This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32332d3332203d3e20323733343331.roa File: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (raw, json) Hash identifier: LQmjA5poGNiCVqzA1d5+4wCMnXKAN90zAynt09PEKBM= Subject key identifier: 41:BA:D9:CA:FC:BC:B7:04:74:79:0C:20:3D:41:26:18:89:1C:20:9C Certificate issuer: /CN=1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63 Certificate serial: 5E75A40673B3D0F66AF81BB05331218C5867C8F1 Authority key identifier: 1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32332d3332203d3e20323733343331.roa Signing time: Mon 22 Dec 2025 12:06:08 +0000 ROA not before: Mon 22 Dec 2025 12:01:08 +0000 ROA not after: Mon 21 Dec 2026 12:06:08 +0000 asID: 273431 IP address blocks: 191.7.0.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.crl rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 29 Dec 2025 15:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:75:a4:06:73:b3:d0:f6:6a:f8:1b:b0:53:31:21:8c:58:67:c8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63 Validity Not Before: Dec 22 12:01:08 2025 GMT Not After : Dec 21 12:06:08 2026 GMT Subject: CN=41BAD9CAFCBCB70474790C203D412618891C209C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:52:15:64:56:9e:51:fc:a1:7c:9b:bd:a7: d4:f3:6b:dc:11:d1:52:54:00:e3:ae:93:f8:99:57: 67:f4:1a:61:09:7e:bd:a8:de:d3:49:6f:cd:9b:fe: fb:3f:15:81:9e:0e:25:6e:ae:68:0f:48:fe:8a:a4: 89:50:12:2a:a4:26:da:91:26:f4:c1:ea:d8:3c:44: 41:75:a8:62:d8:91:69:73:a1:7e:d4:4d:fc:4b:ad: b8:96:70:70:03:13:80:63:b5:25:13:ac:ca:6e:d4: 89:c3:39:89:8c:e1:01:23:35:ce:26:98:3c:f2:22: 1a:df:bc:15:7f:24:28:2b:fe:78:83:a1:e1:7c:d5: 67:b2:bd:b6:a3:8b:80:bf:fd:cc:af:fc:55:f8:11: 83:b5:79:73:0b:48:a9:66:7a:f0:20:4b:52:d5:03: 98:df:8c:d9:fc:6f:44:73:a4:9f:78:d9:b5:3d:04: 2e:1f:2c:f3:3e:7f:b0:8f:88:de:07:70:80:50:7f: 03:2b:2f:dd:fa:c8:15:cc:8f:d3:ee:45:72:04:bf: 56:15:60:3c:b3:af:e6:3e:2e:80:4e:68:43:1c:e3: dc:a8:51:3a:57:bc:bb:91:0b:9e:55:41:44:68:48: e8:9d:bf:8c:8d:5f:f0:2a:e1:45:29:f6:a9:4e:33: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:D9:CA:FC:BC:B7:04:74:79:0C:20:3D:41:26:18:89:1C:20:9C X509v3 Authority Key Identifier: keyid:1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32332d3332203d3e20323733343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.7.0.0/23 Signature Algorithm: sha256WithRSAEncryption 69:19:8c:cc:f4:ad:64:f3:e2:7a:e8:f1:98:ab:16:ae:73:5b: 8f:67:5a:d5:ce:3f:ba:89:50:c0:a0:fc:c1:48:6b:24:52:ae: a1:2b:3e:39:2c:c3:2f:e6:49:94:2a:86:b3:3d:b4:b2:d0:54: 67:6f:bc:8f:08:c4:44:ab:ee:0f:90:7c:32:b9:59:b1:02:ae: 87:f9:7b:f8:64:9c:f2:ef:1e:8a:c3:08:c2:b2:ae:25:d5:2c: 31:39:07:b5:f6:6e:40:39:ae:9a:4e:a2:8e:32:42:31:3d:a9: bf:42:42:6d:57:c9:cc:9f:f0:11:62:55:a9:27:32:53:fb:11: 56:a8:42:a2:74:a2:55:56:ae:33:34:7a:49:23:ef:f2:51:a7: 6b:ff:20:e7:1e:2c:57:a8:b1:ff:4e:ec:8d:71:40:bb:b5:9d: 83:b8:0d:cf:4e:74:d4:54:d9:48:ec:bc:d9:ea:4c:e5:53:9b: 55:0f:be:e4:d4:03:63:79:1b:35:bf:2f:50:78:82:16:63:60: 50:04:ea:72:75:48:04:a1:a8:06:bd:20:a5:4a:84:4e:27:91: 21:25:58:83:71:ef:a9:b0:ec:e4:32:d8:17:7c:fb:f8:93:47: 63:df:1e:65:d8:53:cb:39:c0:98:01:d9:0d:25:09:52:56:c7: 56:ec:94:bc -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUXnWkBnOz0PZq+BuwUzEhjFhnyPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxOUU4MERCQUExMkI4Q0VGQ0FEOUUzOEJCQzU2MkE0 OUJGNkU2MzAeFw0yNTEyMjIxMjAxMDhaFw0yNjEyMjExMjA2MDhaMDMxMTAvBgNV BAMTKDQxQkFEOUNBRkNCQ0I3MDQ3NDc5MEMyMDNENDEyNjE4ODkxQzIwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0E1IVZFaeUfyhfJu9p9Tza9wR 0VJUAOOuk/iZV2f0GmEJfr2o3tNJb82b/vs/FYGeDiVurmgPSP6KpIlQEiqkJtqR JvTB6tg8REF1qGLYkWlzoX7UTfxLrbiWcHADE4BjtSUTrMpu1InDOYmM4QEjNc4m mDzyIhrfvBV/JCgr/niDoeF81Weyvbaji4C//cyv/FX4EYO1eXMLSKlmevAgS1LV A5jfjNn8b0RzpJ942bU9BC4fLPM+f7CPiN4HcIBQfwMrL936yBXMj9PuRXIEv1YV YDyzr+Y+LoBOaEMc49yoUTpXvLuRC55VQURoSOidv4yNX/Aq4UUp9qlOM5fxAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUQbrZyvy8twR0eQwgPUEmGIkcIJwwHwYDVR0j BBgwFoAUHBnoDbqhK4zvytnji7xWKkm/bmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt RlgvMC8xQzE5RTgwREJBQTEyQjhDRUZDQUQ5RTM4QkJDNTYyQTQ5QkY2RTYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDMTlFODBEQkFBMTJCOENF RkNBRDlFMzhCQkM1NjJBNDlCRjZFNjMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRpcGs0ZVFkOXpVdWN5RXhMa3NDWXh5SzRTcUVkdkdRc0pMTGs5TXNwbUZYLzAv MzEzOTMxMmUzNzJlMzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM3MzMzNDMz MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAG/BwAwDQYJKoZIhvcNAQELBQADggEBAGkZjMz0rWTz4nro 8ZirFq5zW49nWtXOP7qJUMCg/MFIayRSrqErPjkswy/mSZQqhrM9tLLQVGdvvI8I xESr7g+QfDK5WbECrof5e/hknPLvHorDCMKyriXVLDE5B7X2bkA5rppOoo4yQjE9 qb9CQm1Xycyf8BFiVaknMlP7EVaoQqJ0olVWrjM0ekkj7/JRp2v/IOceLFeosf9O 7I1xQLu1nYO4Dc9OdNRU2UjsvNnqTOVTm1UPvuTUA2N5GzW/L1B4ghZjYFAE6nJ1 SAShqAa9IKVKhE4nkSElWINx76mw7OQy2Bd8+/iTR2PfHmXYU8s5wJgB2Q0lCVJW x1bslLw= -----END CERTIFICATE-----Generated at Mon Dec 29 08:31:10 2025 by rpki-client