This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/3133312e37322e36382e302f32322d3234203d3e203631373538.roa File: 3133312e37322e36382e302f32322d3234203d3e203631373538.roa (raw, json) Hash identifier: /KkW1FYvg3YSLVyHyi85JjUX8umT+j1RWEUIg3ORJUU= Subject key identifier: 37:CB:34:13:DD:0E:1B:C3:C5:C8:93:0F:AB:BD:BB:15:89:D5:49:D1 Certificate issuer: /CN=9D201B5F742B3B51DE2756B2BFF38C728B62685E Certificate serial: 5A2B5D2A3DCCB62D0DCC17AC113B4543C198DB75 Authority key identifier: 9D:20:1B:5F:74:2B:3B:51:DE:27:56:B2:BF:F3:8C:72:8B:62:68:5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D201B5F742B3B51DE2756B2BFF38C728B62685E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/3133312e37322e36382e302f32322d3234203d3e203631373538.roa Signing time: Mon 15 Dec 2025 12:38:43 +0000 ROA not before: Mon 15 Dec 2025 12:33:43 +0000 ROA not after: Mon 14 Dec 2026 12:38:43 +0000 asID: 61758 IP address blocks: 131.72.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/9D201B5F742B3B51DE2756B2BFF38C728B62685E.crl rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/9D201B5F742B3B51DE2756B2BFF38C728B62685E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D201B5F742B3B51DE2756B2BFF38C728B62685E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 17:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:5d:2a:3d:cc:b6:2d:0d:cc:17:ac:11:3b:45:43:c1:98:db:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D201B5F742B3B51DE2756B2BFF38C728B62685E Validity Not Before: Dec 15 12:33:43 2025 GMT Not After : Dec 14 12:38:43 2026 GMT Subject: CN=37CB3413DD0E1BC3C5C8930FABBDBB1589D549D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:e2:b2:f5:43:13:f6:96:59:99:08:b5:b2: 70:08:14:90:56:a7:c2:0a:02:28:83:89:50:ea:1b: 49:5a:77:ba:18:95:1c:15:ad:1a:c3:9d:43:ff:96: 6d:ab:02:b3:da:28:23:53:7a:bf:f8:a0:b4:28:06: 13:ff:22:7d:2e:ed:5b:49:76:a2:d0:75:de:95:94: 5d:cc:bb:2f:c8:fd:c3:4c:c2:e8:38:45:ed:bf:07: d0:f2:40:b2:c5:91:6e:cd:e7:68:99:19:cb:86:88: fd:c8:bc:ed:94:b2:4c:42:ce:b4:ef:35:e1:8a:44: 15:fb:e1:d4:ce:f8:78:fb:dc:3c:93:a4:e2:5a:86: 2c:85:a3:69:95:d4:32:c9:7f:2d:6f:a6:1b:bf:ac: 5c:7f:be:a4:63:06:69:f0:98:79:b4:e8:19:5a:58: 16:27:ea:9d:a4:af:94:24:4c:28:35:f5:06:eb:e2: 18:e9:ba:f4:eb:38:79:55:06:15:ed:8e:5b:d5:dc: 9e:ea:d3:af:a5:8d:2c:68:dd:55:70:a4:a3:ef:88: 27:85:ef:d2:e8:74:c1:46:20:79:0d:8b:e7:c8:7f: 06:90:08:16:3c:c0:0e:a9:11:ea:d7:24:a6:f4:92: 88:48:c8:1f:62:c5:0a:d8:36:87:97:44:1e:4b:f6: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:34:13:DD:0E:1B:C3:C5:C8:93:0F:AB:BD:BB:15:89:D5:49:D1 X509v3 Authority Key Identifier: keyid:9D:20:1B:5F:74:2B:3B:51:DE:27:56:B2:BF:F3:8C:72:8B:62:68:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/9D201B5F742B3B51DE2756B2BFF38C728B62685E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D201B5F742B3B51DE2756B2BFF38C728B62685E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/3133312e37322e36382e302f32322d3234203d3e203631373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.68.0/22 Signature Algorithm: sha256WithRSAEncryption 41:ea:3a:2e:9e:63:bf:4b:ec:2f:e7:c2:75:8b:42:d8:50:f5: e7:b2:87:a9:38:53:e2:9f:75:46:b6:84:a7:31:bd:3e:39:ac: 9c:59:7c:92:56:36:19:69:0d:46:7a:a8:a6:0b:a1:10:c4:73: fb:a6:10:c7:e2:64:74:ec:9c:cb:9e:df:16:35:6a:23:d8:d3: d3:b2:90:a2:1a:0c:2f:09:7a:30:c5:fb:05:f4:99:40:13:a9: b0:b6:80:47:49:72:57:7d:05:f9:49:a3:2a:45:49:74:a1:25: e2:15:27:0c:e7:3b:6d:5b:7f:c6:db:8e:ff:64:3d:0e:8a:29: bb:70:7b:41:d0:61:e3:32:83:0f:36:a2:8c:b0:bd:14:54:82: 6e:fe:cc:8a:01:16:a7:23:5b:8f:56:66:84:46:69:e2:fd:c3: d9:4e:1f:2f:28:28:ff:4c:34:41:13:37:57:60:8e:99:73:90: bb:c4:e1:e3:1e:28:8e:10:05:40:81:41:6d:e3:27:2b:b9:31: 92:d9:b3:cf:33:32:0d:54:e4:c8:75:5a:7b:ce:33:70:a1:06: 60:f8:22:d7:0f:ab:38:90:29:49:3c:eb:f6:1e:31:84:2e:da: 8d:5a:43:53:1a:47:9f:a2:17:c4:b2:d0:7b:10:93:72:25:56: f7:24:84:5f -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUWitdKj3Mti0NzBesETtFQ8GY23UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMDFCNUY3NDJCM0I1MURFMjc1NkIyQkZGMzhDNzI4 QjYyNjg1RTAeFw0yNTEyMTUxMjMzNDNaFw0yNjEyMTQxMjM4NDNaMDMxMTAvBgNV BAMTKDM3Q0IzNDEzREQwRTFCQzNDNUM4OTMwRkFCQkRCQjE1ODlENTQ5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEeKy9UMT9pZZmQi1snAIFJBW p8IKAiiDiVDqG0lad7oYlRwVrRrDnUP/lm2rArPaKCNTer/4oLQoBhP/In0u7VtJ dqLQdd6VlF3Muy/I/cNMwug4Re2/B9DyQLLFkW7N52iZGcuGiP3IvO2UskxCzrTv NeGKRBX74dTO+Hj73DyTpOJahiyFo2mV1DLJfy1vphu/rFx/vqRjBmnwmHm06Bla WBYn6p2kr5QkTCg19Qbr4hjpuvTrOHlVBhXtjlvV3J7q06+ljSxo3VVwpKPviCeF 79LodMFGIHkNi+fIfwaQCBY8wA6pEerXJKb0kohIyB9ixQrYNoeXRB5L9kxDAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUN8s0E90OG8PFyJMPq727FYnVSdEwHwYDVR0j BBgwFoAUnSAbX3QrO1HeJ1ayv/OMcotiaF4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENxWHNmM3RmOThudk1qZ0xLcG9jdFExeVBkeXVCa1BkNkxpcUJxTHdn TTUvMC85RDIwMUI1Rjc0MkIzQjUxREUyNzU2QjJCRkYzOEM3MjhCNjI2ODVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMjAxQjVGNzQyQjNCNTFE RTI3NTZCMkJGRjM4QzcyOEI2MjY4NUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRDcVhzZjN0Zjk4bnZNamdMS3BvY3RRMXlQZHl1QmtQZDZMaXFCcUx3Z001LzAv MzEzMzMxMmUzNzMyMmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM3 MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAoNIRDANBgkqhkiG9w0BAQsFAAOCAQEAQeo6Lp5jv0vs L+fCdYtC2FD157KHqThT4p91RraEpzG9PjmsnFl8klY2GWkNRnqopguhEMRz+6YQ x+JkdOycy57fFjVqI9jT07KQohoMLwl6MMX7BfSZQBOpsLaAR0lyV30F+UmjKkVJ dKEl4hUnDOc7bVt/xtuO/2Q9Doopu3B7QdBh4zKDDzaijLC9FFSCbv7MigEWpyNb j1ZmhEZp4v3D2U4fLygo/0w0QRM3V2COmXOQu8Th4x4ojhAFQIFBbeMnK7kxktmz zzMyDVTkyHVae84zcKEGYPgi1w+rOJApSTzr9h4xhC7ajVpDUxpHn6IXxLLQexCT ciVW9ySEXw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:21:49 2025 by rpki-client