This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa File: 3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa (raw, json) Hash identifier: VUGIF5RH5nJwbjzdHMJMA7ow+J1QrG/jZf98YREDCV8= Subject key identifier: 59:EA:69:A6:92:5D:59:D7:66:ED:F5:80:10:3B:E0:7C:65:6C:28:EC Certificate issuer: /CN=F350A9A60C94593716E8BF7D10666C1777A7789E Certificate serial: 2860A9EA7219B06D7D2F08F22307001360BFA2CE Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer Subject info access: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa Signing time: Wed 24 Dec 2025 01:34:26 +0000 ROA not before: Wed 24 Dec 2025 01:29:26 +0000 ROA not after: Wed 23 Dec 2026 01:34:26 +0000 asID: 61621 IP address blocks: 170.231.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 22:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:60:a9:ea:72:19:b0:6d:7d:2f:08:f2:23:07:00:13:60:bf:a2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E Validity Not Before: Dec 24 01:29:26 2025 GMT Not After : Dec 23 01:34:26 2026 GMT Subject: CN=59EA69A6925D59D766EDF580103BE07C656C28EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:1d:2f:61:bc:23:40:e9:cb:f8:e6:e9:ff: 2e:93:44:bd:5d:99:75:83:f5:7f:db:ea:3c:0e:6d: 71:ed:5a:90:18:aa:4c:0b:36:06:1a:22:17:50:ec: 29:b5:c3:d1:fa:fe:e8:87:56:56:df:33:8f:4d:a0: 95:d7:56:7b:0d:f0:27:a3:ad:9f:c5:c6:a1:96:97: b9:f4:4d:a6:77:86:17:3d:3e:91:74:22:ed:ed:f8: f2:7e:c5:60:95:c2:0a:42:57:f8:4c:27:40:10:bd: 46:20:c8:e6:7a:e9:4a:43:37:f1:ae:01:2e:09:ad: 3f:b4:c8:45:2c:75:ed:7d:21:9e:14:18:58:47:de: 6c:df:01:d5:90:7c:27:07:3e:3f:fd:66:c0:cf:3f: 4e:3c:1c:6b:97:04:23:48:dc:47:64:be:53:de:f2: 0b:7c:f8:62:29:18:df:0e:e8:7c:51:50:7f:bf:6f: 45:40:db:5c:10:b4:16:df:de:dd:e9:7c:69:b3:f3: c9:50:14:2e:a7:d8:ea:f8:2f:62:ca:5b:ab:55:34: f9:7c:f6:ca:09:b1:c3:b3:4b:af:63:20:45:1e:b1: 64:7d:bf:b7:f3:a0:ed:7f:86:f2:6c:36:86:19:7b: e9:7f:5f:48:86:b0:84:83:50:a6:8b:74:0c:d0:05: cf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EA:69:A6:92:5D:59:D7:66:ED:F5:80:10:3B:E0:7C:65:6C:28:EC X509v3 Authority Key Identifier: keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.208.0/22 Signature Algorithm: sha256WithRSAEncryption 27:00:42:e2:d0:5c:b3:e6:f0:12:9e:8f:06:b4:ab:71:60:e8: 76:5d:96:84:a7:64:c8:46:35:4f:5b:06:2f:f0:bb:69:b8:8e: 9a:76:65:c9:30:53:f2:5a:b6:a5:f2:76:ba:fb:e6:2f:25:d9: 04:eb:95:b5:8e:ca:19:f6:e9:20:c6:8a:d6:b3:7a:3d:9d:5a: 4e:6d:1a:d7:24:91:d1:de:0a:a9:21:9b:11:16:e2:47:2f:f0: da:cf:9a:6d:3a:d3:cb:c4:6f:c5:58:a7:bd:75:e2:a2:69:b5: 4e:ea:40:aa:16:23:17:d4:b8:b1:db:5f:85:aa:96:e2:73:dd: c8:17:75:4b:1e:57:2a:ea:85:21:3a:b6:89:2e:70:79:32:9a: 89:7d:ea:0b:b3:62:cb:ed:1d:ef:17:d5:fe:ea:e9:d7:35:74: 02:a5:03:e3:c4:03:cb:8f:7e:9d:7c:e3:e7:b6:fa:28:93:fa: de:65:e4:e6:8c:17:24:ec:1c:cc:56:eb:64:25:93:bc:8b:f2: 8e:bc:a9:b0:6b:33:73:67:8c:08:a6:d2:b2:ee:56:fa:f8:45: 8d:1a:dc:0c:bf:08:47:5f:10:73:17:e0:c5:b6:60:de:1a:24: 89:5c:d4:ec:86:ce:17:c2:f8:4e:19:3b:c2:66:28:25:e0:11: b6:d0:f9:26 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUKGCp6nIZsG19LwjyIwcAE2C/os4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM1MEE5QTYwQzk0NTkzNzE2RThCRjdEMTA2NjZDMTc3 N0E3Nzg5RTAeFw0yNTEyMjQwMTI5MjZaFw0yNjEyMjMwMTM0MjZaMDMxMTAvBgNV BAMTKDU5RUE2OUE2OTI1RDU5RDc2NkVERjU4MDEwM0JFMDdDNjU2QzI4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29x0vYbwjQOnL+Obp/y6TRL1d mXWD9X/b6jwObXHtWpAYqkwLNgYaIhdQ7Cm1w9H6/uiHVlbfM49NoJXXVnsN8Cej rZ/FxqGWl7n0TaZ3hhc9PpF0Iu3t+PJ+xWCVwgpCV/hMJ0AQvUYgyOZ66UpDN/Gu AS4JrT+0yEUsde19IZ4UGFhH3mzfAdWQfCcHPj/9ZsDPP048HGuXBCNI3EdkvlPe 8gt8+GIpGN8O6HxRUH+/b0VA21wQtBbf3t3pfGmz88lQFC6n2Or4L2LKW6tVNPl8 9soJscOzS69jIEUesWR9v7fzoO1/hvJsNoYZe+l/X0iGsISDUKaLdAzQBc9PAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUWeppppJdWddm7fWAEDvgfGVsKOwwHwYDVR0j BBgwFoAU81CppgyUWTcW6L99EGZsF3eneJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5 UGcvMC9GMzUwQTlBNjBDOTQ1OTM3MTZFOEJGN0QxMDY2NkMxNzc3QTc3ODlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNTBBOUE2MEM5NDU5Mzcx NkU4QkY3RDEwNjY2QzE3NzdBNzc4OUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv MzEzNzMwMmUzMjMzMzEyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2 MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq59AwDQYJKoZIhvcNAQELBQADggEBACcAQuLQ XLPm8BKejwa0q3Fg6HZdloSnZMhGNU9bBi/wu2m4jpp2ZckwU/JatqXydrr75i8l 2QTrlbWOyhn26SDGitazej2dWk5tGtckkdHeCqkhmxEW4kcv8NrPmm0608vEb8VY p7114qJptU7qQKoWIxfUuLHbX4WqluJz3cgXdUseVyrqhSE6tokucHkymol96guz YsvtHe8X1f7q6dc1dAKlA+PEA8uPfp184+e2+iiT+t5l5OaMFyTsHMxW62Qlk7yL 8o68qbBrM3NnjAim0rLuVvr4RY0a3Ay/CEdfEHMX4MW2YN4aJIlc1OyGzhfC+E4Z O8JmKCXgEbbQ+SY= -----END CERTIFICATE-----Generated at Thu Dec 25 07:00:39 2025 by rpki-client