This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3234203d3e203532383338.roa File: 3133382e302e3138382e302f32322d3234203d3e203532383338.roa (raw, json) Hash identifier: Y1o7k/3i/X+y8FUsciu/IFKuBVgQz2L5pqXi2VogrTQ= Subject key identifier: A2:FF:4A:3C:E0:D2:61:19:FC:00:FD:1C:0C:E8:1D:F6:4A:AC:E1:92 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 4F3ABD689EF11E454FCACDB2B55E063899DB6ED4 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3234203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:23:24 +0000 ROA not before: Wed 03 Dec 2025 00:18:24 +0000 ROA not after: Wed 02 Dec 2026 00:23:24 +0000 asID: 52838 IP address blocks: 138.0.188.0/22 maxlen: 24 Validation: Failed, certificate revoked on Wed 03 Dec 2025 01:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3a:bd:68:9e:f1:1e:45:4f:ca:cd:b2:b5:5e:06:38:99:db:6e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:18:24 2025 GMT Not After : Dec 2 00:23:24 2026 GMT Subject: CN=A2FF4A3CE0D26119FC00FD1C0CE81DF64AACE192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:e3:fb:3a:b6:6b:a3:89:96:99:eb:0a:92: 21:89:f4:76:07:ea:ad:7c:a4:10:22:c3:2b:d7:73: 3c:df:05:e5:2e:ac:b8:21:22:35:44:73:12:26:db: f9:fd:99:22:54:58:31:b6:ce:32:b1:d9:b3:3c:a3: 3b:ec:57:7d:6f:69:0e:cf:f7:7d:42:1c:05:d6:9a: b7:d6:23:34:66:f2:57:f0:23:9b:a2:ec:e8:03:e8: 5f:62:e2:a5:8e:05:78:e8:b3:17:b8:5d:58:63:5c: ef:ab:5a:13:e0:6b:26:94:c1:f2:0c:fb:fa:3b:af: 3b:ac:cc:fc:75:69:f0:3b:eb:31:c5:4a:fd:80:42: 9e:32:62:c6:e8:93:ac:30:14:63:5a:f2:e3:eb:80: ac:86:4e:51:f5:41:d2:38:a3:89:47:85:12:4d:1b: 67:21:6f:f9:dc:5a:1f:07:b8:e2:c9:2d:d1:be:f8: dd:d5:48:b2:eb:78:97:89:93:4c:c5:bc:57:8c:29: 16:d3:46:84:ae:06:f3:4e:b4:8c:6f:a4:e4:47:66: c0:6f:e7:e5:34:11:3a:b9:42:97:e9:e7:2e:99:68: e4:32:49:83:6c:20:6e:ea:58:2a:6f:2a:46:6e:12: 39:94:d6:ba:d7:47:b7:b7:30:3a:57:ab:7b:93:73: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:4A:3C:E0:D2:61:19:FC:00:FD:1C:0C:E8:1D:F6:4A:AC:E1:92 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3234203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.188.0/22 Signature Algorithm: sha256WithRSAEncryption 11:d6:62:6d:e4:e2:de:e7:50:6b:bb:63:b7:cb:03:bb:92:a4: d2:91:28:3b:66:b8:3b:f6:6a:f4:9a:10:58:97:71:ef:e5:8e: e4:af:73:2e:7f:70:93:02:d7:2d:ed:9a:ce:d3:32:ac:c7:62: 7d:99:4c:46:03:25:9f:ce:63:f6:f6:f2:32:9b:d4:20:22:22: f8:9d:22:53:79:09:7e:65:18:e3:5b:b0:be:bd:31:6c:82:94: 36:61:f2:a1:35:29:fe:3d:6a:d9:63:81:a3:12:3f:7c:70:9e: c4:c1:8c:8b:2e:d0:7b:b2:4b:2d:6b:d5:59:7d:7d:f0:c6:98: a2:c6:d3:5d:b5:2a:a4:88:31:7b:ff:b2:49:17:3f:b7:df:09: 06:f9:78:24:f2:b8:ac:2b:c0:88:76:83:01:68:ee:1d:51:b0: 8d:f5:88:e3:38:80:e2:e8:62:76:c1:1e:e6:55:62:1c:46:b1: 2f:22:4b:78:78:3d:eb:f2:15:21:2c:88:15:ca:9e:06:44:5c: b9:79:2f:32:fb:63:15:c3:eb:e0:8d:37:5b:16:c9:77:a1:88: 59:8d:d8:6a:2c:95:cd:54:d7:2f:ee:37:c2:ea:4f:08:89:ec: 95:a2:cc:6e:0b:58:ef:c9:16:5f:7b:01:fb:c4:34:06:ad:36: 37:4d:1b:b1 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUTzq9aJ7xHkVPys2ytV4GOJnbbtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDE4MjRaFw0yNjEyMDIwMDIzMjRaMDMxMTAvBgNV BAMTKEEyRkY0QTNDRTBEMjYxMTlGQzAwRkQxQzBDRTgxREY2NEFBQ0UxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0G+P7OrZro4mWmesKkiGJ9HYH 6q18pBAiwyvXczzfBeUurLghIjVEcxIm2/n9mSJUWDG2zjKx2bM8ozvsV31vaQ7P 931CHAXWmrfWIzRm8lfwI5ui7OgD6F9i4qWOBXjosxe4XVhjXO+rWhPgayaUwfIM +/o7rzuszPx1afA76zHFSv2AQp4yYsbok6wwFGNa8uPrgKyGTlH1QdI4o4lHhRJN G2chb/ncWh8HuOLJLdG++N3VSLLreJeJk0zFvFeMKRbTRoSuBvNOtIxvpORHZsBv 5+U0ETq5Qpfp5y6ZaOQySYNsIG7qWCpvKkZuEjmU1rrXR7e3MDpXq3uTcxBNAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUov9KPODSYRn8AP0cDOgd9kqs4ZIwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz MzM4MmUzMDJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM4MzMz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAooAvDANBgkqhkiG9w0BAQsFAAOCAQEAEdZibeTi3udQa7tj t8sDu5Kk0pEoO2a4O/Zq9JoQWJdx7+WO5K9zLn9wkwLXLe2aztMyrMdifZlMRgMl n85j9vbyMpvUICIi+J0iU3kJfmUY41uwvr0xbIKUNmHyoTUp/j1q2WOBoxI/fHCe xMGMiy7Qe7JLLWvVWX198MaYosbTXbUqpIgxe/+ySRc/t98JBvl4JPK4rCvAiHaD AWjuHVGwjfWI4ziA4uhidsEe5lViHEaxLyJLeHg96/IVISyIFcqeBkRcuXkvMvtj FcPr4I03WxbJd6GIWY3YaiyVzVTXL+43wupPCInslaLMbgtY78kWX3sB+8Q0Bq02 N00bsQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:48:52 2025 by rpki-client