This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa File: 3230302e3135322e39302e302f32342d3234203d3e203232373036.roa (raw, json) Hash identifier: qxG2BiBpaOgiZ5vza4ol80WetTt/7tFgv1C6q8Ni/E8= Subject key identifier: 74:E1:58:FD:8F:4B:68:88:E1:22:C7:54:0A:07:2E:37:69:3B:35:3C Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Certificate serial: 67983F71A720E92F69972854B416890E8441D54B Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa Signing time: Fri 21 Nov 2025 13:26:45 +0000 ROA not before: Fri 21 Nov 2025 13:21:45 +0000 ROA not after: Fri 20 Nov 2026 13:26:45 +0000 asID: 22706 IP address blocks: 200.152.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:98:3f:71:a7:20:e9:2f:69:97:28:54:b4:16:89:0e:84:41:d5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Validity Not Before: Nov 21 13:21:45 2025 GMT Not After : Nov 20 13:26:45 2026 GMT Subject: CN=74E158FD8F4B6888E122C7540A072E37693B353C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:a5:e8:aa:b6:0d:51:46:d7:7b:81:57:c4: 33:2b:5e:0b:24:42:cf:00:6d:b3:39:2e:6f:bd:cc: 52:4f:8f:0c:f6:59:1b:9c:f4:f4:aa:2b:48:12:cf: 7e:af:af:f0:11:78:87:ac:30:5a:a8:db:72:ab:5e: 4f:cb:f4:44:d8:ef:e9:34:df:ea:7e:fd:74:58:2f: 2f:89:38:fd:a1:5e:8a:15:49:af:10:da:79:d0:96: b6:bb:cd:78:fd:20:3f:4c:f8:43:d2:2f:63:db:de: 4d:22:8f:c7:00:49:da:2f:6b:82:84:b4:a6:31:1b: c1:5a:bb:1b:bd:66:8d:ae:dc:db:52:c4:d6:e7:94: 5b:d5:a1:38:4b:50:be:bc:33:1b:72:60:b6:92:c2: dc:61:fc:1c:fc:95:ca:8b:56:3a:a6:59:98:3c:a5: 69:16:c3:4f:58:fb:dd:bd:f9:d5:ee:e6:00:a5:ea: 5a:eb:ad:a2:90:d1:23:a5:bc:60:24:09:1a:eb:b6: 8f:f2:4b:64:7e:f3:3f:0c:fb:fe:82:f0:c3:05:1b: 0d:38:7d:ef:9a:23:11:f1:b4:fd:6d:b8:ee:50:44: d9:c1:63:b8:07:a7:98:44:ea:3e:14:a3:58:60:4c: 73:cc:f9:14:ec:ca:07:f0:53:94:5e:3a:aa:0a:d9: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E1:58:FD:8F:4B:68:88:E1:22:C7:54:0A:07:2E:37:69:3B:35:3C X509v3 Authority Key Identifier: keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.90.0/24 Signature Algorithm: sha256WithRSAEncryption 52:0a:4a:54:b9:d8:8b:2d:d6:fd:3b:9a:4d:71:b6:e2:74:d5: ce:a7:61:56:e2:1c:ca:8b:14:72:79:6b:08:e2:7a:e7:17:87: 92:c0:40:2a:48:6c:8b:6f:4a:2c:fe:ae:ee:6a:b9:06:2d:39: 18:a2:05:96:28:c7:59:f7:30:8e:2e:90:7e:0e:be:65:45:c6: cf:fc:0e:53:8d:1e:1e:4f:c5:a3:89:d2:6f:41:5c:69:65:1b: cd:3a:66:8d:34:81:24:8a:ec:f5:06:a8:95:e3:e6:3e:a3:74: 97:b1:05:7c:a2:75:d7:63:cd:bb:12:d2:c0:e3:53:21:2c:8b: 76:1b:0d:14:2c:82:b2:73:f7:3a:b9:a3:43:7e:c7:29:a7:c3: b8:f4:b5:cd:18:87:48:f6:f0:94:98:45:ee:10:30:3b:47:0a: a6:f5:da:ca:f0:85:68:e3:5e:f8:e0:64:77:5f:fe:a0:59:13: 53:5e:fa:02:5d:f8:91:94:f1:19:e1:6a:ab:d0:76:bf:ba:f5: df:82:9a:18:e8:c7:ce:ec:6c:51:b7:69:f6:4b:d8:61:5d:9e: a5:89:df:88:3b:1d:30:b6:23:a0:3c:6d:38:18:3c:d6:af:c6: 0c:48:e6:f7:66:83:e8:28:7f:64:7e:22:60:06:be:f5:4a:bd: bc:70:50:7b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZ5g/cacg6S9plyhUtBaJDoRB1UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw ODUzNDA3MjAeFw0yNTExMjExMzIxNDVaFw0yNjExMjAxMzI2NDVaMDMxMTAvBgNV BAMTKDc0RTE1OEZEOEY0QjY4ODhFMTIyQzc1NDBBMDcyRTM3NjkzQjM1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClkaXoqrYNUUbXe4FXxDMrXgsk Qs8AbbM5Lm+9zFJPjwz2WRuc9PSqK0gSz36vr/AReIesMFqo23KrXk/L9ETY7+k0 3+p+/XRYLy+JOP2hXooVSa8Q2nnQlra7zXj9ID9M+EPSL2Pb3k0ij8cASdova4KE tKYxG8Fauxu9Zo2u3NtSxNbnlFvVoThLUL68MxtyYLaSwtxh/Bz8lcqLVjqmWZg8 pWkWw09Y+929+dXu5gCl6lrrraKQ0SOlvGAkCRrrto/yS2R+8z8M+/6C8MMFGw04 fe+aIxHxtP1tuO5QRNnBY7gHp5hE6j4Uo1hgTHPM+RTsygfwU5ReOqoK2W4PAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUdOFY/Y9LaIjhIsdUCgcuN2k7NTwwHwYDVR0j BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40 bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5 Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv MzIzMDMwMmUzMTM1MzIyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyJhaMA0GCSqGSIb3DQEBCwUAA4IBAQBSCkpUudiL Ldb9O5pNcbbidNXOp2FW4hzKixRyeWsI4nrnF4eSwEAqSGyLb0os/q7uarkGLTkY ogWWKMdZ9zCOLpB+Dr5lRcbP/A5TjR4eT8WjidJvQVxpZRvNOmaNNIEkiuz1BqiV 4+Y+o3SXsQV8onXXY827EtLA41MhLIt2Gw0ULIKyc/c6uaNDfscpp8O49LXNGIdI 9vCUmEXuEDA7Rwqm9drK8IVo41744GR3X/6gWRNTXvoCXfiRlPEZ4Wqr0Ha/uvXf gpoY6MfO7GxRt2n2S9hhXZ6lid+IOx0wtiOgPG04GDzWr8YMSOb3ZoPoKH9kfiJg Br71Sr28cFB7 -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:30 2025 by rpki-client