This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3332203d3e203238313931.roa File: 3138392e39302e33322e302f32302d3332203d3e203238313931.roa (raw, json) Hash identifier: Tnxet1B56KRHDgiPUTdAQYrJWkjqMH/9nPrrsCnQKlQ= Subject key identifier: 92:20:39:41:EB:8E:C1:41:B6:5F:2E:16:5C:20:4D:60:B2:F2:B3:35 Certificate issuer: /CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4 Certificate serial: 73CBC29B9E02325135D42BD716EEA873138C9649 Authority key identifier: BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3332203d3e203238313931.roa Signing time: Mon 22 Dec 2025 11:39:55 +0000 ROA not before: Mon 22 Dec 2025 11:34:55 +0000 ROA not after: Mon 21 Dec 2026 11:39:55 +0000 asID: 28191 IP address blocks: 189.90.32.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 06:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cb:c2:9b:9e:02:32:51:35:d4:2b:d7:16:ee:a8:73:13:8c:96:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4 Validity Not Before: Dec 22 11:34:55 2025 GMT Not After : Dec 21 11:39:55 2026 GMT Subject: CN=92203941EB8EC141B65F2E165C204D60B2F2B335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:c5:e2:cc:ca:46:ac:a5:bc:34:72:11:8e: f8:30:a7:03:ad:1a:26:62:32:e3:88:36:e6:7a:a9: 2d:bf:ae:d4:dc:93:07:e3:58:3f:51:bd:ae:bc:17: 93:dc:5d:95:f5:56:b0:76:e3:69:64:e8:a4:6f:77: b1:91:cf:8b:53:f9:bd:ab:4c:5f:23:c8:3c:1b:76: cf:0d:14:fe:f1:9e:57:c7:97:f7:45:28:70:9f:41: de:f9:1d:60:ec:22:b1:00:8d:a4:9f:c9:18:be:32: 10:d4:b1:97:3a:c0:b8:0f:db:89:3c:90:72:85:da: b5:5c:76:c8:92:39:85:1e:68:f6:6c:63:4c:8c:ec: 0f:1b:5b:0c:79:0c:0b:95:20:39:45:a8:d7:37:5c: f9:5d:43:d0:7e:6a:19:1e:c9:71:9c:3b:36:a2:8e: 4b:6e:48:1c:15:9e:f2:6e:2c:87:3f:9a:cc:29:df: ea:01:39:04:bb:12:1f:3d:a9:c2:f1:52:b0:a4:9e: 78:f5:06:96:36:97:ab:42:1a:58:73:56:e7:b1:cd: f9:df:aa:93:74:fa:e7:25:d0:f9:1a:95:e8:28:70: 87:f7:0f:48:e8:81:c5:58:6e:dd:c0:77:07:78:70: bc:24:41:a4:44:fa:cf:34:b1:db:91:d5:ed:01:98: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:20:39:41:EB:8E:C1:41:B6:5F:2E:16:5C:20:4D:60:B2:F2:B3:35 X509v3 Authority Key Identifier: keyid:BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3332203d3e203238313931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.90.32.0/20 Signature Algorithm: sha256WithRSAEncryption 57:f0:99:a3:4f:26:9e:e0:1f:ac:44:81:ba:7d:73:80:ac:37: 70:0d:6f:87:a4:2c:44:b3:6d:36:e6:21:3e:32:8a:db:cd:4d: c1:2b:3e:e9:01:df:f9:a2:80:a5:fa:fc:97:9b:3f:be:f0:47: f2:d0:7f:16:8a:50:66:a5:c5:91:76:62:69:72:0c:1b:92:27: f3:a2:b3:67:6d:c1:4a:11:0b:ea:e3:01:c8:a4:f9:e7:92:36: 1f:fd:b4:20:e4:2c:77:d5:2a:6d:9a:8a:20:3c:10:38:01:19: 5a:31:ab:30:71:49:14:fc:7c:ca:5b:58:a1:f0:f7:1c:2d:4b: 84:fc:a5:20:ad:ac:3e:26:cd:0c:bf:32:dd:2e:a7:4c:25:af: 5e:30:3f:b0:31:e8:4f:07:53:0e:bc:d3:4f:5a:bd:60:3a:1e: be:5d:f0:48:a2:f4:35:fd:15:db:02:41:c3:20:bf:50:79:d5: 86:5a:fd:7a:e9:d5:f5:0b:97:3c:bd:06:79:b1:00:34:e0:03: 63:51:f5:ab:bf:08:5f:9f:08:25:8d:3c:de:f5:9a:0d:c7:e1: c6:0f:e0:74:b1:a4:db:6d:3b:f7:2b:35:8a:bf:f1:d0:0c:c8: f3:a4:91:47:8e:8d:c3:12:ba:1e:27:5d:f9:4d:f4:75:a2:85: 78:f9:0e:2f -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUc8vCm54CMlE11CvXFu6ocxOMlkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFNzU3QTY3RjVGRDRBRTc3OTNCMjM4QUNCOTczMDU2 RTlCMUVDNDAeFw0yNTEyMjIxMTM0NTVaFw0yNjEyMjExMTM5NTVaMDMxMTAvBgNV BAMTKDkyMjAzOTQxRUI4RUMxNDFCNjVGMkUxNjVDMjA0RDYwQjJGMkIzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZEsXizMpGrKW8NHIRjvgwpwOt GiZiMuOINuZ6qS2/rtTckwfjWD9Rva68F5PcXZX1VrB242lk6KRvd7GRz4tT+b2r TF8jyDwbds8NFP7xnlfHl/dFKHCfQd75HWDsIrEAjaSfyRi+MhDUsZc6wLgP24k8 kHKF2rVcdsiSOYUeaPZsY0yM7A8bWwx5DAuVIDlFqNc3XPldQ9B+ahkeyXGcOzai jktuSBwVnvJuLIc/mswp3+oBOQS7Eh89qcLxUrCknnj1BpY2l6tCGlhzVuexzfnf qpN0+ucl0PkalegocIf3D0jogcVYbt3Adwd4cLwkQaRE+s80sduR1e0BmGO7AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUkiA5QeuOwUG2Xy4WXCBNYLLyszUwHwYDVR0j BBgwFoAUvedXpn9f1K53k7I4rLlzBW6bHsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5 R1MvMC9CREU3NTdBNjdGNUZENEFFNzc5M0IyMzhBQ0I5NzMwNTZFOUIxRUM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTc1N0E2N0Y1RkQ0QUU3 NzkzQjIzOEFDQjk3MzA1NkU5QjFFQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv MzEzODM5MmUzOTMwMmUzMzMyMmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODMx MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEBL1aIDANBgkqhkiG9w0BAQsFAAOCAQEAV/CZo08mnuAf rESBun1zgKw3cA1vh6QsRLNtNuYhPjKK281NwSs+6QHf+aKApfr8l5s/vvBH8tB/ FopQZqXFkXZiaXIMG5In86KzZ23BShEL6uMByKT555I2H/20IOQsd9UqbZqKIDwQ OAEZWjGrMHFJFPx8yltYofD3HC1LhPylIK2sPibNDL8y3S6nTCWvXjA/sDHoTwdT DrzTT1q9YDoevl3wSKL0Nf0V2wJBwyC/UHnVhlr9eunV9QuXPL0GebEANOADY1H1 q78IX58IJY083vWaDcfhxg/gdLGk22079ys1ir/x0AzI86SRR46NwxK6Hidd+U30 daKFePkOLw== -----END CERTIFICATE-----Generated at Tue Dec 23 17:13:55 2025 by rpki-client