This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa File: 3136382e302e322e302f32342d3234203d3e20323635323430.roa (raw, json) Hash identifier: Xe6FeBjPI9ZP/RISAnqANuU5uj/b6k4S8UNHh4l4A04= Subject key identifier: 28:E8:37:7B:48:C6:94:ED:D1:CC:56:57:FE:3A:60:48:BB:3C:0A:50 Certificate issuer: /CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D Certificate serial: 6D030784C8F7A2A1C573C500B207B40F2C3B04D4 Authority key identifier: DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa Signing time: Mon 10 Nov 2025 19:24:07 +0000 ROA not before: Mon 10 Nov 2025 19:19:07 +0000 ROA not after: Mon 09 Nov 2026 19:24:07 +0000 asID: 265240 IP address blocks: 168.0.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:03:07:84:c8:f7:a2:a1:c5:73:c5:00:b2:07:b4:0f:2c:3b:04:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D Validity Not Before: Nov 10 19:19:07 2025 GMT Not After : Nov 9 19:24:07 2026 GMT Subject: CN=28E8377B48C694EDD1CC5657FE3A6048BB3C0A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:a2:27:a8:35:b7:ce:a8:61:85:a9:90:1f: 69:50:bb:34:60:be:45:b7:8e:7d:d0:1d:ef:8f:4a: 65:76:e8:88:a7:f7:49:d5:29:4c:a3:15:b9:8e:41: 26:72:45:11:05:91:c1:3f:74:43:09:e4:db:9d:90: 39:e6:f4:e7:dc:55:af:b4:b6:2f:fa:3b:35:19:40: 99:11:5e:4d:24:42:d9:bf:e8:a2:e3:c2:d9:05:63: f7:d5:8b:67:5e:f2:c7:8d:87:bb:2b:69:83:8d:a2: 89:61:56:13:25:ec:5f:08:3b:d0:34:b6:57:5a:a4: 7e:f7:dd:62:4b:62:d1:1d:0b:aa:7f:bd:68:b0:ce: 43:71:ee:ff:5c:e5:6b:07:c6:dc:af:7d:0e:35:6d: 8a:35:ef:70:2f:1a:b3:0b:a7:62:45:e1:cf:0c:e8: d9:c9:c9:8e:7b:3b:c7:37:ec:1b:24:3f:4d:3e:cd: 7e:b8:dc:b9:57:da:67:71:00:bc:fd:bc:9e:9f:a4: cf:09:c0:ef:1a:2a:3c:ad:42:44:d8:d0:4c:96:9c: 2d:b4:22:6f:72:3f:31:5e:35:1b:53:5c:87:f2:c6: df:a8:18:d3:72:98:a3:1e:eb:bd:64:fa:a6:87:44: 97:a3:89:2b:60:8d:27:00:68:ca:33:15:0b:b3:ab: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E8:37:7B:48:C6:94:ED:D1:CC:56:57:FE:3A:60:48:BB:3C:0A:50 X509v3 Authority Key Identifier: keyid:DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.2.0/24 Signature Algorithm: sha256WithRSAEncryption 57:81:ef:95:d4:fa:f2:16:bc:1d:d3:ec:3a:12:41:d4:49:16: 89:c6:a5:0c:70:54:0f:b0:e7:a8:77:0e:c1:8e:68:42:ae:62: 75:f3:75:19:2e:44:4b:6d:b5:a4:19:af:03:1a:18:c7:77:16: bb:38:7a:5b:30:56:af:39:4a:16:ea:eb:ea:43:e6:e0:27:2b: b5:b1:db:26:dd:f1:c8:6a:20:df:11:03:47:e5:55:56:9e:53: 76:81:bc:96:94:00:e2:6d:fd:5b:66:12:43:e2:13:14:97:b6: a2:42:3a:1f:0d:28:17:a0:71:58:af:9c:8d:b3:59:df:48:67: e6:51:82:c6:93:cc:02:b7:55:30:51:ae:e6:86:6d:7e:6d:4e: ca:92:0b:fe:30:f5:4c:1b:87:38:16:87:c5:b8:66:fc:a2:eb: d3:3c:65:0e:55:6a:7e:94:3e:bb:47:10:c4:a6:c8:07:22:cd: 01:40:9d:5b:a8:ac:37:97:34:b8:d1:aa:b4:43:57:8e:b0:a2: 97:6e:e5:df:8c:a0:4b:2c:9b:4e:2b:18:cb:35:24:74:b6:f3: 40:d0:3b:5f:4d:07:8b:8f:c4:8c:7e:92:33:86:8b:ce:92:5d: 95:4c:16:e6:b9:39:8c:0e:f8:ca:bd:c2:46:27:09:bb:7f:17: 7b:0a:f0:82 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUbQMHhMj3oqHFc8UAsge0Dyw7BNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4N0IxNjQ0NTA0NDhFMTBGNkFERkFFMkQ2MUExQTRB MjNEQkQ3RDAeFw0yNTExMTAxOTE5MDdaFw0yNjExMDkxOTI0MDdaMDMxMTAvBgNV BAMTKDI4RTgzNzdCNDhDNjk0RUREMUNDNTY1N0ZFM0E2MDQ4QkIzQzBBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKU6InqDW3zqhhhamQH2lQuzRg vkW3jn3QHe+PSmV26Iin90nVKUyjFbmOQSZyRREFkcE/dEMJ5NudkDnm9OfcVa+0 ti/6OzUZQJkRXk0kQtm/6KLjwtkFY/fVi2de8seNh7sraYONoolhVhMl7F8IO9A0 tldapH733WJLYtEdC6p/vWiwzkNx7v9c5WsHxtyvfQ41bYo173AvGrMLp2JF4c8M 6NnJyY57O8c37BskP00+zX643LlX2mdxALz9vJ6fpM8JwO8aKjytQkTY0EyWnC20 Im9yPzFeNRtTXIfyxt+oGNNymKMe671k+qaHRJejiStgjScAaMozFQuzqyNPAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUKOg3e0jGlO3RzFZX/jpgSLs8ClAwHwYDVR0j BBgwFoAU2oexZEUESOEPat+uLWGhpKI9vX0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXRGbUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJS YlUvMC9EQTg3QjE2NDQ1MDQ0OEUxMEY2QURGQUUyRDYxQTFBNEEyM0RCRDdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBODdCMTY0NDUwNDQ4RTEw RjZBREZBRTJENjFBMUE0QTIzREJEN0QuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0Rm1FOGZ6U1RLdEF1OEdiWHU0ZTdEMWNxdVdHcnluSjdaWGtiYmpiUmJVLzAv MzEzNjM4MmUzMDJlMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzMjM0 MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACoAAIwDQYJKoZIhvcNAQELBQADggEBAFeB75XU+vIWvB3T 7DoSQdRJFonGpQxwVA+w56h3DsGOaEKuYnXzdRkuREtttaQZrwMaGMd3Frs4elsw Vq85Shbq6+pD5uAnK7Wx2ybd8chqIN8RA0flVVaeU3aBvJaUAOJt/VtmEkPiExSX tqJCOh8NKBegcVivnI2zWd9IZ+ZRgsaTzAK3VTBRruaGbX5tTsqSC/4w9UwbhzgW h8W4Zvyi69M8ZQ5Van6UPrtHEMSmyAcizQFAnVuorDeXNLjRqrRDV46wopdu5d+M oEssm04rGMs1JHS280DQO19NB4uPxIx+kjOGi86SXZVMFua5OYwO+Mq9wkYnCbt/ F3sK8II= -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:21 2025 by rpki-client