This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/3133312e37322e36382e302f32332d3234203d3e203631373538.roa File: 3133312e37322e36382e302f32332d3234203d3e203631373538.roa (raw, json) Hash identifier: ImdDYsA2P7kWSr2w0k0AfSsb3MFLHg2HtkIwv/fUN60= Subject key identifier: 54:D3:76:C8:80:E0:C1:D5:3F:EE:2C:92:A0:64:9C:01:F2:C1:21:B2 Certificate issuer: /CN=9D201B5F742B3B51DE2756B2BFF38C728B62685E Certificate serial: 066A4F485536A4B8F8706314D1B43EB626650090 Authority key identifier: 9D:20:1B:5F:74:2B:3B:51:DE:27:56:B2:BF:F3:8C:72:8B:62:68:5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D201B5F742B3B51DE2756B2BFF38C728B62685E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/3133312e37322e36382e302f32332d3234203d3e203631373538.roa Signing time: Mon 15 Dec 2025 12:39:13 +0000 ROA not before: Mon 15 Dec 2025 12:34:13 +0000 ROA not after: Mon 14 Dec 2026 12:39:13 +0000 asID: 61758 IP address blocks: 131.72.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/9D201B5F742B3B51DE2756B2BFF38C728B62685E.crl rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/9D201B5F742B3B51DE2756B2BFF38C728B62685E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D201B5F742B3B51DE2756B2BFF38C728B62685E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 17:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6a:4f:48:55:36:a4:b8:f8:70:63:14:d1:b4:3e:b6:26:65:00:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D201B5F742B3B51DE2756B2BFF38C728B62685E Validity Not Before: Dec 15 12:34:13 2025 GMT Not After : Dec 14 12:39:13 2026 GMT Subject: CN=54D376C880E0C1D53FEE2C92A0649C01F2C121B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:89:8e:8f:44:72:3d:ae:1e:fc:a3:79:51: 30:4a:2c:53:6d:e1:c2:4c:4c:3b:bb:56:e9:c1:45: 69:2c:7c:86:a0:7b:1a:59:f5:c5:58:2d:0d:14:1d: 2e:53:f7:0f:dc:4b:31:ec:64:dc:b4:0a:5e:41:96: 95:f0:ae:33:21:a7:70:3e:1a:8d:d3:c6:5e:2f:52: d7:ce:b9:33:ff:75:ca:e4:63:50:c3:b5:dd:75:35: aa:d9:b5:1d:e0:84:b3:f8:8a:84:39:47:b7:2f:f7: 10:33:80:16:42:fb:bd:a7:67:7b:2e:eb:fa:4c:07: e3:a9:49:28:88:d5:ad:6c:da:7f:6f:44:75:c5:5d: 0a:64:0a:6c:bb:c5:a6:02:17:b6:42:64:5c:67:f2: 5c:3c:ca:58:43:bb:dd:7c:61:d2:03:5a:be:c8:4b: 57:70:52:91:ef:89:4f:cb:e7:24:fc:2e:48:3c:ee: 70:40:04:d4:0a:94:16:d7:34:5f:34:e0:02:da:f1: 07:f1:a5:70:d2:80:53:9f:c4:0f:50:22:ff:8c:59: 37:f8:ba:ae:ca:6e:7f:2c:b6:bb:54:cd:ff:d6:a2: d7:c4:d3:59:e3:4a:75:a8:35:ff:a6:48:e7:df:4e: bd:ff:72:26:f2:56:c5:3e:d1:4a:ea:09:de:05:ce: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D3:76:C8:80:E0:C1:D5:3F:EE:2C:92:A0:64:9C:01:F2:C1:21:B2 X509v3 Authority Key Identifier: keyid:9D:20:1B:5F:74:2B:3B:51:DE:27:56:B2:BF:F3:8C:72:8B:62:68:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/9D201B5F742B3B51DE2756B2BFF38C728B62685E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D201B5F742B3B51DE2756B2BFF38C728B62685E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CqXsf3tf98nvMjgLKpoctQ1yPdyuBkPd6LiqBqLwgM5/0/3133312e37322e36382e302f32332d3234203d3e203631373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.68.0/23 Signature Algorithm: sha256WithRSAEncryption 95:c2:d1:50:33:ad:45:50:65:12:d7:91:bf:a5:41:de:5d:74: 8a:5e:8f:26:18:dd:b1:d4:c2:90:89:08:6e:af:40:d1:73:b9: 10:e1:6a:2d:34:d0:73:2f:ad:e2:84:18:f1:48:6a:a5:84:45: b1:c0:63:45:ca:9f:63:e9:0b:cc:c5:dd:bc:c2:f2:e9:13:fa: e3:0c:a1:21:5f:57:82:b1:06:ab:38:69:af:f7:8b:3f:03:f2: 89:f8:0e:98:31:f4:ec:78:99:9e:fe:55:ea:96:34:72:68:b3: 60:2d:11:55:58:0e:1c:7e:57:89:7b:20:2b:fb:91:df:42:ab: d9:5d:82:01:d2:1a:f3:57:07:57:e3:99:1c:79:30:03:a3:51: 07:26:92:fb:4f:e1:97:bb:f0:ae:54:48:c8:39:34:c8:98:03: 47:31:0f:dc:94:e7:68:5f:e4:a4:d4:7a:c7:f6:8a:35:e1:4a: c7:5b:61:10:b6:e2:26:16:29:92:f6:16:d0:ab:5b:67:03:40: 9c:65:f8:55:ad:b5:ec:f6:9f:1f:ae:d3:bb:97:e9:53:c2:5a: f4:75:6c:72:1c:a3:b1:b7:27:1f:1c:a3:48:9b:de:f1:3c:2a: 0c:de:91:4e:2c:55:e9:44:b3:d8:8c:18:d1:a1:9a:12:69:ef: 95:dc:3f:51 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUBmpPSFU2pLj4cGMU0bQ+tiZlAJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMDFCNUY3NDJCM0I1MURFMjc1NkIyQkZGMzhDNzI4 QjYyNjg1RTAeFw0yNTEyMTUxMjM0MTNaFw0yNjEyMTQxMjM5MTNaMDMxMTAvBgNV BAMTKDU0RDM3NkM4ODBFMEMxRDUzRkVFMkM5MkEwNjQ5QzAxRjJDMTIxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI04mOj0RyPa4e/KN5UTBKLFNt 4cJMTDu7VunBRWksfIagexpZ9cVYLQ0UHS5T9w/cSzHsZNy0Cl5BlpXwrjMhp3A+ Go3Txl4vUtfOuTP/dcrkY1DDtd11NarZtR3ghLP4ioQ5R7cv9xAzgBZC+72nZ3su 6/pMB+OpSSiI1a1s2n9vRHXFXQpkCmy7xaYCF7ZCZFxn8lw8ylhDu918YdIDWr7I S1dwUpHviU/L5yT8Lkg87nBABNQKlBbXNF804ALa8QfxpXDSgFOfxA9QIv+MWTf4 uq7Kbn8strtUzf/WotfE01njSnWoNf+mSOffTr3/cibyVsU+0UrqCd4FzvxFAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUVNN2yIDgwdU/7iySoGScAfLBIbIwHwYDVR0j BBgwFoAUnSAbX3QrO1HeJ1ayv/OMcotiaF4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENxWHNmM3RmOThudk1qZ0xLcG9jdFExeVBkeXVCa1BkNkxpcUJxTHdn TTUvMC85RDIwMUI1Rjc0MkIzQjUxREUyNzU2QjJCRkYzOEM3MjhCNjI2ODVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMjAxQjVGNzQyQjNCNTFE RTI3NTZCMkJGRjM4QzcyOEI2MjY4NUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRDcVhzZjN0Zjk4bnZNamdMS3BvY3RRMXlQZHl1QmtQZDZMaXFCcUx3Z001LzAv MzEzMzMxMmUzNzMyMmUzNjM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTM3 MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAYNIRDANBgkqhkiG9w0BAQsFAAOCAQEAlcLRUDOtRVBl EteRv6VB3l10il6PJhjdsdTCkIkIbq9A0XO5EOFqLTTQcy+t4oQY8UhqpYRFscBj RcqfY+kLzMXdvMLy6RP64wyhIV9XgrEGqzhpr/eLPwPyifgOmDH07HiZnv5V6pY0 cmizYC0RVVgOHH5XiXsgK/uR30Kr2V2CAdIa81cHV+OZHHkwA6NRByaS+0/hl7vw rlRIyDk0yJgDRzEP3JTnaF/kpNR6x/aKNeFKx1thELbiJhYpkvYW0KtbZwNAnGX4 Va217PafH67Tu5fpU8Ja9HVschyjsbcnHxyjSJve8TwqDN6RTixV6USz2IwY0aGa Emnvldw/UQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:24:28 2025 by rpki-client