This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa File: 3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa (raw, json) Hash identifier: 67ErBlbOvFpg0hvnl1IkwlbuCRkTDA6ZZMEUfu5lUqE= Subject key identifier: 7F:6E:95:10:D3:77:5D:CD:EE:54:32:77:0E:52:C0:47:EA:CF:A5:25 Certificate issuer: /CN=417A3C46308D4692153B994B72E51599225B4979 Certificate serial: 32ECC643877EF3BED3BF1A581205CFE0AF8D6F18 Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer Subject info access: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa Signing time: Mon 01 Dec 2025 11:30:34 +0000 ROA not before: Mon 01 Dec 2025 11:25:34 +0000 ROA not after: Mon 30 Nov 2026 11:30:34 +0000 asID: 269705 IP address blocks: 189.201.248.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 16:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ec:c6:43:87:7e:f3:be:d3:bf:1a:58:12:05:cf:e0:af:8d:6f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417A3C46308D4692153B994B72E51599225B4979 Validity Not Before: Dec 1 11:25:34 2025 GMT Not After : Nov 30 11:30:34 2026 GMT Subject: CN=7F6E9510D3775DCDEE5432770E52C047EACFA525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:ce:34:22:23:bc:cb:02:64:0a:30:e9:d3: ca:ce:d4:71:eb:02:ba:95:9d:95:45:91:7b:9a:2d: c5:1f:92:65:d8:b0:16:3b:1c:01:b0:6c:80:b4:73: 3b:9d:a7:a0:55:58:1e:1d:e5:ed:c2:cd:59:25:d2: 34:43:17:cd:96:2e:02:b1:5a:a3:a9:ec:18:b9:79: 88:9c:aa:b7:90:02:e5:de:74:f4:2b:ae:36:b8:8a: a2:85:ca:91:c8:24:33:8c:f4:1e:18:60:5a:26:13: 89:0d:2a:6a:62:29:9a:ea:03:55:54:ea:1c:71:2d: f7:79:0c:b5:90:ac:1d:47:a9:84:cf:31:68:f4:23: 86:5b:bd:ee:7b:b1:8b:85:e4:6b:e3:0a:5a:34:a9: ff:7f:57:2f:cd:16:97:a2:0b:76:8a:d4:5a:ae:4f: 78:76:17:c3:84:fc:07:60:2d:38:4e:6c:7d:4d:05: 0c:f6:98:75:bf:04:ec:62:bf:20:38:bd:0c:aa:1e: 8d:4b:86:aa:7a:24:45:54:b5:95:a6:57:cb:e8:b0: ba:4e:1c:6b:ee:b5:2a:cb:dd:8f:83:0f:cc:1f:32: 50:29:13:96:70:92:13:3b:00:f1:24:35:57:10:d6: df:ab:df:5a:da:93:40:11:c1:57:3c:d2:92:13:77: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6E:95:10:D3:77:5D:CD:EE:54:32:77:0E:52:C0:47:EA:CF:A5:25 X509v3 Authority Key Identifier: keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.201.248.0/22 Signature Algorithm: sha256WithRSAEncryption ae:4a:bd:c3:01:33:4d:8c:fa:51:8c:c2:b9:1d:e3:1b:07:ac: 0d:1c:60:fd:cb:ca:80:47:3b:b6:05:3a:1a:3b:aa:36:c7:44: a7:05:47:62:5e:3e:d8:81:cb:e4:b0:56:00:2d:22:4b:31:ce: d3:0f:21:63:89:3c:d3:34:2c:3c:16:c5:d2:f6:8b:38:c7:53: 50:34:e8:a3:97:80:e2:38:1e:f8:3d:52:25:5b:ee:4f:ac:94: 9d:71:b5:74:fb:78:32:0c:0c:2d:ad:23:8f:49:74:0d:9b:7e: 44:76:40:62:8c:dd:82:07:1e:c6:72:bd:d5:57:f8:0a:fb:90: 41:b9:79:e4:eb:8c:81:98:8e:17:17:45:9f:1d:28:2f:d1:0b: c0:f3:76:73:23:01:3b:db:bb:ff:a0:94:80:53:84:dc:a8:78: 85:6a:ec:d4:0e:f8:0a:10:23:08:78:1b:92:1a:85:ad:92:aa: 53:1f:c4:26:35:cf:c3:8d:6b:ae:80:c7:11:0e:71:70:6e:60: 6c:72:dc:d1:97:64:40:f2:d0:83:2e:e5:84:90:96:0a:2c:3c: cf:9c:65:f5:d9:7a:d0:4e:76:7a:36:27:a5:5e:87:01:35:54: 88:4c:20:29:17:05:47:34:97:81:f4:cc:61:a5:df:e9:58:92: a1:c9:f1:f4 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUMuzGQ4d+877TvxpYEgXP4K+NbxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE3QTNDNDYzMDhENDY5MjE1M0I5OTRCNzJFNTE1OTky MjVCNDk3OTAeFw0yNTEyMDExMTI1MzRaFw0yNjExMzAxMTMwMzRaMDMxMTAvBgNV BAMTKDdGNkU5NTEwRDM3NzVEQ0RFRTU0MzI3NzBFNTJDMDQ3RUFDRkE1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfc40IiO8ywJkCjDp08rO1HHr ArqVnZVFkXuaLcUfkmXYsBY7HAGwbIC0czudp6BVWB4d5e3CzVkl0jRDF82WLgKx WqOp7Bi5eYicqreQAuXedPQrrja4iqKFypHIJDOM9B4YYFomE4kNKmpiKZrqA1VU 6hxxLfd5DLWQrB1HqYTPMWj0I4Zbve57sYuF5GvjClo0qf9/Vy/NFpeiC3aK1Fqu T3h2F8OE/AdgLThObH1NBQz2mHW/BOxivyA4vQyqHo1Lhqp6JEVUtZWmV8vosLpO HGvutSrL3Y+DD8wfMlApE5ZwkhM7APEkNVcQ1t+r31rak0ARwVc80pITd859AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUf26VENN3Xc3uVDJ3DlLAR+rPpSUwHwYDVR0j BBgwFoAUQXo8RjCNRpIVO5lLcuUVmSJbSXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkszQ2lNZzh3cHJ0NGtkWVhZTGRXeG5oREFoRjNOZDk5b1pvWmVBTmh1 ZTcvMC80MTdBM0M0NjMwOEQ0NjkyMTUzQjk5NEI3MkU1MTU5OTIyNUI0OTc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxN0EzQzQ2MzA4RDQ2OTIx NTNCOTk0QjcyRTUxNTk5MjI1QjQ5NzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJLM0NpTWc4d3BydDRrZFlYWUxkV3huaERBaEYzTmQ5OW9ab1plQU5odWU3LzAv MzEzODM5MmUzMjMwMzEyZTMyMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzOTM3MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr3J+DANBgkqhkiG9w0BAQsFAAOCAQEArkq9 wwEzTYz6UYzCuR3jGwesDRxg/cvKgEc7tgU6GjuqNsdEpwVHYl4+2IHL5LBWAC0i SzHO0w8hY4k80zQsPBbF0vaLOMdTUDToo5eA4jge+D1SJVvuT6yUnXG1dPt4MgwM La0jj0l0DZt+RHZAYozdggcexnK91Vf4CvuQQbl55OuMgZiOFxdFnx0oL9ELwPN2 cyMBO9u7/6CUgFOE3Kh4hWrs1A74ChAjCHgbkhqFrZKqUx/EJjXPw41rroDHEQ5x cG5gbHLc0ZdkQPLQgy7lhJCWCiw8z5xl9dl60E52ejYnpV6HATVUiEwgKRcFRzSX gfTMYaXf6ViSocnx9A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:32:09 2025 by rpki-client