This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa File: 3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa (raw, json) Hash identifier: 5lrX9j754TcEuWAlOZ3kQrQKu8ScjOW/g6xc9kkxygE= Subject key identifier: 03:C1:7E:02:97:F7:18:92:CE:72:7A:05:74:E7:E0:DB:CE:00:FB:D8 Certificate issuer: /CN=13149E872076863268B5B7FFD3A618CAA69AAB08 Certificate serial: 32BE1E71CAC9A5241BA59B34C8D53686FFFD9432 Authority key identifier: 13:14:9E:87:20:76:86:32:68:B5:B7:FF:D3:A6:18:CA:A6:9A:AB:08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer Subject info access: rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa Signing time: Thu 20 Nov 2025 20:11:07 +0000 ROA not before: Thu 20 Nov 2025 20:06:07 +0000 ROA not after: Thu 19 Nov 2026 20:11:07 +0000 asID: 61770 IP address blocks: 200.225.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/13149E872076863268B5B7FFD3A618CAA69AAB08.crl rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/13149E872076863268B5B7FFD3A618CAA69AAB08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 12:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:be:1e:71:ca:c9:a5:24:1b:a5:9b:34:c8:d5:36:86:ff:fd:94:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13149E872076863268B5B7FFD3A618CAA69AAB08 Validity Not Before: Nov 20 20:06:07 2025 GMT Not After : Nov 19 20:11:07 2026 GMT Subject: CN=03C17E0297F71892CE727A0574E7E0DBCE00FBD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:94:3d:1b:5f:79:01:e1:1e:93:85:55:9d: 5c:86:91:c3:fb:62:53:74:71:22:77:9c:c8:63:97: 55:84:ed:e7:98:94:e5:1d:a4:80:b1:07:54:c1:6e: fb:b7:8a:f9:d1:4a:5c:42:9a:c5:d9:7c:9f:9c:8a: 33:2f:6b:af:b1:6a:57:02:b5:0a:c7:19:5d:d2:99: ea:39:47:7f:ec:a9:de:12:51:6b:b3:65:01:b5:c8: bf:5e:96:dd:66:78:e5:d7:74:a9:15:7b:4f:a1:50: 01:f9:e7:a8:c7:48:a7:7c:8e:44:3d:7f:ac:64:4c: ad:1d:a1:62:17:ff:da:e3:f7:d3:16:8d:00:2d:2d: 87:0b:a9:98:8f:93:29:3e:00:58:a9:47:e2:14:68: 7e:49:6a:8d:75:5e:95:7a:dd:02:94:31:ef:bd:70: 76:f1:62:3b:ed:af:59:31:7f:ec:85:af:0e:0b:e0: 4b:ad:5c:57:e4:30:cd:ae:98:ec:42:47:41:7d:a1: ed:0f:45:52:89:59:a5:37:d9:c4:8c:ce:aa:b1:d7: 9e:ff:de:f2:b8:7b:83:a1:5e:67:f5:00:a9:f2:45: 31:48:ef:cc:41:48:a7:11:20:b3:ca:ef:92:51:fd: 0e:59:8a:5c:31:95:c5:fc:8d:98:20:b0:0b:f8:50: 46:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C1:7E:02:97:F7:18:92:CE:72:7A:05:74:E7:E0:DB:CE:00:FB:D8 X509v3 Authority Key Identifier: keyid:13:14:9E:87:20:76:86:32:68:B5:B7:FF:D3:A6:18:CA:A6:9A:AB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/13149E872076863268B5B7FFD3A618CAA69AAB08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.225.128.0/22 Signature Algorithm: sha256WithRSAEncryption 24:e2:3c:61:33:d5:cd:18:49:e7:cc:7e:38:75:e0:09:84:a8: d2:58:2c:50:39:96:80:01:c0:7c:b9:94:69:5f:af:c5:33:d0: 07:42:3e:c9:a9:01:6b:ed:0a:18:13:0d:a1:ac:5a:7d:d7:29: 61:e0:12:5d:91:09:36:8e:25:7e:0d:c8:f4:1a:b8:c7:b4:62: 67:7f:d2:b7:d8:1c:a8:30:9a:18:15:51:dc:14:b7:14:15:f8: 6f:7f:e6:da:07:c0:aa:0c:28:74:0f:74:01:06:22:3a:69:63: 5c:de:86:be:bb:ae:00:32:a8:30:51:f6:33:cc:6c:5b:12:e7: 0b:3d:ac:ce:ad:79:d0:db:de:d9:84:ee:cf:b5:92:65:03:c5: a4:74:8c:bc:56:5b:69:0c:e8:c7:16:fe:b9:ef:17:9e:af:17: 7f:34:2c:3b:ac:30:fd:73:e5:de:b2:b9:23:7e:da:7b:b0:6c: 16:9c:7f:6c:16:94:55:9f:fb:2e:01:99:34:e3:b2:d1:1e:b7: 58:39:2e:5b:e8:29:70:ea:20:ed:f7:f6:46:08:42:a1:34:05: ea:99:dd:b4:9d:79:9b:e2:96:63:9b:3e:cc:69:21:fc:33:b1: 4c:58:da:35:1b:e4:f2:32:5b:48:7b:e5:a9:7a:14:2f:21:bc: bc:89:c3:4b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUMr4eccrJpSQbpZs0yNU2hv/9lDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxNDlFODcyMDc2ODYzMjY4QjVCN0ZGRDNBNjE4Q0FB NjlBQUIwODAeFw0yNTExMjAyMDA2MDdaFw0yNjExMTkyMDExMDdaMDMxMTAvBgNV BAMTKDAzQzE3RTAyOTdGNzE4OTJDRTcyN0EwNTc0RTdFMERCQ0UwMEZCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lZQ9G195AeEek4VVnVyGkcP7 YlN0cSJ3nMhjl1WE7eeYlOUdpICxB1TBbvu3ivnRSlxCmsXZfJ+cijMva6+xalcC tQrHGV3Smeo5R3/sqd4SUWuzZQG1yL9elt1meOXXdKkVe0+hUAH556jHSKd8jkQ9 f6xkTK0doWIX/9rj99MWjQAtLYcLqZiPkyk+AFipR+IUaH5Jao11XpV63QKUMe+9 cHbxYjvtr1kxf+yFrw4L4EutXFfkMM2umOxCR0F9oe0PRVKJWaU32cSMzqqx157/ 3vK4e4OhXmf1AKnyRTFI78xBSKcRILPK75JR/Q5ZilwxlcX8jZggsAv4UEZ7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUA8F+Apf3GJLOcnoFdOfg284A+9gwHwYDVR0j BBgwFoAUExSehyB2hjJotbf/06YYyqaaqwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXlYUXBObWJQRWM0eVFXb2RHY2hqeVRYWkFyQTF2NVB1a1NzejlTUVZN ZmIvMC8xMzE0OUU4NzIwNzY4NjMyNjhCNUI3RkZEM0E2MThDQUE2OUFBQjA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMTQ5RTg3MjA3Njg2MzI2 OEI1QjdGRkQzQTYxOENBQTY5QUFCMDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl5WFFwTm1iUEVjNHlRV29kR2NoanlUWFpBckExdjVQdWtTc3o5U1FWTWZiLzAv MzIzMDMwMmUzMjMyMzUyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2 MzEzNzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALI4YAwDQYJKoZIhvcNAQELBQADggEBACTiPGEz 1c0YSefMfjh14AmEqNJYLFA5loABwHy5lGlfr8Uz0AdCPsmpAWvtChgTDaGsWn3X KWHgEl2RCTaOJX4NyPQauMe0Ymd/0rfYHKgwmhgVUdwUtxQV+G9/5toHwKoMKHQP dAEGIjppY1zehr67rgAyqDBR9jPMbFsS5ws9rM6tedDb3tmE7s+1kmUDxaR0jLxW W2kM6McW/rnvF56vF380LDusMP1z5d6yuSN+2nuwbBacf2wWlFWf+y4BmTTjstEe t1g5LlvoKXDqIO339kYIQqE0BeqZ3bSdeZvilmObPsxpIfwzsUxY2jUb5PIyW0h7 5al6FC8hvLyJw0s= -----END CERTIFICATE-----Generated at Sun Dec 7 00:40:04 2025 by rpki-client