This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32342d3234203d3e20323634333937.roa File: 3133312e3136312e39322e302f32342d3234203d3e20323634333937.roa (raw, json) Hash identifier: OEcq/zkbhfR9ObczdLUcMTEs9EsFRBAYq2vekS13OGs= Subject key identifier: 90:D6:B9:9C:65:10:DF:61:C7:15:DF:9A:2E:20:DC:69:88:AD:B3:4B Certificate issuer: /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A Certificate serial: 7988AA55FE7F7498B0419C38298AED9CE9EA0ADE Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32342d3234203d3e20323634333937.roa Signing time: Wed 26 Nov 2025 15:17:31 +0000 ROA not before: Wed 26 Nov 2025 15:12:31 +0000 ROA not after: Wed 25 Nov 2026 15:17:31 +0000 asID: 264397 IP address blocks: 131.161.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:88:aa:55:fe:7f:74:98:b0:41:9c:38:29:8a:ed:9c:e9:ea:0a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A Validity Not Before: Nov 26 15:12:31 2025 GMT Not After : Nov 25 15:17:31 2026 GMT Subject: CN=90D6B99C6510DF61C715DF9A2E20DC6988ADB34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d8:87:4d:7e:19:5a:42:f5:1a:89:4a:88:cc: 69:ef:39:25:1c:e6:64:1c:fd:71:eb:d0:d6:20:e0: 2a:01:f6:45:25:c8:9a:c4:8a:d4:61:6d:06:29:7f: 4f:cc:63:f4:50:19:3e:99:27:cf:e9:a5:54:fd:b3: a2:62:17:fa:08:d4:75:25:d1:c0:6c:6a:53:5e:60: f0:10:a3:3f:ee:f1:08:52:bd:05:5e:ec:56:0b:3f: dc:3e:f5:45:d9:2b:3c:69:ac:56:6b:ab:35:7a:cf: 2d:5e:c1:d9:61:a8:f9:83:57:eb:aa:1d:fc:02:60: 69:80:12:fc:00:9a:40:4a:d7:f9:4d:d3:88:3b:41: 0a:3b:c1:b0:5f:cd:b2:f5:f8:a9:76:05:29:37:b4: f2:5d:ae:87:be:c1:13:c7:59:be:eb:6a:a2:15:b1: 02:7a:f8:db:6d:d7:27:71:9c:8e:db:84:5b:07:01: 99:47:69:06:cf:5c:81:9f:6d:16:9b:42:2b:22:09: 8a:09:bb:2c:8e:96:97:e6:c6:17:4d:7f:28:c2:25: 7f:2b:41:6d:86:1b:72:6b:30:82:b3:d2:13:9b:bd: dd:33:ce:4b:29:da:00:c2:5e:32:34:10:66:07:76: e9:67:93:09:9e:15:b8:9c:d8:0c:da:d9:f9:24:c4: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D6:B9:9C:65:10:DF:61:C7:15:DF:9A:2E:20:DC:69:88:AD:B3:4B X509v3 Authority Key Identifier: keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32342d3234203d3e20323634333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.92.0/24 Signature Algorithm: sha256WithRSAEncryption c3:3a:78:b1:dc:5b:c5:2e:58:15:62:e4:3a:0e:88:a4:fa:8f: 6a:fb:ef:bb:63:db:0b:86:9e:2d:5a:ad:67:ea:2d:cc:58:b7: a9:73:f6:26:1c:64:be:10:96:76:c8:ad:b0:f9:2a:9f:59:bf: ca:76:2c:0d:63:10:c1:49:bb:cd:45:26:81:5f:32:17:38:e7: 7e:d0:39:5f:48:b6:28:ba:ac:24:0a:ba:64:06:8d:e8:fc:3f: b0:ac:9c:e4:cc:65:83:04:9c:14:99:c0:e4:9d:dc:b3:ad:f6: bb:88:16:51:76:c9:14:d3:22:a1:d9:35:9b:9a:6c:e7:ff:53: c7:ac:98:5c:4d:fd:90:4d:96:cd:d9:01:78:c3:b9:a3:62:ae: ac:ce:8e:f6:ba:06:44:c1:f1:02:3c:e4:4b:67:df:a5:49:ab: 6c:23:67:2b:81:51:e2:d9:b2:7f:05:b1:a7:59:32:0f:15:d1: 40:7c:b3:7e:53:d3:67:97:88:96:20:a0:16:b3:97:0b:4a:c3: ba:00:6e:66:76:49:e7:47:48:b6:6a:5f:1c:c1:7a:07:6c:2a: 7c:d7:31:c0:47:00:e9:9f:34:c8:03:98:81:15:7d:00:04:61: 66:02:49:25:92:20:90:52:a5:bf:2c:4d:3d:ef:1b:f0:6d:53: da:91:17:43 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUeYiqVf5/dJiwQZw4KYrtnOnqCt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM0N0E2RTE4MTUxQTgyOEE1NzAwRDJCN0UxNkM5QTFG Q0FCRDIwQTAeFw0yNTExMjYxNTEyMzFaFw0yNjExMjUxNTE3MzFaMDMxMTAvBgNV BAMTKDkwRDZCOTlDNjUxMERGNjFDNzE1REY5QTJFMjBEQzY5ODhBREIzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2IdNfhlaQvUaiUqIzGnvOSUc 5mQc/XHr0NYg4CoB9kUlyJrEitRhbQYpf0/MY/RQGT6ZJ8/ppVT9s6JiF/oI1HUl 0cBsalNeYPAQoz/u8QhSvQVe7FYLP9w+9UXZKzxprFZrqzV6zy1ewdlhqPmDV+uq HfwCYGmAEvwAmkBK1/lN04g7QQo7wbBfzbL1+Kl2BSk3tPJdroe+wRPHWb7raqIV sQJ6+Ntt1ydxnI7bhFsHAZlHaQbPXIGfbRabQisiCYoJuyyOlpfmxhdNfyjCJX8r QW2GG3JrMIKz0hObvd0zzksp2gDCXjI0EGYHdulnkwmeFbic2Aza2fkkxBT7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUkNa5nGUQ32HHFd+aLiDcaYits0swHwYDVR0j BBgwFoAULEem4YFRqCilcA0rfhbJofyr0gowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy OGEvMC8yQzQ3QTZFMTgxNTFBODI4QTU3MDBEMkI3RTE2QzlBMUZDQUJEMjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDNDdBNkUxODE1MUE4MjhB NTcwMEQyQjdFMTZDOUExRkNBQkQyMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv MzEzMzMxMmUzMTM2MzEyZTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzQzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACDoVwwDQYJKoZIhvcNAQELBQADggEBAMM6eLHc W8UuWBVi5DoOiKT6j2r777tj2wuGni1arWfqLcxYt6lz9iYcZL4QlnbIrbD5Kp9Z v8p2LA1jEMFJu81FJoFfMhc4537QOV9Itii6rCQKumQGjej8P7CsnOTMZYMEnBSZ wOSd3LOt9ruIFlF2yRTTIqHZNZuabOf/U8esmFxN/ZBNls3ZAXjDuaNirqzOjva6 BkTB8QI85Etn36VJq2wjZyuBUeLZsn8FsadZMg8V0UB8s35T02eXiJYgoBazlwtK w7oAbmZ2SedHSLZqXxzBegdsKnzXMcBHAOmfNMgDmIEVfQAEYWYCSSWSIJBSpb8s TT3vG/BtU9qRF0M= -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:26 2025 by rpki-client