This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa File: 3230302e3135322e38382e302f32312d3231203d3e203232373036.roa (raw, json) Hash identifier: MBwBHxSWxMveV5zOAQE9u0UOgez+QKGSVdfkWd+8Crg= Subject key identifier: 8D:C2:B6:20:15:D4:2D:18:0A:C4:C2:6D:AC:94:70:25:AB:8B:64:A7 Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Certificate serial: 368DBC2389F012EFB3790C068CF68F8719CE507A Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa Signing time: Fri 21 Nov 2025 13:26:45 +0000 ROA not before: Fri 21 Nov 2025 13:21:45 +0000 ROA not after: Fri 20 Nov 2026 13:26:45 +0000 asID: 22706 IP address blocks: 200.152.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8d:bc:23:89:f0:12:ef:b3:79:0c:06:8c:f6:8f:87:19:ce:50:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Validity Not Before: Nov 21 13:21:45 2025 GMT Not After : Nov 20 13:26:45 2026 GMT Subject: CN=8DC2B62015D42D180AC4C26DAC947025AB8B64A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:5a:31:14:12:84:45:45:49:d8:0e:cd:e3: 03:18:65:f9:54:1a:d5:69:a0:ac:18:e4:cb:7f:b6: d8:67:41:51:f2:96:b4:9e:a8:e2:c3:13:15:21:20: 7c:bf:45:61:a2:45:0a:34:6e:29:33:4c:03:21:74: d7:be:95:40:66:ee:fb:79:e6:11:97:8f:76:8b:9d: 8d:85:1f:ae:ab:46:18:36:e4:ab:52:91:8d:1f:4a: 7d:93:68:86:42:7a:c4:43:26:78:d7:47:22:49:34: 8d:02:63:e1:a8:53:22:b7:00:7b:cd:e5:2f:9e:0a: 9e:d5:88:d1:e5:0a:d9:66:40:76:15:8c:73:b5:34: 47:3a:04:30:db:69:fe:73:23:f3:78:09:b1:50:99: be:e2:14:ed:03:45:2f:e3:da:75:f5:b6:5c:c3:06: 07:87:c4:9c:48:2c:50:f3:c3:e6:c3:63:39:5f:43: 5d:9c:89:ac:39:9c:71:1d:47:23:39:5f:d3:bf:da: d0:46:c1:c5:7a:aa:6e:08:08:e5:24:9d:23:b8:d4: c5:46:94:67:26:66:6c:a4:30:dc:09:79:fe:b9:42: 9d:19:d6:fa:16:97:1f:95:8e:cc:9d:14:d0:56:b4: 39:50:a3:77:23:3d:77:d6:a2:02:c6:50:ee:11:f7: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C2:B6:20:15:D4:2D:18:0A:C4:C2:6D:AC:94:70:25:AB:8B:64:A7 X509v3 Authority Key Identifier: keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.88.0/21 Signature Algorithm: sha256WithRSAEncryption dd:91:0a:1f:49:41:b4:9d:79:0d:5b:6e:71:08:2e:65:5d:4d: e7:be:ea:5d:f8:1a:70:d5:4b:bc:cf:89:46:57:01:20:7e:82: 8e:9c:c4:fa:0c:72:bc:27:5c:b3:71:34:95:a8:eb:52:31:3c: 4e:a2:fc:79:46:45:5b:f9:3b:11:62:02:fc:e0:14:28:c9:43: 07:16:bd:e5:05:0a:cb:44:8c:92:74:4c:11:d3:d8:d2:14:c3: 67:94:30:c5:45:bd:4b:3f:d7:54:a6:ff:d1:35:5b:1b:5b:f7: 6c:a3:74:b1:f4:a2:15:ef:e5:4e:a6:4f:3e:a5:bc:f2:b5:d7: 78:40:2a:04:ea:c1:24:0c:28:5a:0e:00:a1:67:99:83:a6:b3: 08:d8:2b:c3:11:7f:9f:7e:c4:d5:90:8f:29:3d:27:ce:d2:e5: 94:f5:62:02:00:cb:b8:00:ac:41:78:dc:d2:dc:24:46:44:8c: 55:46:7e:bd:99:9d:eb:6c:ae:50:77:10:81:62:9a:ab:43:49: b3:50:f2:6a:c7:97:07:70:cd:af:20:df:bb:be:11:2a:00:4f: df:f9:98:7b:a2:c6:3e:bf:92:06:ab:10:85:2e:0d:54:b3:3b: fc:1a:16:3c:56:0e:16:2a:ac:83:19:09:74:0d:fd:b3:53:1d: 34:24:67:01 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUNo28I4nwEu+zeQwGjPaPhxnOUHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw ODUzNDA3MjAeFw0yNTExMjExMzIxNDVaFw0yNjExMjAxMzI2NDVaMDMxMTAvBgNV BAMTKDhEQzJCNjIwMTVENDJEMTgwQUM0QzI2REFDOTQ3MDI1QUI4QjY0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnFoxFBKERUVJ2A7N4wMYZflU GtVpoKwY5Mt/tthnQVHylrSeqOLDExUhIHy/RWGiRQo0bikzTAMhdNe+lUBm7vt5 5hGXj3aLnY2FH66rRhg25KtSkY0fSn2TaIZCesRDJnjXRyJJNI0CY+GoUyK3AHvN 5S+eCp7ViNHlCtlmQHYVjHO1NEc6BDDbaf5zI/N4CbFQmb7iFO0DRS/j2nX1tlzD BgeHxJxILFDzw+bDYzlfQ12ciaw5nHEdRyM5X9O/2tBGwcV6qm4ICOUknSO41MVG lGcmZmykMNwJef65Qp0Z1voWlx+VjsydFNBWtDlQo3cjPXfWogLGUO4R9z53AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUjcK2IBXULRgKxMJtrJRwJauLZKcwHwYDVR0j BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40 bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5 Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv MzIzMDMwMmUzMTM1MzIyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjMy MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQDyJhYMA0GCSqGSIb3DQEBCwUAA4IBAQDdkQofSUG0 nXkNW25xCC5lXU3nvupd+Bpw1Uu8z4lGVwEgfoKOnMT6DHK8J1yzcTSVqOtSMTxO ovx5RkVb+TsRYgL84BQoyUMHFr3lBQrLRIySdEwR09jSFMNnlDDFRb1LP9dUpv/R NVsbW/dso3Sx9KIV7+VOpk8+pbzytdd4QCoE6sEkDChaDgChZ5mDprMI2CvDEX+f fsTVkI8pPSfO0uWU9WICAMu4AKxBeNzS3CRGRIxVRn69mZ3rbK5QdxCBYpqrQ0mz UPJqx5cHcM2vIN+7vhEqAE/f+Zh7osY+v5IGqxCFLg1Uszv8GhY8Vg4WKqyDGQl0 Df2zUx00JGcB -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:43 2025 by rpki-client