This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa File: 3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa (raw, json) Hash identifier: WlfPkdvQaK+2iNV2J8DnE42kv5R/ULsDx9rhkKjR0cA= Subject key identifier: BF:C2:1F:C3:E4:DB:E2:FD:0F:2B:C9:39:AF:4C:E9:49:36:57:00:35 Certificate issuer: /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Certificate serial: 7A8DEF6B9485340F97C337A5296F7E64F10344EF Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa Signing time: Wed 26 Nov 2025 11:38:46 +0000 ROA not before: Wed 26 Nov 2025 11:33:46 +0000 ROA not after: Wed 25 Nov 2026 11:38:46 +0000 asID: 271679 IP address blocks: 200.24.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8d:ef:6b:94:85:34:0f:97:c3:37:a5:29:6f:7e:64:f1:03:44:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Validity Not Before: Nov 26 11:33:46 2025 GMT Not After : Nov 25 11:38:46 2026 GMT Subject: CN=BFC21FC3E4DBE2FD0F2BC939AF4CE94936570035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:9e:f0:8e:45:e8:68:4a:00:a3:ed:04:6e: d9:4f:7a:ec:69:4b:8b:4d:0b:f5:2f:48:2e:44:43: 0b:fd:89:64:54:0b:37:09:7c:1c:cb:d2:4d:e9:e0: 9b:55:2b:76:35:19:64:1b:db:69:44:03:95:d5:32: d5:27:fc:f7:dc:0f:88:1d:39:fa:b0:c7:a6:ef:dc: f1:18:49:b0:e4:ff:a3:27:3e:62:e8:86:df:d2:00: 03:ce:11:b7:54:53:c7:c0:f7:70:70:33:96:79:34: 51:8c:ed:f6:91:ab:4f:e6:e3:64:1e:93:22:e7:94: b1:08:df:57:5a:98:12:ea:da:01:7e:25:6e:6f:67: 69:df:03:77:55:fc:93:56:91:26:9b:2d:8f:bd:76: 85:ef:7b:ab:b7:7a:bf:0f:0f:25:38:f2:cd:74:46: 33:65:3e:bc:65:65:be:77:18:7a:60:f5:cb:7f:d4: 60:06:32:6a:dd:9a:b1:3b:67:83:9e:bf:89:de:3e: 04:21:55:26:49:33:e1:20:7c:06:0a:4c:40:ef:db: 4e:00:03:f9:07:52:26:c4:38:81:70:32:c2:b7:85: 34:fd:63:d7:13:34:27:65:99:1d:e2:da:98:2d:a1: 2e:35:33:23:f5:ce:ac:f0:3f:64:dd:c4:cb:a7:6b: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C2:1F:C3:E4:DB:E2:FD:0F:2B:C9:39:AF:4C:E9:49:36:57:00:35 X509v3 Authority Key Identifier: keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.24.118.0/23 Signature Algorithm: sha256WithRSAEncryption 84:fd:5f:73:56:27:a8:52:c3:64:52:52:bb:79:fa:cc:c6:c5: cf:36:e1:3a:6b:ba:88:c1:c0:bf:cd:0d:c7:e5:68:2d:5c:1c: 87:87:f4:6f:e3:df:c3:f8:67:ce:a5:d5:cf:a7:c7:85:35:13: df:17:9c:a8:ff:b5:eb:0a:d8:45:41:39:b0:68:37:fe:3a:d9: 53:45:d6:2e:1c:1d:ce:85:02:56:63:e8:34:d9:ad:0c:3b:2f: 03:5e:97:3e:aa:f5:9f:32:70:c8:dd:31:ba:89:26:57:91:c2: 71:68:44:77:fe:12:19:d8:62:fe:49:72:a5:55:23:bb:16:dc: 7f:bc:4e:91:cc:f9:19:c3:55:67:09:6f:16:89:02:47:03:ad: 37:51:3d:16:b9:1a:94:2a:5f:d4:97:b0:e3:61:4e:60:2a:c5: 57:8b:0a:17:58:90:82:b1:77:aa:22:1c:f1:9c:7d:a7:ee:46: e6:d5:ec:37:ae:af:69:5e:8a:97:02:d8:e9:94:48:ee:26:31: be:85:b0:0a:7b:74:af:d0:ee:85:63:fb:a2:12:46:60:49:54: e4:8d:ce:7b:8b:2c:23:17:bc:3f:55:af:da:20:be:11:c8:d3: 71:d3:21:8f:17:bc:c8:be:53:ae:f2:82:af:a4:5f:50:2b:4a: cd:b1:ec:a3 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUeo3va5SFNA+XwzelKW9+ZPEDRO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQUY5NzgzN0VEOUE5MThGQTc1RDQ5NjBGQzIwNDdC MkNGODFGRjAeFw0yNTExMjYxMTMzNDZaFw0yNjExMjUxMTM4NDZaMDMxMTAvBgNV BAMTKEJGQzIxRkMzRTREQkUyRkQwRjJCQzkzOUFGNENFOTQ5MzY1NzAwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9p7wjkXoaEoAo+0EbtlPeuxp S4tNC/UvSC5EQwv9iWRUCzcJfBzL0k3p4JtVK3Y1GWQb22lEA5XVMtUn/PfcD4gd Ofqwx6bv3PEYSbDk/6MnPmLoht/SAAPOEbdUU8fA93BwM5Z5NFGM7faRq0/m42Qe kyLnlLEI31damBLq2gF+JW5vZ2nfA3dV/JNWkSabLY+9doXve6u3er8PDyU48s10 RjNlPrxlZb53GHpg9ct/1GAGMmrdmrE7Z4Oev4nePgQhVSZJM+EgfAYKTEDv204A A/kHUibEOIFwMsK3hTT9Y9cTNCdlmR3i2pgtoS41MyP1zqzwP2TdxMuna46bAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUv8Ifw+Tb4v0PK8k5r0zpSTZXADUwHwYDVR0j BBgwFoAUSjr5eDftmpGPp11JYPwgR7LPgf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9B Sm4vMC80QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBM0FGOTc4MzdFRDlBOTE4 RkE3NUQ0OTYwRkMyMDQ3QjJDRjgxRkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNETlBRSlFjalpDa3JEeVdzSlk2WnhoNXJvRk1SS2J6YnB4alRYcEFvQUpuLzAv MzIzMDMwMmUzMjM0MmUzMTMxMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3 MzEzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHIGHYwDQYJKoZIhvcNAQELBQADggEBAIT9X3NW J6hSw2RSUrt5+szGxc824TpruojBwL/NDcflaC1cHIeH9G/j38P4Z86l1c+nx4U1 E98XnKj/tesK2EVBObBoN/462VNF1i4cHc6FAlZj6DTZrQw7LwNelz6q9Z8ycMjd MbqJJleRwnFoRHf+EhnYYv5JcqVVI7sW3H+8TpHM+RnDVWcJbxaJAkcDrTdRPRa5 GpQqX9SXsONhTmAqxVeLChdYkIKxd6oiHPGcfafuRubV7Deur2leipcC2OmUSO4m Mb6FsAp7dK/Q7oVj+6ISRmBJVOSNznuLLCMXvD9Vr9ogvhHI03HTIY8XvMi+U67y gq+kX1ArSs2x7KM= -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:11 2025 by rpki-client