This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa File: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (raw, json) Hash identifier: cKvg8yrZZKi+ggPtkL5V5SGtMmkJkC8tKoYg3IexQrg= Subject key identifier: 43:4D:37:3A:A6:C5:1C:DD:A6:8B:A7:85:EB:23:76:7C:02:66:0C:3A Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 2772F1E75E670D7D16C174339CE94C2207742535 Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa Signing time: Fri 19 Dec 2025 20:31:09 +0000 ROA not before: Fri 19 Dec 2025 20:26:09 +0000 ROA not after: Fri 18 Dec 2026 20:31:09 +0000 asID: 61862 IP address blocks: 138.185.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:72:f1:e7:5e:67:0d:7d:16:c1:74:33:9c:e9:4c:22:07:74:25:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Dec 19 20:26:09 2025 GMT Not After : Dec 18 20:31:09 2026 GMT Subject: CN=434D373AA6C51CDDA68BA785EB23767C02660C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:4c:8c:e1:fe:a1:2e:18:f1:de:48:43:1b: 3e:10:94:f7:85:0a:3d:9a:5f:b9:64:87:de:fd:cb: e3:2b:0d:62:74:7b:61:be:b4:6a:60:3c:b3:ad:3e: a3:02:18:9b:ae:f1:19:0a:0d:30:ee:6a:87:29:c4: 5f:ee:08:e9:a2:e4:fd:c0:d5:ec:76:3f:a5:d8:e2: a0:13:a4:fc:06:cb:72:1c:8d:6d:7a:87:9b:3d:e8: 98:db:b8:1a:24:80:dc:db:1c:23:2a:17:af:4c:ad: 90:44:87:ef:ca:ca:b0:34:aa:99:d7:e5:3b:86:20: ac:45:8a:5c:e7:58:af:5f:f0:38:2c:6e:ba:1c:25: d6:f0:fd:14:78:00:51:09:18:9c:22:95:1d:dc:a0: f7:e6:d3:a0:e9:14:ba:a4:85:02:56:67:06:fe:be: 98:9f:bd:8d:57:48:dd:02:6d:de:2e:54:72:67:3f: 66:7f:08:eb:36:42:b6:ec:d1:01:9b:d9:f0:2e:ff: 65:2e:bc:a4:f2:11:3a:31:8c:f4:41:7f:1e:88:8f: 39:ba:04:a3:a7:b9:a8:3a:f8:73:d6:59:ef:28:93: 01:94:cd:1f:58:a8:40:ef:83:54:42:e3:0f:0c:df: ad:01:a0:dc:8b:6c:b2:ba:b8:2f:0b:4e:56:87:06: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4D:37:3A:A6:C5:1C:DD:A6:8B:A7:85:EB:23:76:7C:02:66:0C:3A X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.172.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:6c:01:1f:5f:c6:ed:1b:49:9b:25:93:11:8a:7d:4b:03:79: 10:82:7a:90:d1:93:77:e4:ba:4c:5f:30:d8:e4:07:63:6a:f0: 95:cb:dc:19:2b:f6:1f:cd:34:f7:a9:77:19:33:d1:11:b4:8d: 87:21:6e:af:3d:ee:36:b4:d5:8c:86:73:2c:e0:c5:ca:82:4b: db:4e:01:fb:61:f8:aa:79:0d:58:e3:fb:ae:da:af:78:7e:40: 21:8a:f6:ed:cc:76:2f:bb:51:02:22:3b:6b:58:5d:2f:0c:59: e8:62:69:9d:5b:55:4e:5c:61:e5:2c:ec:ad:8e:45:75:b2:b1: 86:f0:3d:b3:1e:4e:b4:e1:f7:26:8e:35:42:89:cb:31:2d:71: eb:bf:1d:ec:80:35:6b:bb:a9:72:66:c2:34:38:b2:03:d0:fa: 07:7e:c8:7b:18:18:e0:6f:16:b0:f1:e7:84:09:05:ae:df:dd: e9:ef:e6:7e:a1:70:7c:d2:3d:a6:e9:5d:9e:6b:62:90:a9:98: 4c:ee:77:ab:eb:56:03:da:56:2b:5b:a1:6d:28:59:42:d6:c3: 1d:79:0b:0f:3d:1b:f8:b1:86:c6:2d:4b:3a:74:40:50:49:7b: 5d:bb:76:b8:d1:ad:2c:57:c7:01:fb:6f:36:7b:ab:9d:13:45: 6a:8c:86:13 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUJ3Lx515nDX0WwXQznOlMIgd0JTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTEyMTkyMDI2MDlaFw0yNjEyMTgyMDMxMDlaMDMxMTAvBgNV BAMTKDQzNEQzNzNBQTZDNTFDRERBNjhCQTc4NUVCMjM3NjdDMDI2NjBDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3EyM4f6hLhjx3khDGz4QlPeF Cj2aX7lkh979y+MrDWJ0e2G+tGpgPLOtPqMCGJuu8RkKDTDuaocpxF/uCOmi5P3A 1ex2P6XY4qATpPwGy3IcjW16h5s96JjbuBokgNzbHCMqF69MrZBEh+/KyrA0qpnX 5TuGIKxFilznWK9f8DgsbrocJdbw/RR4AFEJGJwilR3coPfm06DpFLqkhQJWZwb+ vpifvY1XSN0Cbd4uVHJnP2Z/COs2Qrbs0QGb2fAu/2UuvKTyEToxjPRBfx6Ijzm6 BKOnuag6+HPWWe8okwGUzR9YqEDvg1RC4w8M360BoNyLbLK6uC8LTlaHBhGHAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUQ003OqbFHN2mi6eF6yN2fAJmDDowHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T b2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNzLzAvMzEz MzM4MmUzMTM4MzUyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEz ODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAKKuawwDQYJKoZIhvcNAQELBQADggEBAE1sAR9fxu0b SZslkxGKfUsDeRCCepDRk3fkukxfMNjkB2Nq8JXL3Bkr9h/NNPepdxkz0RG0jYch bq897ja01YyGcyzgxcqCS9tOAfth+Kp5DVjj+67ar3h+QCGK9u3Mdi+7UQIiO2tY XS8MWehiaZ1bVU5cYeUs7K2ORXWysYbwPbMeTrTh9yaONUKJyzEtceu/HeyANWu7 qXJmwjQ4sgPQ+gd+yHsYGOBvFrDx54QJBa7f3env5n6hcHzSPabpXZ5rYpCpmEzu d6vrVgPaVitboW0oWULWwx15Cw89G/ixhsYtSzp0QFBJe127drjRrSxXxwH7bzZ7 q50TRWqMhhM= -----END CERTIFICATE-----Generated at Wed Dec 24 00:33:53 2025 by rpki-client