This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa File: 3230302e3135322e38372e302f32342d3234203d3e203232373036.roa (raw, json) Hash identifier: qbSUYzwnFoRM2txsJQ8SLA+b7Poq6TJVGeXIlqHTY+M= Subject key identifier: 1E:B3:FA:F8:6E:64:0D:E0:65:F3:13:9B:42:44:A3:39:C8:BE:D8:BD Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Certificate serial: 4B39460F8FAAF729E13FD6AA8DEF4ECE40B11EFC Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa Signing time: Fri 21 Nov 2025 13:26:37 +0000 ROA not before: Fri 21 Nov 2025 13:21:37 +0000 ROA not after: Fri 20 Nov 2026 13:26:37 +0000 asID: 22706 IP address blocks: 200.152.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:39:46:0f:8f:aa:f7:29:e1:3f:d6:aa:8d:ef:4e:ce:40:b1:1e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Validity Not Before: Nov 21 13:21:37 2025 GMT Not After : Nov 20 13:26:37 2026 GMT Subject: CN=1EB3FAF86E640DE065F3139B4244A339C8BED8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:0b:f4:02:66:a5:41:97:c6:1c:f5:16:3e: d4:29:ae:7a:2a:05:b1:ee:01:98:96:e2:24:56:22: 3b:ed:71:41:5f:87:8d:54:85:b2:60:5c:3d:97:9d: b0:0d:a0:52:34:ba:b7:c3:4c:7e:7a:1c:0c:90:e0: 74:ac:05:d2:15:24:41:64:05:ba:27:69:4c:d1:cf: d4:6f:32:c4:2d:9d:f7:7d:9e:7f:5a:de:d2:8f:c9: e3:df:ba:47:91:1a:ed:5e:34:34:25:7f:f4:58:b1: db:30:b0:6b:17:0f:82:71:0e:da:17:0a:9f:cc:c7: d5:4e:45:60:b6:6f:da:81:ef:f2:e2:15:5f:7e:58: 7a:51:8f:57:4e:d7:27:ff:15:da:f5:7b:7c:ac:94: 2a:21:4b:5b:15:8b:e7:0f:a3:0e:c5:73:0a:ed:4c: 32:b3:48:55:2f:cb:89:19:88:81:0c:d8:75:72:f4: 70:2b:da:cd:c4:24:d2:6d:bb:93:1a:dd:3a:15:48: b6:c0:b4:b1:3a:1f:12:15:18:3b:6e:22:87:7d:4c: ea:ab:ec:d1:10:e3:51:a0:9f:50:6e:e0:28:1f:88: da:c3:75:46:ea:bb:52:b9:c9:f4:ab:b3:8f:44:41: 25:d7:ee:14:9c:a1:a0:36:47:69:7d:1e:e1:bb:a6: 17:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:FA:F8:6E:64:0D:E0:65:F3:13:9B:42:44:A3:39:C8:BE:D8:BD X509v3 Authority Key Identifier: keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.87.0/24 Signature Algorithm: sha256WithRSAEncryption ac:c3:90:a9:da:0a:a5:f0:9b:aa:72:c3:45:70:6b:83:46:0e: 32:e8:e0:44:0d:9d:dd:aa:bb:38:32:a9:1d:19:c8:83:15:47: ab:68:c9:59:8a:4d:52:30:12:e9:dc:67:be:63:c8:bd:49:d5: 6f:41:0b:ff:ac:da:fe:e7:b9:cb:40:65:78:1e:c5:5b:75:74: 2e:55:ba:a5:bc:2d:ef:f1:d6:90:45:4d:9c:7e:fd:45:c5:15: 50:14:40:cf:1b:da:09:ae:84:1a:d2:8a:8c:27:5f:c7:51:50: 1e:4c:89:da:66:52:30:13:0b:56:f2:44:74:d7:6a:12:07:67: ce:2f:ac:63:c2:20:e9:a3:05:46:56:db:cd:3f:2f:e0:0b:c5: 17:f8:5b:0e:1d:0e:2b:89:b6:7f:13:cb:1d:73:9d:19:17:b6: be:7a:96:27:9a:26:34:6d:d1:2a:d5:88:ae:79:ad:a3:e7:6b: 1a:d8:a4:88:f1:62:3d:19:32:ad:e9:93:f1:ce:63:2a:43:9d: dd:a3:c1:df:d9:96:9a:6d:a7:41:96:ff:3b:40:6d:df:07:bc: d4:8a:9a:4c:a2:20:f1:6b:4d:0e:d0:2f:06:56:1e:9a:46:34: cf:f2:5e:ef:57:51:31:0c:fb:25:8f:16:0a:5b:f4:f7:b4:d9: 36:ad:1b:2a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUSzlGD4+q9ynhP9aqje9OzkCxHvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw ODUzNDA3MjAeFw0yNTExMjExMzIxMzdaFw0yNjExMjAxMzI2MzdaMDMxMTAvBgNV BAMTKDFFQjNGQUY4NkU2NDBERTA2NUYzMTM5QjQyNDRBMzM5QzhCRUQ4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbQv0AmalQZfGHPUWPtQprnoq BbHuAZiW4iRWIjvtcUFfh41UhbJgXD2XnbANoFI0urfDTH56HAyQ4HSsBdIVJEFk BbonaUzRz9RvMsQtnfd9nn9a3tKPyePfukeRGu1eNDQlf/RYsdswsGsXD4JxDtoX Cp/Mx9VORWC2b9qB7/LiFV9+WHpRj1dO1yf/Fdr1e3yslCohS1sVi+cPow7Fcwrt TDKzSFUvy4kZiIEM2HVy9HAr2s3EJNJtu5Ma3ToVSLbAtLE6HxIVGDtuIod9TOqr 7NEQ41Ggn1Bu4CgfiNrDdUbqu1K5yfSrs49EQSXX7hScoaA2R2l9HuG7phcLAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUHrP6+G5kDeBl8xObQkSjOci+2L0wHwYDVR0j BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40 bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5 Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv MzIzMDMwMmUzMTM1MzIyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyJhXMA0GCSqGSIb3DQEBCwUAA4IBAQCsw5Cp2gql 8JuqcsNFcGuDRg4y6OBEDZ3dqrs4MqkdGciDFUeraMlZik1SMBLp3Ge+Y8i9SdVv QQv/rNr+57nLQGV4HsVbdXQuVbqlvC3v8daQRU2cfv1FxRVQFEDPG9oJroQa0oqM J1/HUVAeTInaZlIwEwtW8kR012oSB2fOL6xjwiDpowVGVtvNPy/gC8UX+FsOHQ4r ibZ/E8sdc50ZF7a+epYnmiY0bdEq1Yiuea2j52sa2KSI8WI9GTKt6ZPxzmMqQ53d o8Hf2ZaabadBlv87QG3fB7zUippMoiDxa00O0C8GVh6aRjTP8l7vV1ExDPsljxYK W/T3tNk2rRsq -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:36 2025 by rpki-client