This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa File: 3230302e3135322e38352e302f32342d3234203d3e203232373036.roa (raw, json) Hash identifier: +9T2FacTgTTn/xEEpe8TAggTI9S/vjPIEBpdgtxNz6M= Subject key identifier: 09:A4:57:CD:13:23:1E:1E:08:4E:87:D9:1C:15:60:74:E5:E9:C1:99 Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Certificate serial: 1B3C6E50AD0DEFA00B2419F50DF8491285F06194 Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa Signing time: Fri 21 Nov 2025 13:26:41 +0000 ROA not before: Fri 21 Nov 2025 13:21:41 +0000 ROA not after: Fri 20 Nov 2026 13:26:41 +0000 asID: 22706 IP address blocks: 200.152.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3c:6e:50:ad:0d:ef:a0:0b:24:19:f5:0d:f8:49:12:85:f0:61:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Validity Not Before: Nov 21 13:21:41 2025 GMT Not After : Nov 20 13:26:41 2026 GMT Subject: CN=09A457CD13231E1E084E87D91C156074E5E9C199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:28:06:4c:6e:5a:0a:70:71:53:25:a4:5a: 43:3d:2c:93:5b:54:bd:d9:b8:05:42:72:b8:00:10: 08:de:5a:0f:e1:b1:1f:0b:fb:87:4f:34:9c:db:8f: 92:10:01:3d:6d:9b:76:c6:a1:6f:20:59:8e:d6:a7: 97:22:f5:b8:25:2a:7d:2a:c9:ba:b6:c7:29:cb:b8: c1:6f:0a:bb:b1:a5:18:87:1d:59:03:2d:20:bb:f8: 42:e8:54:81:cf:44:21:22:e3:d9:e1:9c:9e:da:2a: ad:61:dc:85:5c:aa:05:96:2a:96:f6:fc:c2:74:83: de:05:20:78:2e:67:af:9b:69:60:5a:ad:9f:b1:99: c7:da:3a:88:14:71:c9:82:f1:85:33:a9:3e:04:1a: 1e:64:35:e5:89:47:28:fb:f9:92:8e:75:92:12:62: a8:e5:4f:5f:14:79:5e:d0:9d:e2:c6:81:ae:d2:b2: d7:a9:eb:a1:c5:1d:ae:9f:08:b4:4e:ba:88:31:d1: 6e:5b:e1:d1:4a:1e:8a:e0:da:65:b9:04:89:a7:9f: 94:9c:7d:7f:0e:20:24:cf:44:b9:e7:d7:4d:9c:3f: 14:05:05:5f:f8:7a:c8:8e:62:90:aa:e6:31:6f:68: 99:a4:a6:6f:82:2d:b0:6b:f3:87:04:22:cc:29:bf: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A4:57:CD:13:23:1E:1E:08:4E:87:D9:1C:15:60:74:E5:E9:C1:99 X509v3 Authority Key Identifier: keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.85.0/24 Signature Algorithm: sha256WithRSAEncryption 88:5e:c9:13:68:33:90:04:74:e3:77:9f:47:09:ac:8e:c5:fb: 64:c0:b2:2e:25:12:45:8f:c6:1b:37:4f:09:63:84:a3:47:89: e8:21:af:97:3d:20:00:2e:14:49:10:a2:fc:a5:d6:a1:23:53: e1:7f:85:41:14:b1:f7:c1:ff:e1:07:c9:79:4a:a1:a9:38:69: 76:f4:de:ac:e7:a1:37:db:a8:03:8f:a9:f5:6b:68:bf:10:1e: a0:1f:cf:ad:bf:b9:c0:76:8d:63:6e:75:4b:7e:f9:aa:b8:45: be:c5:93:e8:42:27:01:95:e8:c6:fb:a6:a4:3e:08:34:80:64: 75:4c:d7:bf:23:75:07:54:6c:47:b4:bd:b0:a9:48:28:aa:43: fa:a1:78:fd:cd:79:5d:23:9a:f7:08:b8:04:28:18:65:f5:a2: 48:d1:d2:c8:13:f4:67:92:f7:84:e4:dd:cc:14:b6:5c:a2:3a: 43:4e:aa:ce:35:fb:6d:9c:d8:83:4d:a6:25:03:f3:df:4e:4f: 94:7e:e8:f2:49:73:ee:bb:02:be:dd:8c:68:fe:51:14:f4:99: 35:53:8f:d5:b1:6a:86:61:59:fc:06:b2:dc:04:3f:98:ac:8f: 98:b8:bf:29:4f:28:0c:a1:33:45:df:dc:4e:95:d3:fa:95:0c: 87:8f:fe:52 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUGzxuUK0N76ALJBn1DfhJEoXwYZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw ODUzNDA3MjAeFw0yNTExMjExMzIxNDFaFw0yNjExMjAxMzI2NDFaMDMxMTAvBgNV BAMTKDA5QTQ1N0NEMTMyMzFFMUUwODRFODdEOTFDMTU2MDc0RTVFOUMxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuCgGTG5aCnBxUyWkWkM9LJNb VL3ZuAVCcrgAEAjeWg/hsR8L+4dPNJzbj5IQAT1tm3bGoW8gWY7Wp5ci9bglKn0q ybq2xynLuMFvCruxpRiHHVkDLSC7+ELoVIHPRCEi49nhnJ7aKq1h3IVcqgWWKpb2 /MJ0g94FIHguZ6+baWBarZ+xmcfaOogUccmC8YUzqT4EGh5kNeWJRyj7+ZKOdZIS YqjlT18UeV7QneLGga7Sstep66HFHa6fCLROuogx0W5b4dFKHorg2mW5BImnn5Sc fX8OICTPRLnn102cPxQFBV/4esiOYpCq5jFvaJmkpm+CLbBr84cEIswpv3Y/AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUCaRXzRMjHh4ITofZHBVgdOXpwZkwHwYDVR0j BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40 bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5 Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv MzIzMDMwMmUzMTM1MzIyZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyJhVMA0GCSqGSIb3DQEBCwUAA4IBAQCIXskTaDOQ BHTjd59HCayOxftkwLIuJRJFj8YbN08JY4SjR4noIa+XPSAALhRJEKL8pdahI1Ph f4VBFLH3wf/hB8l5SqGpOGl29N6s56E326gDj6n1a2i/EB6gH8+tv7nAdo1jbnVL fvmquEW+xZPoQicBlejG+6akPgg0gGR1TNe/I3UHVGxHtL2wqUgoqkP6oXj9zXld I5r3CLgEKBhl9aJI0dLIE/RnkveE5N3MFLZcojpDTqrONfttnNiDTaYlA/PfTk+U fujySXPuuwK+3Yxo/lEU9Jk1U4/VsWqGYVn8BrLcBD+YrI+YuL8pTygMoTNF39xO ldP6lQyHj/5S -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:37 2025 by rpki-client