This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32322d3232203d3e203631373139.roa File: 3133312e302e3139322e302f32322d3232203d3e203631373139.roa (raw, json) Hash identifier: Ycq4mEat3XWjb6Q+A1UxR8cO6DRraHovU7WhwmRl7o4= Subject key identifier: D5:16:78:1F:2F:EB:97:C2:06:CF:EA:A4:D2:12:9F:81:12:A3:A4:6E Certificate issuer: /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA Certificate serial: 7029D7E1AA4F3850F60C95B4D65EF9FDDD56A34F Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32322d3232203d3e203631373139.roa Signing time: Wed 12 Nov 2025 12:00:40 +0000 ROA not before: Wed 12 Nov 2025 11:55:40 +0000 ROA not after: Wed 11 Nov 2026 12:00:40 +0000 asID: 61719 IP address blocks: 131.0.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 15:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:29:d7:e1:aa:4f:38:50:f6:0c:95:b4:d6:5e:f9:fd:dd:56:a3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA Validity Not Before: Nov 12 11:55:40 2025 GMT Not After : Nov 11 12:00:40 2026 GMT Subject: CN=D516781F2FEB97C206CFEAA4D2129F8112A3A46E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:e0:bd:73:01:f6:c7:81:7f:eb:6a:1f:20: 60:9c:8a:f1:97:03:9e:c4:45:44:ef:6c:e5:74:1c: 02:e5:75:fb:26:0d:02:90:07:61:6b:3a:66:67:78: 7f:a5:f2:0a:64:a0:2f:22:e0:ca:a8:1e:7b:2d:09: c2:15:b8:3c:47:65:d9:68:d5:80:bb:35:03:4b:23: ee:58:ca:e5:8a:37:ed:f2:8a:2d:d6:a7:2d:fb:4c: fc:c1:a5:24:f0:7c:31:a5:9d:55:8f:e4:1f:66:c0: b2:b7:20:fc:b6:28:22:06:49:ec:cc:fc:37:64:ba: 2f:74:d7:36:5d:de:bc:0a:f6:72:e5:e9:96:15:aa: a5:b9:c2:4f:5e:34:c3:25:74:a4:89:0f:73:60:3e: e7:d5:52:ea:d8:fe:94:ce:e4:d5:66:03:27:ec:1d: 49:3a:40:35:5f:50:d4:ec:9f:04:9c:80:f6:ef:12: 05:e0:72:31:36:f6:6f:c0:74:7c:be:de:c5:fb:0d: 4b:ab:0c:d8:b1:c1:a5:89:1a:fe:9b:fe:35:cb:cf: b0:a2:5c:30:d2:52:2b:62:0d:35:9b:33:09:03:93: db:79:e8:15:68:a0:cb:d3:02:76:36:db:75:d3:ff: 54:1e:3c:3b:57:b8:a8:6b:36:49:15:40:31:58:3d: a3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:16:78:1F:2F:EB:97:C2:06:CF:EA:A4:D2:12:9F:81:12:A3:A4:6E X509v3 Authority Key Identifier: keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32322d3232203d3e203631373139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.192.0/22 Signature Algorithm: sha256WithRSAEncryption 55:d9:f7:d6:0b:89:ff:64:40:0c:66:29:ad:30:61:5e:85:21: 14:0d:d4:8e:1b:b5:e8:99:d1:dc:17:09:1c:c4:44:e7:34:06: 57:05:75:46:05:e0:cc:d8:38:82:6a:b8:b9:29:12:5a:45:ff: 96:00:99:f6:d9:2d:5e:03:57:90:94:d3:96:34:1a:26:24:f3: b2:43:77:d7:42:b4:45:82:31:d6:38:01:eb:28:04:da:9e:b3: e4:20:c8:3a:98:c8:c1:2f:67:27:2c:db:b6:4d:01:02:0b:11: 7d:1a:82:c8:dc:83:63:89:ab:31:73:67:1e:e6:25:ea:31:a3: 99:df:f5:5e:37:2b:33:53:bc:db:34:97:15:30:c4:c8:61:ad: 32:a0:b0:86:5c:03:55:60:fe:d1:b8:ce:17:14:ff:2e:4d:0c: 6d:bb:dc:90:7b:10:4c:95:be:f1:ee:71:cd:38:7c:6e:12:35: aa:ca:87:9d:e1:b2:28:26:d8:72:73:08:14:bd:06:8b:8f:d5: ac:0b:b7:6f:f2:48:14:02:bd:c5:88:21:3c:a7:7e:72:94:8d: f1:60:9e:59:75:3d:53:79:ac:0f:7d:9b:a1:cf:d6:1f:0a:e1: 74:62:0f:80:de:61:b4:c1:02:08:db:b5:a1:bc:0b:54:2c:9c: d4:10:9d:e0 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUcCnX4apPOFD2DJW01l75/d1Wo08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczNjU4RTQyNDFGMjFDQUIyMkNCOUZDMTUwQkY2RkI4 OTgyNzFFQTAeFw0yNTExMTIxMTU1NDBaFw0yNjExMTExMjAwNDBaMDMxMTAvBgNV BAMTKEQ1MTY3ODFGMkZFQjk3QzIwNkNGRUFBNEQyMTI5RjgxMTJBM0E0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUuC9cwH2x4F/62ofIGCcivGX A57ERUTvbOV0HALldfsmDQKQB2FrOmZneH+l8gpkoC8i4MqoHnstCcIVuDxHZdlo 1YC7NQNLI+5YyuWKN+3yii3Wpy37TPzBpSTwfDGlnVWP5B9mwLK3IPy2KCIGSezM /Ddkui901zZd3rwK9nLl6ZYVqqW5wk9eNMMldKSJD3NgPufVUurY/pTO5NVmAyfs HUk6QDVfUNTsnwScgPbvEgXgcjE29m/AdHy+3sX7DUurDNixwaWJGv6b/jXLz7Ci XDDSUitiDTWbMwkDk9t56BVooMvTAnY223XT/1QePDtXuKhrNkkVQDFYPaNJAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU1RZ4Hy/rl8IGz+qk0hKfgRKjpG4wHwYDVR0j BBgwFoAUVzZY5CQfIcqyLLn8FQv2+4mCceowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK M1MvMC81NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MzY1OEU0MjQxRjIxQ0FC MjJDQjlGQzE1MEJGNkZCODk4MjcxRUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0gzS0RwclI5Q0RpWHUxM2o2bnpFemhXY1RuSk5kQ0ZRTjMyajRiVDZoSjNTLzAv MzEzMzMxMmUzMDJlMzEzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM3 MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAoMAwDANBgkqhkiG9w0BAQsFAAOCAQEAVdn31guJ/2RA DGYprTBhXoUhFA3Ujhu16JnR3BcJHMRE5zQGVwV1RgXgzNg4gmq4uSkSWkX/lgCZ 9tktXgNXkJTTljQaJiTzskN310K0RYIx1jgB6ygE2p6z5CDIOpjIwS9nJyzbtk0B AgsRfRqCyNyDY4mrMXNnHuYl6jGjmd/1XjcrM1O82zSXFTDEyGGtMqCwhlwDVWD+ 0bjOFxT/Lk0MbbvckHsQTJW+8e5xzTh8bhI1qsqHneGyKCbYcnMIFL0Gi4/VrAu3 b/JIFAK9xYghPKd+cpSN8WCeWXU9U3msD32boc/WHwrhdGIPgN5htMECCNu1obwL VCyc1BCd4A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:10:29 2025 by rpki-client