This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa File: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (raw, json) Hash identifier: ifOQPNczzVrceqSflMwkRjMZ5Ww4Ptwi8L3aImNcDu8= Subject key identifier: A3:D5:F3:78:E0:7A:E8:0D:C9:3F:B9:CE:9B:47:B8:EE:B6:F5:B1:21 Certificate issuer: /CN=7155F95F3F50406AE68A9CCF51483483D251BB70 Certificate serial: 60E29C6271538F7CA43FD6F2E7F64E42478E2A7A Authority key identifier: 71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa Signing time: Wed 17 Dec 2025 21:12:39 +0000 ROA not before: Wed 17 Dec 2025 21:07:39 +0000 ROA not after: Wed 16 Dec 2026 21:12:39 +0000 asID: 28360 IP address blocks: 138.94.8.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 02:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e2:9c:62:71:53:8f:7c:a4:3f:d6:f2:e7:f6:4e:42:47:8e:2a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7155F95F3F50406AE68A9CCF51483483D251BB70 Validity Not Before: Dec 17 21:07:39 2025 GMT Not After : Dec 16 21:12:39 2026 GMT Subject: CN=A3D5F378E07AE80DC93FB9CE9B47B8EEB6F5B121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:d5:11:fc:bd:98:96:66:62:b6:98:e1:64: 65:76:3f:dc:61:59:ee:8e:8b:1b:05:fb:45:a8:b0: b1:2e:e8:b5:1f:04:73:b0:72:46:bb:96:f8:f3:bc: b4:64:ad:bc:ce:95:53:05:ea:a4:25:65:62:14:17: d1:0d:96:6c:35:76:bc:df:39:75:fd:72:f2:8d:26: a4:7e:49:6c:ab:ba:35:41:ab:57:8e:62:d2:f8:c1: a9:02:73:e6:3e:c0:25:ff:16:de:38:c5:30:a2:d0: b8:13:f3:ee:92:90:f1:ac:3c:74:32:af:41:de:46: 51:ed:91:82:f0:8e:89:ee:ce:f8:9c:69:a9:40:e7: 7a:e6:49:4f:11:e0:de:62:05:84:40:25:1d:d5:2e: 03:ed:61:c4:ed:5a:92:86:17:38:94:8b:f6:cc:25: be:72:e3:f3:ee:c6:08:e8:64:a9:41:6e:f9:df:c4: 31:63:a7:10:d4:e9:4e:e5:8b:43:cb:d0:cd:7d:43: b6:55:6a:ed:7d:08:f6:ad:eb:d5:b7:61:7b:19:2f: 65:8f:d8:3e:9e:78:b7:c6:9d:6e:c4:00:d0:4e:5f: 96:c3:25:2d:12:48:8d:1d:37:f8:33:92:e0:26:b2: 86:72:91:00:1a:3b:6e:46:88:42:25:a1:e6:6b:b4: 7b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:F3:78:E0:7A:E8:0D:C9:3F:B9:CE:9B:47:B8:EE:B6:F5:B1:21 X509v3 Authority Key Identifier: keyid:71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.8.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:47:ff:cb:d4:c5:a3:7d:47:dd:24:78:bf:8b:2d:40:71:35: a9:78:c0:27:10:ed:fa:17:21:9f:55:c9:ad:f1:c7:11:f1:f1: 95:97:bf:0d:c6:01:0b:2f:df:eb:ca:f9:6d:f6:3f:6b:26:32: 76:ba:a7:a8:a2:38:9a:a1:e6:32:d3:2f:a7:31:38:b0:f3:39: 81:c0:68:9a:d4:f5:9d:0a:2b:9b:97:9d:97:10:f5:a9:2c:e9: ba:e3:a0:b3:5a:1c:ba:8d:d5:06:ac:b5:ce:9e:ba:94:16:d1: 07:a9:f6:79:3e:df:a3:be:ca:c0:2f:0a:45:1a:0e:d9:e7:28: cb:56:d6:ca:e9:ba:c2:1d:98:50:7a:d5:ba:5d:bb:c6:08:9d: 0e:b3:47:e1:c8:d4:b6:7d:3a:e7:aa:c7:4e:13:db:59:0d:5f: eb:cb:96:c2:05:09:9f:c7:8b:b9:76:6b:23:d7:61:63:2b:41: cf:55:67:be:43:c0:9a:f5:fe:7f:bf:ad:74:51:9d:d3:03:4f: b7:dc:7a:b2:86:c8:00:03:a3:5a:72:7d:da:d1:21:49:d8:9e: ba:6f:ac:31:0e:85:c2:b0:e6:ec:9f:2f:01:b3:e2:1d:1c:e5: 9b:9f:d7:2a:4b:bb:1a:47:82:81:a8:38:5f:d3:6d:58:f8:df: d7:41:25:6c -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUYOKcYnFTj3ykP9by5/ZOQkeOKnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1NUY5NUYzRjUwNDA2QUU2OEE5Q0NGNTE0ODM0ODNE MjUxQkI3MDAeFw0yNTEyMTcyMTA3MzlaFw0yNjEyMTYyMTEyMzlaMDMxMTAvBgNV BAMTKEEzRDVGMzc4RTA3QUU4MERDOTNGQjlDRTlCNDdCOEVFQjZGNUIxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpstUR/L2YlmZitpjhZGV2P9xh We6OixsF+0WosLEu6LUfBHOwcka7lvjzvLRkrbzOlVMF6qQlZWIUF9ENlmw1drzf OXX9cvKNJqR+SWyrujVBq1eOYtL4wakCc+Y+wCX/Ft44xTCi0LgT8+6SkPGsPHQy r0HeRlHtkYLwjonuzvicaalA53rmSU8R4N5iBYRAJR3VLgPtYcTtWpKGFziUi/bM Jb5y4/PuxgjoZKlBbvnfxDFjpxDU6U7li0PL0M19Q7ZVau19CPat69W3YXsZL2WP 2D6eeLfGnW7EANBOX5bDJS0SSI0dN/gzkuAmsoZykQAaO25GiEIloeZrtHs/AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUo9XzeOB66A3JP7nOm0e47rb1sSEwHwYDVR0j BBgwFoAUcVX5Xz9QQGrmipzPUUg0g9JRu3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz UDIvMC83MTU1Rjk1RjNGNTA0MDZBRTY4QTlDQ0Y1MTQ4MzQ4M0QyNTFCQjcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNTVGOTVGM0Y1MDQwNkFF NjhBOUNDRjUxNDgzNDgzRDI1MUJCNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv MzEzMzM4MmUzOTM0MmUzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzgzMzM2 MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKKXggwDQYJKoZIhvcNAQELBQADggEBAG9H/8vUxaN9R90k eL+LLUBxNal4wCcQ7foXIZ9Vya3xxxHx8ZWXvw3GAQsv3+vK+W32P2smMna6p6ii OJqh5jLTL6cxOLDzOYHAaJrU9Z0KK5uXnZcQ9aks6brjoLNaHLqN1Qastc6eupQW 0Qep9nk+36O+ysAvCkUaDtnnKMtW1srpusIdmFB61bpdu8YInQ6zR+HI1LZ9Oueq x04T21kNX+vLlsIFCZ/Hi7l2ayPXYWMrQc9VZ75DwJr1/n+/rXRRndMDT7fcerKG yAADo1pyfdrRIUnYnrpvrDEOhcKw5uyfLwGz4h0c5Zuf1ypLuxpHgoGoOF/TbVj4 39dBJWw= -----END CERTIFICATE-----Generated at Sat Dec 20 11:28:28 2025 by rpki-client