This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/3133312e37322e3136302e302f32322d3234203d3e203631373331.roa File: 3133312e37322e3136302e302f32322d3234203d3e203631373331.roa (raw, json) Hash identifier: R/DUay5vTskmcvUjtvO8h4JX8lr2x2Dh08+6ae48L20= Subject key identifier: B4:E3:BA:EA:F8:F7:2F:57:BD:FF:41:73:37:14:3D:AF:67:3B:B8:A0 Certificate issuer: /CN=BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D Certificate serial: 55E6BB4E4CB89917AB04D194DCE3CDA88C815098 Authority key identifier: BD:00:E9:52:1B:EE:85:D9:D6:44:99:CF:90:A2:EB:EC:B5:B7:0F:1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/3133312e37322e3136302e302f32322d3234203d3e203631373331.roa Signing time: Wed 17 Dec 2025 16:54:56 +0000 ROA not before: Wed 17 Dec 2025 16:49:56 +0000 ROA not after: Wed 16 Dec 2026 16:54:56 +0000 asID: 61731 IP address blocks: 131.72.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.crl rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 01:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e6:bb:4e:4c:b8:99:17:ab:04:d1:94:dc:e3:cd:a8:8c:81:50:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D Validity Not Before: Dec 17 16:49:56 2025 GMT Not After : Dec 16 16:54:56 2026 GMT Subject: CN=B4E3BAEAF8F72F57BDFF417337143DAF673BB8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:82:aa:b4:39:11:d9:29:94:87:02:c3:a9: 82:ca:c2:3a:c7:70:01:5d:81:a0:bc:4f:b9:5e:c7: 5d:2c:96:c6:19:1f:76:a1:67:a5:d8:1c:33:87:c9: 67:90:c5:fa:6e:16:79:b9:e8:ec:ba:a0:b5:54:19: 32:b7:24:03:1f:4e:ed:25:f9:08:b0:96:4d:de:8c: e8:a8:2e:fc:6e:85:c4:fe:e2:d3:43:5d:e4:de:70: 6d:87:2a:ab:b2:ad:23:f5:6d:fa:d8:83:1f:55:ad: cb:6e:85:3e:72:05:0b:b0:d8:db:d6:53:b3:fc:c6: 9c:d6:95:a9:c0:16:8f:42:b8:3f:95:58:75:0b:68: 90:dd:e4:cc:27:f2:08:86:ec:92:c0:79:21:82:f0: eb:a5:ff:83:19:95:b2:fe:97:e2:59:b7:82:f3:9f: d1:af:0b:2b:5c:93:29:88:61:55:58:38:dd:63:71: d6:d1:a4:a4:8f:1a:03:32:4b:ed:48:66:97:ea:fc: 7c:83:4d:8c:97:7f:65:f0:f4:4a:a8:3b:c1:70:60: bd:e8:dc:ec:9a:df:fb:ff:5e:a8:04:9c:20:37:08: b1:71:29:62:3d:f3:d4:38:b5:c6:67:81:4b:9f:d9: 4c:0c:43:fb:c8:0f:91:3a:d1:4a:de:be:ea:bc:60: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E3:BA:EA:F8:F7:2F:57:BD:FF:41:73:37:14:3D:AF:67:3B:B8:A0 X509v3 Authority Key Identifier: keyid:BD:00:E9:52:1B:EE:85:D9:D6:44:99:CF:90:A2:EB:EC:B5:B7:0F:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/3133312e37322e3136302e302f32322d3234203d3e203631373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:22:17:6c:04:06:9f:7f:4d:b1:31:af:f8:23:07:23:7b:88: 3a:eb:25:f1:4e:b8:d9:21:d1:6c:87:84:a0:f7:5d:f8:7e:e3: f8:9d:fb:66:50:c2:8f:53:e8:73:35:83:ff:99:f5:c5:9f:67: 08:09:20:b6:1d:83:a9:2c:96:27:d3:ad:22:98:ef:19:b1:c0: e7:ff:82:9a:0e:60:ec:47:e6:ea:ec:ca:53:fb:70:97:89:c4: 6a:f2:a4:70:a6:3b:3a:72:41:3d:6c:a6:39:c0:26:f1:23:3b: ec:d6:05:10:d5:6c:44:ae:3a:62:e7:5d:3e:16:b5:3a:36:e9: ea:e9:e1:62:7e:d6:f3:f8:af:02:1b:98:ad:bb:8b:93:6f:2e: ac:db:33:6e:a7:f3:f0:87:01:4f:da:0e:4c:1a:73:28:5f:df: 75:c6:04:dd:62:41:d5:ff:61:c7:88:be:b4:4b:fe:f6:eb:c8: 4f:cb:9f:1d:7d:8a:65:e4:97:f9:07:22:ea:67:2d:59:da:3d: 83:1e:6d:94:cc:0b:2a:85:92:44:29:88:19:9b:3a:d1:32:a2: fe:de:b0:42:c0:c4:7c:3b:c0:06:e1:cc:fa:b7:e3:ed:78:31: b8:b3:0e:5e:a7:8a:50:4b:5f:2a:26:b9:b2:25:f7:50:cc:86: 05:42:11:1c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUVea7Tky4mRerBNGU3OPNqIyBUJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwMEU5NTIxQkVFODVEOUQ2NDQ5OUNGOTBBMkVCRUNC NUI3MEYxRDAeFw0yNTEyMTcxNjQ5NTZaFw0yNjEyMTYxNjU0NTZaMDMxMTAvBgNV BAMTKEI0RTNCQUVBRjhGNzJGNTdCREZGNDE3MzM3MTQzREFGNjczQkI4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYYKqtDkR2SmUhwLDqYLKwjrH cAFdgaC8T7lex10slsYZH3ahZ6XYHDOHyWeQxfpuFnm56Oy6oLVUGTK3JAMfTu0l +Qiwlk3ejOioLvxuhcT+4tNDXeTecG2HKquyrSP1bfrYgx9VrctuhT5yBQuw2NvW U7P8xpzWlanAFo9CuD+VWHULaJDd5Mwn8giG7JLAeSGC8Oul/4MZlbL+l+JZt4Lz n9GvCytckymIYVVYON1jcdbRpKSPGgMyS+1IZpfq/HyDTYyXf2Xw9EqoO8FwYL3o 3Oya3/v/XqgEnCA3CLFxKWI989Q4tcZngUuf2UwMQ/vID5E60Urevuq8YPBlAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUtOO66vj3L1e9/0FzNxQ9r2c7uKAwHwYDVR0j BBgwFoAUvQDpUhvuhdnWRJnPkKLr7LW3Dx0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXN0d2s3Unk4REx1WmJKcWR0emgzS3lzc0IzQW9rUGk3MVozWEpMem9l VTMvMC9CRDAwRTk1MjFCRUU4NUQ5RDY0NDk5Q0Y5MEEyRUJFQ0I1QjcwRjFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMDBFOTUyMUJFRTg1RDlE NjQ0OTlDRjkwQTJFQkVDQjVCNzBGMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlzdHdrN1J5OERMdVpiSnFkdHpoM0t5c3NCM0Fva1BpNzFaM1hKTHpvZVUzLzAv MzEzMzMxMmUzNzMyMmUzMTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx MzczMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCg0igMA0GCSqGSIb3DQEBCwUAA4IBAQAbIhdsBAaf f02xMa/4Iwcje4g66yXxTrjZIdFsh4Sg9134fuP4nftmUMKPU+hzNYP/mfXFn2cI CSC2HYOpLJYn060imO8ZscDn/4KaDmDsR+bq7MpT+3CXicRq8qRwpjs6ckE9bKY5 wCbxIzvs1gUQ1WxErjpi510+FrU6Nunq6eFiftbz+K8CG5itu4uTby6s2zNup/Pw hwFP2g5MGnMoX991xgTdYkHV/2HHiL60S/7268hPy58dfYpl5Jf5ByLqZy1Z2j2D Hm2UzAsqhZJEKYgZmzrRMqL+3rBCwMR8O8AG4cz6t+PteDG4sw5ep4pQS18qJrmy JfdQzIYFQhEc -----END CERTIFICATE-----Generated at Sat Dec 20 09:36:44 2025 by rpki-client