAA4IBAQBB8qvNTNX+ fMey5hUNbKHqW12pvHdRY1QYdFsvmQeoGOkkf5/Ne2cl1SwKnktKEec156WGaSJd 2JoKRcQVV21kBUNzamIjIlpB55WSWtxMZIxhBuoxm5xEjxYxxANbQ7Y3DOzO2Vkm XqnNsdfG2FRhr1tNVXrRipDQ5YhGdI4OQMG1cYd3JccTIrvjBnVRw4SK/ClOMhmV YJjzzEYruAU2XiD8iatM1IwOoQHxWhT8p1NMXIdugTqsptC9rIEOTrEwOnMdOXMB X51TzYryUsUasdKx+TiDfI9PZpXgJvq95Pviq706Xg9sgFy5h9W0EYvJ42QujOGh CKClzHNAh1We -----END CERTIFICATE-----Generated at Tue Dec 23 07:55:21 2025 by rpki-client