This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa File: 3230302e3135322e38392e302f32342d3234203d3e203232373036.roa (raw, json) Hash identifier: 067p6B2ahWwUHPyH5Tg4mUbBlpntwiIV221OmKhv9I4= Subject key identifier: A8:67:4F:E2:8E:01:74:3A:42:CE:B2:D2:21:16:E0:79:45:49:D7:6F Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Certificate serial: 0F6CE5079EEA611BD0B78BA3A557DEEBCA411075 Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa Signing time: Fri 21 Nov 2025 13:26:35 +0000 ROA not before: Fri 21 Nov 2025 13:21:35 +0000 ROA not after: Fri 20 Nov 2026 13:26:35 +0000 asID: 22706 IP address blocks: 200.152.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6c:e5:07:9e:ea:61:1b:d0:b7:8b:a3:a5:57:de:eb:ca:41:10:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Validity Not Before: Nov 21 13:21:35 2025 GMT Not After : Nov 20 13:26:35 2026 GMT Subject: CN=A8674FE28E01743A42CEB2D22116E0794549D76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:43:8a:03:72:90:1f:31:48:d5:13:df:77: 09:3a:e4:7b:15:ae:9c:33:6a:df:3e:99:db:a0:97: bb:08:ea:19:34:5c:a7:24:62:e6:67:04:9a:33:e3: 77:9a:24:fc:01:f7:18:d9:7a:64:df:26:8c:83:47: 2d:0d:96:95:b4:b3:90:6e:f7:38:36:2b:59:24:89: 5f:cf:cc:b4:f0:c7:ee:11:9e:c7:e2:6d:4b:72:2e: be:72:df:ab:2e:b0:29:0c:85:e8:ab:27:6a:09:ca: 5b:a9:71:49:d4:6e:39:f4:33:c8:ce:93:b6:d2:00: a3:62:df:0c:a4:92:ee:98:f1:a6:9d:f8:75:0a:fc: 85:52:c7:ca:03:a4:76:0c:0e:63:2b:c4:35:53:13: 0e:8b:df:73:1a:e1:53:57:85:fb:74:f3:23:63:54: 7f:af:a9:c8:eb:46:a2:af:51:5a:c0:ad:7d:b5:0a: 7b:e1:27:2d:d4:03:91:42:31:b0:41:bb:fc:5b:e2: e1:5e:87:88:e2:ce:e5:09:e8:2a:ca:81:a3:6b:f1: 37:68:21:76:c2:9f:5d:c8:b7:3c:c2:85:39:83:f5: e3:2c:7b:89:d0:25:bd:62:71:b8:85:6f:7c:0c:ce: f5:79:26:d7:20:4b:c6:1b:c1:af:67:0b:15:6f:b1: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:67:4F:E2:8E:01:74:3A:42:CE:B2:D2:21:16:E0:79:45:49:D7:6F X509v3 Authority Key Identifier: keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.89.0/24 Signature Algorithm: sha256WithRSAEncryption c7:bd:4a:4b:a4:9c:d0:22:02:0e:fb:76:54:94:2c:c8:10:d4: 46:eb:34:e3:c6:1a:5b:26:2b:da:84:d7:5f:11:ed:5d:b0:ce: e9:9b:55:fa:6e:8c:ac:b5:02:4b:91:94:81:13:93:34:b2:6a: 30:38:67:5f:f8:6d:9a:46:10:b8:5f:82:ee:ac:e5:a3:1d:0d: 51:93:53:ad:a5:45:ce:5f:37:6e:af:6b:6a:3e:d7:b5:cf:8d: d1:57:fc:56:30:36:77:3d:8c:ee:94:4c:54:d7:89:82:d9:68: f6:6b:0d:c1:c8:40:9a:f8:36:e9:86:af:93:4c:a1:bc:ad:b0: 67:12:d5:08:f4:1a:41:55:fd:6c:c5:11:09:19:8e:cf:e6:b2: a0:34:45:6d:c1:59:48:29:ab:4d:01:4e:82:d5:3d:ff:e2:26: cf:fe:44:e3:bd:87:3a:55:f2:10:ca:c4:b1:57:92:e2:c2:d8: 42:e2:a9:c8:2a:e4:06:89:53:cd:f4:38:5f:07:eb:a9:0d:3f: 12:2d:08:d8:96:18:34:f5:d6:61:9e:c0:57:0e:c5:ae:1f:6a: 82:3b:61:d9:c4:be:bf:a1:b3:e5:b4:30:57:ce:eb:2b:e5:3f: f0:fe:91:d2:76:9c:44:d2:80:b6:98:98:81:75:cf:08:4f:ec: f0:66:f3:63 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUD2zlB57qYRvQt4ujpVfe68pBEHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw ODUzNDA3MjAeFw0yNTExMjExMzIxMzVaFw0yNjExMjAxMzI2MzVaMDMxMTAvBgNV BAMTKEE4Njc0RkUyOEUwMTc0M0E0MkNFQjJEMjIxMTZFMDc5NDU0OUQ3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZ0OKA3KQHzFI1RPfdwk65HsV rpwzat8+mdugl7sI6hk0XKckYuZnBJoz43eaJPwB9xjZemTfJoyDRy0NlpW0s5Bu 9zg2K1kkiV/PzLTwx+4RnsfibUtyLr5y36susCkMheirJ2oJylupcUnUbjn0M8jO k7bSAKNi3wykku6Y8aad+HUK/IVSx8oDpHYMDmMrxDVTEw6L33Ma4VNXhft08yNj VH+vqcjrRqKvUVrArX21CnvhJy3UA5FCMbBBu/xb4uFeh4jizuUJ6CrKgaNr8Tdo IXbCn13ItzzChTmD9eMse4nQJb1icbiFb3wMzvV5JtcgS8Ybwa9nCxVvsZbRAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUqGdP4o4BdDpCzrLSIRbgeUVJ128wHwYDVR0j BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40 bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5 Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv MzIzMDMwMmUzMTM1MzIyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyJhZMA0GCSqGSIb3DQEBCwUAA4IBAQDHvUpLpJzQ IgIO+3ZUlCzIENRG6zTjxhpbJivahNdfEe1dsM7pm1X6boystQJLkZSBE5M0smow OGdf+G2aRhC4X4LurOWjHQ1Rk1OtpUXOXzdur2tqPte1z43RV/xWMDZ3PYzulExU 14mC2Wj2aw3ByECa+Dbphq+TTKG8rbBnEtUI9BpBVf1sxREJGY7P5rKgNEVtwVlI KatNAU6C1T3/4ibP/kTjvYc6VfIQysSxV5LiwthC4qnIKuQGiVPN9DhfB+upDT8S LQjYlhg09dZhnsBXDsWuH2qCO2HZxL6/obPltDBXzusr5T/w/pHSdpxE0oC2mJiB dc8IT+zwZvNj -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:12 2025 by rpki-client