This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa File: 3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa (raw, json) Hash identifier: Xo7IqhVmSDWsEdX4apzZaju1iIb1itoQ9IN0GcDHxVc= Subject key identifier: B2:6D:1D:9D:F9:0D:89:ED:57:C8:2E:E3:E5:60:5E:2B:72:94:7D:5F Certificate issuer: /CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Certificate serial: 798496F553439C1CC6FE6B83643DFBC75AC162EE Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa Signing time: Wed 03 Dec 2025 15:17:25 +0000 ROA not before: Wed 03 Dec 2025 15:12:25 +0000 ROA not after: Wed 02 Dec 2026 15:17:25 +0000 asID: 265384 IP address blocks: 170.254.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:84:96:f5:53:43:9c:1c:c6:fe:6b:83:64:3d:fb:c7:5a:c1:62:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Validity Not Before: Dec 3 15:12:25 2025 GMT Not After : Dec 2 15:17:25 2026 GMT Subject: CN=B26D1D9DF90D89ED57C82EE3E5605E2B72947D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:43:55:e0:6f:31:06:26:cf:7f:ce:b4:dd: c7:ca:2a:87:e0:3a:75:2c:37:ae:74:e5:95:dc:b1: 7e:bc:f6:70:18:a2:9f:28:f5:27:5d:80:7b:86:58: 07:b8:69:a6:e7:e7:bf:6a:5c:59:80:6d:64:32:cf: 88:6a:92:91:58:35:b2:40:45:70:2d:42:94:12:13: 5b:5b:35:2b:bc:54:32:95:57:f9:d6:f7:77:4a:5a: 65:5f:b3:ce:ab:3c:c9:7b:0c:e2:f0:92:ae:2a:99: 4c:4f:e7:47:75:cd:ec:9d:17:5e:fd:e2:79:15:c4: 7c:d4:ed:cb:e0:8b:9f:2f:46:e9:92:85:64:36:34: 72:6a:f0:0e:c5:5c:aa:4b:e9:cc:bb:90:8b:c7:a1: 62:d2:8f:c5:73:9e:6f:1c:ca:96:15:97:da:35:e2: 46:55:3c:0e:8a:d3:21:9d:8f:79:05:8c:3b:28:e1: 66:3a:a4:ac:08:38:e3:08:7f:d4:4d:58:6c:3a:ad: 0f:7f:5c:79:5a:c6:a5:72:84:3e:39:c0:cf:3c:6d: b1:6c:2d:af:02:5a:da:2f:2a:a1:44:59:d7:03:fb: db:dc:03:5c:ae:20:e6:41:5c:f6:0b:b5:0e:f2:a4: 39:a7:bb:db:85:59:b5:b2:85:2c:50:76:7a:f8:46: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:1D:9D:F9:0D:89:ED:57:C8:2E:E3:E5:60:5E:2B:72:94:7D:5F X509v3 Authority Key Identifier: keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.242.0/24 Signature Algorithm: sha256WithRSAEncryption 73:09:14:32:45:30:86:b6:6b:17:bc:49:49:50:21:ab:f9:32: c1:5a:ea:7f:bc:dc:89:35:ad:33:de:24:a5:ad:7b:4e:a5:b6: 26:a7:d0:05:a8:72:4f:66:c2:ea:ad:95:4c:38:ab:b6:20:bd: a7:fb:98:e7:2a:c0:3f:a8:da:56:ef:7c:fb:08:96:21:03:46: 89:68:55:73:71:c5:2b:67:b3:ac:60:87:ed:81:90:fe:93:36: f0:a2:30:32:fd:21:51:a3:6c:63:4c:04:47:77:ae:53:6c:02: d3:e3:6c:cc:be:e5:11:a4:40:9d:91:e6:b9:55:60:0d:3c:de: e8:25:21:74:18:5e:39:c1:b2:b9:3c:58:81:3d:b4:d8:d8:66: a3:dd:20:5f:91:db:49:e4:30:ad:60:ac:ab:a3:32:60:22:23: e0:4a:f9:58:6e:c8:dc:d1:69:5d:d6:0a:b7:73:c1:bc:ad:a9: c2:cc:a5:80:f6:91:b0:cf:3b:54:8e:ab:d0:43:91:e4:1c:49: 99:89:c2:8e:4a:43:ae:b9:35:6a:e0:32:a5:2d:b2:d8:da:c0: fa:3b:b9:7f:1e:cd:ac:f8:c2:07:e8:df:d7:dc:30:13:97:a1: 6a:7e:bd:c7:bb:7c:72:ac:d1:a5:75:fa:c2:87:15:b3:9a:71: 17:11:62:c0 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUeYSW9VNDnBzG/muDZD37x1rBYu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRDA1NDZEODY5MDUxREY4OEY4ODYwQTM1NDBDMzU4 MkJBMTQ1NjAeFw0yNTEyMDMxNTEyMjVaFw0yNjEyMDIxNTE3MjVaMDMxMTAvBgNV BAMTKEIyNkQxRDlERjkwRDg5RUQ1N0M4MkVFM0U1NjA1RTJCNzI5NDdENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfkNV4G8xBibPf8603cfKKofg OnUsN6505ZXcsX689nAYop8o9SddgHuGWAe4aabn579qXFmAbWQyz4hqkpFYNbJA RXAtQpQSE1tbNSu8VDKVV/nW93dKWmVfs86rPMl7DOLwkq4qmUxP50d1zeydF179 4nkVxHzU7cvgi58vRumShWQ2NHJq8A7FXKpL6cy7kIvHoWLSj8Vznm8cypYVl9o1 4kZVPA6K0yGdj3kFjDso4WY6pKwIOOMIf9RNWGw6rQ9/XHlaxqVyhD45wM88bbFs La8CWtovKqFEWdcD+9vcA1yuIOZBXPYLtQ7ypDmnu9uFWbWyhSxQdnr4RulTAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUsm0dnfkNie1XyC7j5WBeK3KUfV8wHwYDVR0j BBgwFoAUKq0FRthpBR34j4hgo1QMNYK6FFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR cHQvMC8yQUFEMDU0NkQ4NjkwNTFERjg4Rjg4NjBBMzU0MEMzNTgyQkExNDU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQUQwNTQ2RDg2OTA1MURG ODhGODg2MEEzNTQwQzM1ODJCQTE0NTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv MzEzNzMwMmUzMjM1MzQyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr+8jANBgkqhkiG9w0BAQsFAAOCAQEAcwkU MkUwhrZrF7xJSVAhq/kywVrqf7zciTWtM94kpa17TqW2JqfQBahyT2bC6q2VTDir tiC9p/uY5yrAP6jaVu98+wiWIQNGiWhVc3HFK2ezrGCH7YGQ/pM28KIwMv0hUaNs Y0wER3euU2wC0+NszL7lEaRAnZHmuVVgDTze6CUhdBheOcGyuTxYgT202Nhmo90g X5HbSeQwrWCsq6MyYCIj4Er5WG7I3NFpXdYKt3PBvK2pwsylgPaRsM87VI6r0EOR 5BxJmYnCjkpDrrk1auAypS2y2NrA+ju5fx7NrPjCB+jf19wwE5ehan69x7t8cqzR pXX6wocVs5pxFxFiwA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:20 2025 by rpki-client