This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e38382e302f32322d3234203d3e20323634313131.roa File: 3136382e3139362e38382e302f32322d3234203d3e20323634313131.roa (raw, json) Hash identifier: xSU8gvpxOP3tWZouwiFE8CFj4JJug3Ki8KJTo8z/KI8= Subject key identifier: 20:E0:C0:21:E6:86:B9:57:91:19:49:77:9F:7F:B0:3E:F1:C0:ED:53 Certificate issuer: /CN=515B950829908AADA6288C237B01B1EA0D226D2E Certificate serial: 6AB1F29BCE81DEB3907727F2ACEB158009851465 Authority key identifier: 51:5B:95:08:29:90:8A:AD:A6:28:8C:23:7B:01:B1:EA:0D:22:6D:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer Subject info access: rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e38382e302f32322d3234203d3e20323634313131.roa Signing time: Mon 22 Dec 2025 20:13:29 +0000 ROA not before: Mon 22 Dec 2025 20:08:29 +0000 ROA not after: Mon 21 Dec 2026 20:13:29 +0000 asID: 264111 IP address blocks: 168.196.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.crl rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b1:f2:9b:ce:81:de:b3:90:77:27:f2:ac:eb:15:80:09:85:14:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515B950829908AADA6288C237B01B1EA0D226D2E Validity Not Before: Dec 22 20:08:29 2025 GMT Not After : Dec 21 20:13:29 2026 GMT Subject: CN=20E0C021E686B957911949779F7FB03EF1C0ED53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:76:20:8f:79:33:b4:66:00:7d:88:3e:59: 35:96:f0:e0:34:5f:7f:2f:db:f8:d6:20:b1:0b:f3: d7:98:3d:0f:25:33:61:5c:0d:d7:d1:da:35:19:7b: 12:e9:21:3f:13:4e:ed:8d:d0:51:f6:4b:2b:0f:c0: ac:c0:e8:f1:f8:c1:92:bb:d8:4d:26:d3:b2:49:88: 6b:ff:db:4b:ea:10:b6:65:29:43:2c:c0:22:15:6c: 00:46:97:8b:2e:dd:58:e4:9e:4c:9f:4d:2d:b2:73: 9d:75:ad:77:10:7f:94:0a:ab:9d:6a:7a:74:06:33: 89:85:bb:a9:9b:c5:7a:06:a2:bc:c9:90:4f:35:cc: b3:1e:8d:81:f2:4e:62:50:5b:76:4e:89:3a:46:5a: c8:7c:a8:59:5d:87:b9:9e:4a:c9:0e:86:cc:60:9c: d8:30:4f:93:7f:79:42:62:f3:ef:ba:da:29:75:b2: 49:29:b4:f4:63:3d:45:6f:80:6d:bd:f8:f0:9d:c8: 9b:76:c4:80:1c:c8:3f:29:b3:5d:40:e8:9f:0b:65: 20:79:47:1c:70:64:34:9a:ae:ea:76:42:53:24:12: d8:4f:7c:cf:f9:ff:95:7f:79:1f:9e:50:a7:59:6e: 93:fe:83:42:37:8b:63:1c:92:f4:8b:eb:c6:fe:f2: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E0:C0:21:E6:86:B9:57:91:19:49:77:9F:7F:B0:3E:F1:C0:ED:53 X509v3 Authority Key Identifier: keyid:51:5B:95:08:29:90:8A:AD:A6:28:8C:23:7B:01:B1:EA:0D:22:6D:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e38382e302f32322d3234203d3e20323634313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.88.0/22 Signature Algorithm: sha256WithRSAEncryption 66:4a:8a:31:bd:55:be:12:ca:3a:a2:f6:15:e2:34:8b:a1:7e: e7:97:8b:b8:1d:2d:bf:3f:7d:87:93:aa:db:80:cc:29:b8:6d: 73:2e:7d:c6:dd:d9:f8:ab:2b:e6:6d:37:ef:9c:cf:c9:95:f9: 5a:75:c6:57:e6:bf:ae:3d:33:29:f7:33:a3:8f:9d:4b:48:cd: 0c:ea:9a:4d:1f:6e:26:fe:86:be:0c:06:c9:68:cd:73:fc:89: c9:3f:c4:f1:4f:6a:94:ee:df:ba:22:28:bd:f8:f8:8d:b1:89: b5:f0:fc:e2:bf:54:c5:fe:6e:d4:75:10:4e:5f:cb:70:ea:23: 2a:a5:23:a4:7b:30:92:8d:3b:82:40:c3:9a:f4:e1:1b:a3:2a: 17:c2:6a:69:0b:4a:21:9f:01:75:0f:55:bc:30:90:e5:cd:ca: 1b:e3:68:84:46:71:15:39:c5:a2:5b:d9:42:77:3c:ac:a3:6c: 30:4d:86:fe:0a:ef:20:25:d3:2d:8e:62:51:35:e4:72:65:f3: 0f:20:7b:14:13:fb:c6:ca:ab:75:39:56:60:a3:ed:28:47:83: 78:a4:d8:ce:c4:a1:f0:99:8c:6b:fd:f0:70:7c:2e:5b:4d:e8: e2:8c:7a:05:ac:e2:16:eb:38:22:58:ee:68:cc:1a:3f:4a:93: 5e:d9:2f:3d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUarHym86B3rOQdyfyrOsVgAmFFGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1Qjk1MDgyOTkwOEFBREE2Mjg4QzIzN0IwMUIxRUEw RDIyNkQyRTAeFw0yNTEyMjIyMDA4MjlaFw0yNjEyMjEyMDEzMjlaMDMxMTAvBgNV BAMTKDIwRTBDMDIxRTY4NkI5NTc5MTE5NDk3NzlGN0ZCMDNFRjFDMEVENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtonYgj3kztGYAfYg+WTWW8OA0 X38v2/jWILEL89eYPQ8lM2FcDdfR2jUZexLpIT8TTu2N0FH2SysPwKzA6PH4wZK7 2E0m07JJiGv/20vqELZlKUMswCIVbABGl4su3VjknkyfTS2yc511rXcQf5QKq51q enQGM4mFu6mbxXoGorzJkE81zLMejYHyTmJQW3ZOiTpGWsh8qFldh7meSskOhsxg nNgwT5N/eUJi8++62il1skkptPRjPUVvgG29+PCdyJt2xIAcyD8ps11A6J8LZSB5 RxxwZDSarup2QlMkEthPfM/5/5V/eR+eUKdZbpP+g0I3i2MckvSL68b+8iWZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUIODAIeaGuVeRGUl3n3+wPvHA7VMwHwYDVR0j BBgwFoAUUVuVCCmQiq2mKIwjewGx6g0ibS4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDI0MThFRXRXNFpycGlIeVFUWVhqWFdXQTQ5NGk4TG8yd01nbzFQdmVG c1ovMC81MTVCOTUwODI5OTA4QUFEQTYyODhDMjM3QjAxQjFFQTBEMjI2RDJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxNUI5NTA4Mjk5MDhBQURB NjI4OEMyMzdCMDFCMUVBMEQyMjZEMkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0gyNDE4RUV0VzRacnBpSHlRVFlYalhXV0E0OTRpOExvMndNZ28xUHZlRnNaLzAv MzEzNjM4MmUzMTM5MzYyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKoxFgwDQYJKoZIhvcNAQELBQADggEBAGZKijG9 Vb4Syjqi9hXiNIuhfueXi7gdLb8/fYeTqtuAzCm4bXMufcbd2firK+ZtN++cz8mV +Vp1xlfmv649Myn3M6OPnUtIzQzqmk0fbib+hr4MBslozXP8ick/xPFPapTu37oi KL34+I2xibXw/OK/VMX+btR1EE5fy3DqIyqlI6R7MJKNO4JAw5r04RujKhfCamkL SiGfAXUPVbwwkOXNyhvjaIRGcRU5xaJb2UJ3PKyjbDBNhv4K7yAl0y2OYlE15HJl 8w8gexQT+8bKq3U5VmCj7ShHg3ik2M7EofCZjGv98HB8LltN6OKMegWs4hbrOCJY 7mjMGj9Kk17ZLz0= -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:57 2025 by rpki-client