This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa File: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (raw, json) Hash identifier: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY= Subject key identifier: DC:38:D1:1D:92:CF:D1:08:AB:E8:70:EF:85:81:8D:ED:0B:56:8D:7E Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Certificate serial: 4D7848F73CB532F89892B4B2B26E07346DBCFA90 Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa Signing time: Mon 22 Dec 2025 17:59:40 +0000 ROA not before: Mon 22 Dec 2025 17:54:40 +0000 ROA not after: Mon 21 Dec 2026 17:59:40 +0000 asID: 52677 IP address blocks: 177.66.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 21:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:78:48:f7:3c:b5:32:f8:98:92:b4:b2:b2:6e:07:34:6d:bc:fa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Validity Not Before: Dec 22 17:54:40 2025 GMT Not After : Dec 21 17:59:40 2026 GMT Subject: CN=DC38D11D92CFD108ABE870EF85818DED0B568D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3b:ae:8d:b4:48:8c:59:73:ef:a1:8f:04:b7: 16:f4:bf:df:67:7f:65:eb:5f:2d:9b:d8:a3:e0:86: ca:35:f8:67:19:5b:a1:81:6c:e4:81:ef:37:cf:c0: f0:0a:7a:b1:f2:83:7f:07:ac:f0:52:73:b1:aa:ca: b8:91:0b:62:7d:7f:00:47:26:ce:54:86:98:f3:cd: a5:4c:8a:11:74:52:83:e2:87:3f:02:fd:3c:41:26: e5:5a:79:d6:25:2d:44:6e:55:b6:c9:46:ff:40:fc: 68:bb:da:9d:b3:83:9f:45:1f:ec:42:97:f0:9e:24: 68:69:fb:ad:23:ee:38:a4:54:39:a6:bb:4b:67:58: fa:3e:6e:35:04:78:e4:b7:76:9a:90:4c:7a:a9:70: 33:59:7b:9e:a7:32:94:70:10:04:01:92:5b:cf:4f: 72:a2:bb:46:fe:02:d2:2d:35:a3:0a:70:34:53:60: 67:9c:97:a5:f3:4b:6b:a7:70:33:d1:60:15:1b:93: 37:33:86:b4:e7:6b:54:a3:a1:9b:42:98:c1:bc:a1: c9:ba:cf:bb:c9:2a:a8:0f:cc:47:52:7e:78:75:23: 7b:a9:6a:1b:8b:f9:16:b5:31:bf:47:db:39:80:94: 99:5a:ac:07:29:39:a2:af:90:35:af:6f:cb:9e:b1: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:38:D1:1D:92:CF:D1:08:AB:E8:70:EF:85:81:8D:ED:0B:56:8D:7E X509v3 Authority Key Identifier: keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.66.204.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:ff:b1:49:bc:bb:d1:66:b6:fc:9f:47:ab:1d:e3:86:f5:98: 86:73:14:93:43:82:79:15:99:26:5e:11:46:ec:cf:84:0e:00: 89:ea:80:6a:f5:90:82:f4:9c:98:02:33:81:45:6c:23:aa:1c: a5:33:a6:a7:17:17:22:f7:0e:87:03:90:f8:2b:2d:ab:d4:c2: d7:16:c3:f4:6f:32:0d:37:e0:cc:59:8c:d8:1a:b8:3e:05:cf: da:a3:31:40:43:1f:39:27:07:5c:a5:36:5b:14:d4:c0:57:ca: 24:f1:82:11:5a:49:13:99:24:73:19:1c:49:7e:4b:9f:27:30: f1:0b:5f:f2:6b:f8:c3:11:86:19:cd:9b:99:1c:db:6d:6e:f3: 82:7c:fa:ad:0f:c2:31:2b:f8:16:4b:ba:f3:62:31:f0:84:d3: 72:7d:58:b2:dd:9d:21:13:52:c1:64:64:4e:9e:55:cb:52:8c: 45:f5:2f:a5:b0:d3:26:9e:ec:43:bd:40:ff:62:b2:cc:71:1e: d6:8a:04:08:e8:5d:c2:cd:01:e0:79:5c:76:d0:63:43:95:e1: 3a:81:41:4b:d8:c9:09:8d:e7:c1:ce:3c:21:f9:5a:e4:c2:56: dc:59:20:65:e8:f2:58:b8:54:46:b9:ad:a5:39:73:6b:ed:a6: df:d8:be:5c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUTXhI9zy1MviYkrSysm4HNG28+pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGRjQ4RDRERjhBRjY3MkUzM0JBREQ0RTI1MDlGRENF QjkxQTA3QTAeFw0yNTEyMjIxNzU0NDBaFw0yNjEyMjExNzU5NDBaMDMxMTAvBgNV BAMTKERDMzhEMTFEOTJDRkQxMDhBQkU4NzBFRjg1ODE4REVEMEI1NjhEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsO66NtEiMWXPvoY8Etxb0v99n f2XrXy2b2KPghso1+GcZW6GBbOSB7zfPwPAKerHyg38HrPBSc7GqyriRC2J9fwBH Js5UhpjzzaVMihF0UoPihz8C/TxBJuVaedYlLURuVbbJRv9A/Gi72p2zg59FH+xC l/CeJGhp+60j7jikVDmmu0tnWPo+bjUEeOS3dpqQTHqpcDNZe56nMpRwEAQBklvP T3Kiu0b+AtItNaMKcDRTYGecl6XzS2uncDPRYBUbkzczhrTna1SjoZtCmMG8ocm6 z7vJKqgPzEdSfnh1I3upahuL+Ra1Mb9H2zmAlJlarAcpOaKvkDWvb8uesRw9AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU3DjRHZLP0Qir6HDvhYGN7QtWjX4wHwYDVR0j BBgwFoAUr/9I1N+K9nLjO63U4lCf3OuRoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMC9BRkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkY0OEQ0REY4QUY2NzJF MzNCQURENEUyNTA5RkRDRUI5MUEwN0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNyUlc0QThGa29vZnBSRWNrMkFjNVRUZlhkNXY1QTZDRlFzS0JxeVU5M0NpLzAv MzEzNzM3MmUzNjM2MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCsULMMA0GCSqGSIb3DQEBCwUAA4IBAQAq/7FJvLvR Zrb8n0erHeOG9ZiGcxSTQ4J5FZkmXhFG7M+EDgCJ6oBq9ZCC9JyYAjOBRWwjqhyl M6anFxci9w6HA5D4Ky2r1MLXFsP0bzINN+DMWYzYGrg+Bc/aozFAQx85JwdcpTZb FNTAV8ok8YIRWkkTmSRzGRxJfkufJzDxC1/ya/jDEYYZzZuZHNttbvOCfPqtD8Ix K/gWS7rzYjHwhNNyfViy3Z0hE1LBZGROnlXLUoxF9S+lsNMmnuxDvUD/YrLMcR7W igQI6F3CzQHgeVx20GNDleE6gUFL2MkJjefBzjwh+VrkwlbcWSBl6PJYuFRGua2l OXNr7abf2L5c -----END CERTIFICATE-----Generated at Tue Dec 23 14:13:31 2025 by rpki-client