This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa File: 3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa (raw, json) Hash identifier: N91dwFlRpIMGXso4PKVxPSMTeHaKnAVRNeylT8GL1f4= Subject key identifier: 6E:BF:27:E2:41:AE:F2:DF:42:8F:FE:81:99:96:1B:0F:23:20:9B:72 Certificate issuer: /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Certificate serial: 659447EE2A3A7028E7E88AA799C4BE1FCCA7B93B Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa Signing time: Wed 26 Nov 2025 11:28:08 +0000 ROA not before: Wed 26 Nov 2025 11:23:08 +0000 ROA not after: Wed 25 Nov 2026 11:28:08 +0000 asID: 271679 IP address blocks: 200.24.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:94:47:ee:2a:3a:70:28:e7:e8:8a:a7:99:c4:be:1f:cc:a7:b9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Validity Not Before: Nov 26 11:23:08 2025 GMT Not After : Nov 25 11:28:08 2026 GMT Subject: CN=6EBF27E241AEF2DF428FFE8199961B0F23209B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:d5:13:3c:99:1f:a5:9e:3b:90:55:7f:5a: 45:b4:59:60:17:95:8f:7c:c1:06:8e:68:bc:9a:2c: de:48:b5:48:88:03:4e:26:25:eb:f3:bc:11:d9:1f: f6:ed:48:a0:8e:e8:95:61:28:c9:d1:12:bf:d0:b4: 8a:bf:66:08:3e:7b:a3:96:31:cf:84:27:e8:3f:58: 72:84:60:35:89:c6:1e:2f:c6:35:f4:52:e1:f8:ba: 96:90:d0:db:28:53:05:48:14:02:ae:75:72:04:26: 37:0a:e4:3d:f6:e1:c9:f7:72:37:ce:18:e4:dc:0b: 89:cf:25:92:8d:57:07:5f:f7:19:4b:40:76:d7:13: 2b:02:b4:17:81:25:68:09:f1:67:1a:c2:b0:1f:2e: ab:40:93:90:10:ca:c7:d9:c3:70:da:5f:7f:0e:1b: 37:68:4a:80:42:f4:e6:34:8b:82:6b:0f:d6:3f:cb: c5:51:d6:94:40:f1:37:0e:ee:54:d0:e1:17:14:14: bd:9c:98:ed:3d:c6:e8:ef:78:bf:9e:b2:15:4e:e6: 6f:7e:ef:e0:19:2a:67:26:92:88:12:57:74:18:09: 1a:fe:a2:2e:1f:05:a9:48:ac:bd:a1:ff:b3:76:ef: 76:51:eb:7a:a5:b9:1b:5f:82:75:fa:a1:b8:de:8b: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BF:27:E2:41:AE:F2:DF:42:8F:FE:81:99:96:1B:0F:23:20:9B:72 X509v3 Authority Key Identifier: keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.24.116.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:f4:2e:97:3e:5c:17:38:05:72:49:cb:17:64:c3:3a:93:1f: df:e5:13:77:5b:ba:d4:c4:6d:de:33:39:a0:a3:7a:36:9f:17: 3c:8b:8d:54:7f:e9:4d:98:25:e3:b1:ed:68:fe:43:04:f2:e2: ac:ab:49:d0:2a:15:ef:f4:71:a0:47:97:f0:81:e1:ea:b2:15: 40:fe:b7:ec:aa:ee:86:8b:9b:da:40:04:76:80:43:df:45:16: 31:49:ba:fa:31:db:c5:28:8d:f5:4a:f7:cd:00:87:29:8d:1e: d7:8f:9f:ff:69:d7:05:6a:3f:24:31:6f:ab:ba:31:82:40:90: 33:fa:57:fe:fe:f3:57:5e:09:91:7b:cf:d6:6d:44:35:c9:f6: c1:85:d9:64:69:8b:7f:b9:18:fe:fe:ba:cc:d2:04:2d:5b:aa: cc:0e:0e:a3:03:35:e9:86:1a:de:92:22:ac:88:ee:74:fe:e2: ff:06:06:43:0f:6e:9c:bd:6e:ef:fa:a8:db:09:b5:35:e3:c9: 5b:b1:fc:e7:f0:cf:53:94:90:d5:05:d9:a3:1f:62:5a:a5:f9: 40:d9:81:85:77:f5:e5:e2:a4:d5:d6:c2:c5:f4:5a:ef:8c:7b: cd:43:fe:88:0f:c1:d5:e6:9c:ad:42:b2:b6:23:ef:f2:2a:be: f3:92:39:4a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUZZRH7io6cCjn6IqnmcS+H8ynuTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQUY5NzgzN0VEOUE5MThGQTc1RDQ5NjBGQzIwNDdC MkNGODFGRjAeFw0yNTExMjYxMTIzMDhaFw0yNjExMjUxMTI4MDhaMDMxMTAvBgNV BAMTKDZFQkYyN0UyNDFBRUYyREY0MjhGRkU4MTk5OTYxQjBGMjMyMDlCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10tUTPJkfpZ47kFV/WkW0WWAX lY98wQaOaLyaLN5ItUiIA04mJevzvBHZH/btSKCO6JVhKMnREr/QtIq/Zgg+e6OW Mc+EJ+g/WHKEYDWJxh4vxjX0UuH4upaQ0NsoUwVIFAKudXIEJjcK5D324cn3cjfO GOTcC4nPJZKNVwdf9xlLQHbXEysCtBeBJWgJ8WcawrAfLqtAk5AQysfZw3DaX38O GzdoSoBC9OY0i4JrD9Y/y8VR1pRA8TcO7lTQ4RcUFL2cmO09xujveL+eshVO5m9+ 7+AZKmcmkogSV3QYCRr+oi4fBalIrL2h/7N273ZR63qluRtfgnX6objei/ZtAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUbr8n4kGu8t9Cj/6BmZYbDyMgm3IwHwYDVR0j BBgwFoAUSjr5eDftmpGPp11JYPwgR7LPgf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9B Sm4vMC80QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBM0FGOTc4MzdFRDlBOTE4 RkE3NUQ0OTYwRkMyMDQ3QjJDRjgxRkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNETlBRSlFjalpDa3JEeVdzSlk2WnhoNXJvRk1SS2J6YnB4alRYcEFvQUpuLzAv MzIzMDMwMmUzMjM0MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3 MzEzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALIGHQwDQYJKoZIhvcNAQELBQADggEBADz0Lpc+ XBc4BXJJyxdkwzqTH9/lE3dbutTEbd4zOaCjejafFzyLjVR/6U2YJeOx7Wj+QwTy 4qyrSdAqFe/0caBHl/CB4eqyFUD+t+yq7oaLm9pABHaAQ99FFjFJuvox28UojfVK 980AhymNHtePn/9p1wVqPyQxb6u6MYJAkDP6V/7+81deCZF7z9ZtRDXJ9sGF2WRp i3+5GP7+uszSBC1bqswODqMDNemGGt6SIqyI7nT+4v8GBkMPbpy9bu/6qNsJtTXj yVux/Ofwz1OUkNUF2aMfYlql+UDZgYV39eXipNXWwsX0Wu+Me81D/ogPwdXmnK1C srYj7/IqvvOSOUo= -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:32 2025 by rpki-client