This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa File: 3133382e302e37322e302f32322d3332203d3e20323634353331.roa (raw, json) Hash identifier: ctH1RK0sGmodBWoih1VAAn0xwVvd1MwElQ2Uy1VsCRo= Subject key identifier: 88:67:3F:69:85:91:F5:F0:14:C8:18:4B:AF:9E:30:2B:D4:C5:0A:1F Certificate issuer: /CN=678744E2F008A98B388D024DEEAB7AEEF09D3883 Certificate serial: 09AA14F46E3EA347495DD02AFED0906D2C7D9052 Authority key identifier: 67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer Subject info access: rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa Signing time: Sat 27 Dec 2025 17:00:33 +0000 ROA not before: Sat 27 Dec 2025 16:55:33 +0000 ROA not after: Sat 26 Dec 2026 17:00:33 +0000 asID: 264531 IP address blocks: 138.0.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 21:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:aa:14:f4:6e:3e:a3:47:49:5d:d0:2a:fe:d0:90:6d:2c:7d:90:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678744E2F008A98B388D024DEEAB7AEEF09D3883 Validity Not Before: Dec 27 16:55:33 2025 GMT Not After : Dec 26 17:00:33 2026 GMT Subject: CN=88673F698591F5F014C8184BAF9E302BD4C50A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:5d:ce:35:c0:e8:12:1e:5a:8c:d3:d8:ba: 48:7e:8f:86:57:8b:64:c6:e8:96:39:f4:fd:ed:0a: 8d:9c:5a:03:8e:e7:c2:9d:5b:fe:85:77:54:ca:d3: 78:b3:87:60:be:ce:f5:82:a3:2e:d1:33:29:42:f0: ef:e4:c4:cb:33:8a:3d:26:8e:f5:15:2c:21:46:a6: 15:fe:ff:ba:91:73:cf:66:1f:9f:d6:39:ba:d4:d2: d4:9c:03:1f:0b:0d:35:a4:72:ab:8a:6d:87:4e:e1: c8:b7:8a:48:63:45:c7:99:8f:10:d6:d3:0f:9e:86: 58:73:a2:a9:9b:44:a1:f0:57:cf:46:24:48:6e:61: 51:37:53:05:49:04:c8:75:9c:1e:e0:c0:0d:3e:2a: 01:83:b9:55:d0:8a:9b:20:fa:81:32:92:3b:99:cd: fe:de:7c:c3:91:ed:cb:0c:b2:9f:e1:09:39:31:5a: 3d:49:1e:49:20:39:49:7d:f3:9c:6f:b5:21:c6:cf: 76:92:72:4f:46:83:75:1a:15:a2:73:95:31:4d:89: 4a:af:3c:b8:98:3f:b5:5a:98:d6:7e:12:c8:ae:98: d0:a2:51:e0:44:e0:67:a4:f5:06:df:76:bc:57:34: 7f:67:62:e6:38:72:91:59:21:4b:c8:9f:a2:ee:93: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:67:3F:69:85:91:F5:F0:14:C8:18:4B:AF:9E:30:2B:D4:C5:0A:1F X509v3 Authority Key Identifier: keyid:67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.72.0/22 Signature Algorithm: sha256WithRSAEncryption 80:dc:ae:fe:48:3a:98:81:46:cc:94:13:47:aa:08:91:b8:05: bb:d9:35:fe:cd:d5:04:1f:d7:eb:a5:f4:59:53:e5:cd:5d:ad: d3:a0:33:66:22:6d:72:87:0e:a9:23:eb:a7:46:fe:41:3c:1c: 56:5d:2f:46:60:2e:8e:53:e3:5e:ea:09:c2:dd:8b:d3:bb:81: 84:72:0f:01:ec:b1:72:7a:54:49:fb:b9:04:f6:cd:fb:1b:5b: 0c:f5:d6:af:d1:bb:dc:d5:c4:8a:0d:75:fc:f8:b6:7e:4f:21: e7:9d:c5:b0:23:06:a5:d9:86:e9:d5:bc:ea:a9:d1:24:d7:3e: b5:61:7c:7f:5b:42:b0:e4:65:7a:7e:b2:35:1d:54:8e:07:05: 9e:5b:bc:07:f1:fc:79:51:94:65:cf:3f:fe:42:28:08:c8:d1: 19:32:b2:03:6c:c1:72:ce:7c:01:b5:b0:c0:2f:21:a2:57:18: df:80:4b:c4:1b:bf:3f:73:c0:2e:21:1e:e8:42:5e:0d:e9:e2: 3f:3c:7b:7f:e3:22:8d:41:56:bf:17:0d:40:20:9f:16:08:3e: d5:48:e0:92:bb:df:30:c8:6a:25:4b:1c:a0:6c:bd:c3:e0:1c: 79:77:55:25:ed:c3:91:70:4d:ac:55:bf:7d:65:39:4b:90:35: 9b:f9:4d:47 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUCaoU9G4+o0dJXdAq/tCQbSx9kFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4NzQ0RTJGMDA4QTk4QjM4OEQwMjRERUVBQjdBRUVG MDlEMzg4MzAeFw0yNTEyMjcxNjU1MzNaFw0yNjEyMjYxNzAwMzNaMDMxMTAvBgNV BAMTKDg4NjczRjY5ODU5MUY1RjAxNEM4MTg0QkFGOUUzMDJCRDRDNTBBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZ13ONcDoEh5ajNPYukh+j4ZX i2TG6JY59P3tCo2cWgOO58KdW/6Fd1TK03izh2C+zvWCoy7RMylC8O/kxMszij0m jvUVLCFGphX+/7qRc89mH5/WObrU0tScAx8LDTWkcquKbYdO4ci3ikhjRceZjxDW 0w+ehlhzoqmbRKHwV89GJEhuYVE3UwVJBMh1nB7gwA0+KgGDuVXQipsg+oEykjuZ zf7efMOR7csMsp/hCTkxWj1JHkkgOUl985xvtSHGz3aSck9Gg3UaFaJzlTFNiUqv PLiYP7VamNZ+EsiumNCiUeBE4Gek9QbfdrxXNH9nYuY4cpFZIUvIn6Luk4QrAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUiGc/aYWR9fAUyBhLr54wK9TFCh8wHwYDVR0j BBgwFoAUZ4dE4vAIqYs4jQJN7qt67vCdOIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmJRRkpzZGloWFBKN3RveWNZNnZUY0hVZVJ5VFFyS3hSNldxcGRLZ3Z3 NkgvMS82Nzg3NDRFMkYwMDhBOThCMzg4RDAyNERFRUFCN0FFRUYwOUQzODgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3ODc0NEUyRjAwOEE5OEIz ODhEMDI0REVFQUI3QUVFRjA5RDM4ODMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JiUUZKc2RpaFhQSjd0b3ljWTZ2VGNIVWVSeVRRckt4UjZXcXBkS2d2dzZILzEv MzEzMzM4MmUzMDJlMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM1 MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAooASDANBgkqhkiG9w0BAQsFAAOCAQEAgNyu/kg6mIFG zJQTR6oIkbgFu9k1/s3VBB/X66X0WVPlzV2t06AzZiJtcocOqSPrp0b+QTwcVl0v RmAujlPjXuoJwt2L07uBhHIPAeyxcnpUSfu5BPbN+xtbDPXWr9G73NXEig11/Pi2 fk8h553FsCMGpdmG6dW86qnRJNc+tWF8f1tCsORlen6yNR1UjgcFnlu8B/H8eVGU Zc8//kIoCMjRGTKyA2zBcs58AbWwwC8holcY34BLxBu/P3PALiEe6EJeDeniPzx7 f+MijUFWvxcNQCCfFgg+1UjgkrvfMMhqJUscoGy9w+AceXdVJe3DkXBNrFW/fWU5 S5A1m/lNRw== -----END CERTIFICATE-----Generated at Thu Jan 8 23:14:40 2026 by rpki-client