This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa File: 3136382e302e32302e302f32322d3332203d3e20323635323432.roa (raw, json) Hash identifier: annC1vFjuqC/mmR5eiElDHilugC/qrDMivSD1xl5CoM= Subject key identifier: 46:A8:FC:3F:DE:AA:CF:F2:A8:8D:8F:61:A9:25:FF:BD:82:25:A1:CA Certificate issuer: /CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E Certificate serial: 0227D69A965025470D497C4CEFAE0C74500C3260 Authority key identifier: D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa Signing time: Sun 23 Nov 2025 22:03:39 +0000 ROA not before: Sun 23 Nov 2025 21:58:39 +0000 ROA not after: Sun 22 Nov 2026 22:03:39 +0000 asID: 265242 IP address blocks: 168.0.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:27:d6:9a:96:50:25:47:0d:49:7c:4c:ef:ae:0c:74:50:0c:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E Validity Not Before: Nov 23 21:58:39 2025 GMT Not After : Nov 22 22:03:39 2026 GMT Subject: CN=46A8FC3FDEAACFF2A88D8F61A925FFBD8225A1CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:3c:76:74:a4:16:6b:a2:70:98:62:7f:ba: b6:6c:b5:8c:0c:da:91:ef:69:8a:2b:ac:a5:ea:1b: e0:ad:2a:2d:c9:4a:64:02:e8:b2:c9:6d:ae:08:10: db:f1:2a:1b:26:ac:dd:b3:28:a7:12:fb:6a:8d:02: 7a:11:cb:87:53:38:1a:ef:0b:bc:f9:90:df:61:a9: 7c:7c:3b:c3:71:63:47:09:8a:63:ee:7a:5c:ba:6e: bf:97:07:64:9b:29:8e:e4:d4:b7:55:dc:cf:81:96: 76:85:6e:d0:19:89:64:28:22:0e:7d:50:17:21:05: 58:42:cc:d1:1c:77:d2:0e:f8:8b:ac:e5:a7:d4:8e: a4:f4:6f:4c:70:b2:dd:7e:8e:e6:d7:6d:1b:57:f4: 8f:79:95:8d:e3:31:25:93:71:8f:5d:f7:10:ab:e5: b7:bd:aa:10:ed:0b:f0:d3:21:2f:2d:51:5a:f8:e8: 45:dc:f9:70:c4:7c:9c:f2:b4:f9:b3:59:ef:a4:49: d5:2f:ee:89:b6:72:2a:33:91:af:c2:37:86:89:d0: d3:ad:72:99:cc:f4:3d:b4:1b:1f:32:db:30:67:d5: a5:49:91:3c:b6:3c:0a:50:ad:bf:41:aa:f5:28:b3: cb:fe:c0:3d:20:f0:53:a9:67:0d:9e:8e:94:85:0f: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:FC:3F:DE:AA:CF:F2:A8:8D:8F:61:A9:25:FF:BD:82:25:A1:CA X509v3 Authority Key Identifier: keyid:D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.20.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:48:8d:91:88:74:37:3e:4b:60:ba:61:50:9a:7e:f2:0d:8c: ed:ed:72:a8:f9:ed:d7:77:6f:0d:42:f2:dc:ce:d8:61:de:0e: 37:f3:9a:8d:11:76:88:04:59:db:8d:12:9f:b9:09:dd:41:88: c3:fe:69:27:e4:90:33:6a:4e:53:6c:5f:42:5f:f1:0c:62:15: 92:19:a6:97:97:6f:a2:e0:01:45:c3:bf:24:2d:4d:cb:ea:78: 98:19:25:f9:a0:a1:6d:30:1e:ba:92:80:fd:93:1b:d5:f6:d2: b0:30:67:53:32:33:24:b7:19:f2:13:db:24:0d:0b:01:87:ba: a2:79:d2:15:23:54:c0:ab:c4:80:b1:21:f4:d8:f0:ec:80:31: eb:d7:bc:79:47:fc:d3:0c:ed:b9:ae:9f:d1:f8:1d:03:5a:c4: 55:85:9a:11:90:45:64:f7:2d:27:b8:6b:4e:8e:ad:8a:ef:e7: fb:e6:16:15:b3:31:54:c3:a5:5c:8a:97:ea:e4:a8:39:9b:46: 88:9d:3e:8b:b5:d6:d1:e4:0b:13:ff:12:b1:82:67:3b:9a:4e: 78:44:4a:10:ac:c5:4f:8a:a5:e3:00:28:a5:9b:11:05:1f:66: 18:a2:4f:cf:50:92:b3:ec:26:f2:ed:81:7c:75:0f:19:4a:a4: 36:66:e9:59 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUAifWmpZQJUcNSXxM764MdFAMMmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDMUMwMkZCQjZERUJBMDIwMEE2OTA1QzI0QjAxRTNG OTA2NkEwRTAeFw0yNTExMjMyMTU4MzlaFw0yNjExMjIyMjAzMzlaMDMxMTAvBgNV BAMTKDQ2QThGQzNGREVBQUNGRjJBODhEOEY2MUE5MjVGRkJEODIyNUExQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsDx2dKQWa6JwmGJ/urZstYwM 2pHvaYorrKXqG+CtKi3JSmQC6LLJba4IENvxKhsmrN2zKKcS+2qNAnoRy4dTOBrv C7z5kN9hqXx8O8NxY0cJimPuely6br+XB2SbKY7k1LdV3M+BlnaFbtAZiWQoIg59 UBchBVhCzNEcd9IO+Ius5afUjqT0b0xwst1+jubXbRtX9I95lY3jMSWTcY9d9xCr 5be9qhDtC/DTIS8tUVr46EXc+XDEfJzytPmzWe+kSdUv7om2ciozka/CN4aJ0NOt cpnM9D20Gx8y2zBn1aVJkTy2PApQrb9BqvUos8v+wD0g8FOpZw2ejpSFD78rAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQURqj8P96qz/KojY9hqSX/vYIlocowHwYDVR0j BBgwFoAU08HAL7tt66AgCmkFwksB4/kGag4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21uRFBxZXV5Z2FRM0ZIeXBCVzhxNk1WSnI2UWNRdFNyeEtOWnFIbnBI eXUvMC9EM0MxQzAyRkJCNkRFQkEwMjAwQTY5MDVDMjRCMDFFM0Y5MDY2QTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQzFDMDJGQkI2REVCQTAy MDBBNjkwNUMyNEIwMUUzRjkwNjZBMEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNtbkRQcWV1eWdhUTNGSHlwQlc4cTZNVkpyNlFjUXRTcnhLTlpxSG5wSHl1LzAv MzEzNjM4MmUzMDJlMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTMy MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAqgAFDANBgkqhkiG9w0BAQsFAAOCAQEAmkiNkYh0Nz5L YLphUJp+8g2M7e1yqPnt13dvDULy3M7YYd4ON/OajRF2iARZ240Sn7kJ3UGIw/5p J+SQM2pOU2xfQl/xDGIVkhmml5dvouABRcO/JC1Ny+p4mBkl+aChbTAeupKA/ZMb 1fbSsDBnUzIzJLcZ8hPbJA0LAYe6onnSFSNUwKvEgLEh9Njw7IAx69e8eUf80wzt ua6f0fgdA1rEVYWaEZBFZPctJ7hrTo6tiu/n++YWFbMxVMOlXIqX6uSoOZtGiJ0+ i7XW0eQLE/8SsYJnO5pOeERKEKzFT4ql4wAopZsRBR9mGKJPz1CSs+wm8u2BfHUP GUqkNmbpWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:22 2025 by rpki-client