This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa File: 3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (raw, json) Hash identifier: SvLLu85gr28adbYq509a3Xe4Z54Zq24wBIRSJsRFC8U= Subject key identifier: D7:F6:18:C9:C3:F6:68:9A:84:4A:98:52:74:40:31:F9:84:B4:A6:DE Certificate issuer: /CN=2431B5DDF8166029A0033562C55895BEC665B28A Certificate serial: 287CA685BFC5A73C6955CA0F3392255815E232D9 Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa Signing time: Thu 06 Nov 2025 13:37:24 +0000 ROA not before: Thu 06 Nov 2025 13:32:24 +0000 ROA not after: Thu 05 Nov 2026 13:37:24 +0000 asID: 262998 IP address blocks: 186.224.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 13:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7c:a6:85:bf:c5:a7:3c:69:55:ca:0f:33:92:25:58:15:e2:32:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A Validity Not Before: Nov 6 13:32:24 2025 GMT Not After : Nov 5 13:37:24 2026 GMT Subject: CN=D7F618C9C3F6689A844A9852744031F984B4A6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:11:7d:e6:1b:20:5a:f7:f4:f3:42:03:ae: 65:cc:5d:67:10:b8:bf:43:78:2c:f6:64:b6:17:f5: f7:42:b8:93:2f:29:be:a1:a4:29:83:f9:d9:54:f9: 87:d2:05:80:65:f2:4e:cf:95:fa:34:f9:45:b1:52: 5a:af:b1:89:12:40:d3:f5:ee:6d:5f:de:b4:ae:d0: 5a:37:76:08:09:92:ba:b9:ea:a0:b9:7a:6f:84:0c: 1c:15:49:cb:6d:a7:f0:0e:cd:d9:a8:91:d9:3e:58: d9:a8:9a:a5:f9:c0:94:0d:90:9c:6b:eb:3f:e7:c6: 05:bd:3d:89:94:7c:21:f0:21:ab:b8:8d:c0:ca:63: 8f:a7:94:3a:1a:a5:6f:b0:01:d3:bd:8f:97:81:d1: f3:5c:2c:c1:b0:df:81:c0:cc:99:5c:c3:77:81:26: d8:99:3e:a5:cc:c2:df:e0:89:15:4a:18:cf:b0:ad: 94:88:2a:fd:49:d8:b7:b6:ff:44:75:4e:9d:0b:c0: ac:54:3e:e0:63:0c:21:15:49:ac:6c:15:56:4c:ca: 59:d4:86:09:05:f3:f1:d5:97:f6:15:3f:e1:cb:9b: 62:3b:f6:24:81:3a:72:4e:15:2f:b3:ae:dd:2a:fe: 1c:d3:42:2c:7c:79:a0:a9:e6:ab:2f:8d:cd:2d:80: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:18:C9:C3:F6:68:9A:84:4A:98:52:74:40:31:F9:84:B4:A6:DE X509v3 Authority Key Identifier: keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.224.84.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:c1:d4:89:44:77:a8:b2:f2:31:06:36:4e:7f:53:55:00:e0: eb:c5:b3:9d:68:c3:2d:5f:53:0a:ec:e2:b2:8e:14:73:2b:1e: f9:b5:9a:ce:1e:51:ef:e0:5e:ce:88:d0:86:7b:4b:3c:a5:07: b4:5d:5f:07:d3:b5:e7:51:58:e4:c5:91:7b:23:d4:45:bb:ba: 8c:13:b7:cb:7c:e2:63:a5:60:7e:dd:1b:2c:5a:ee:0e:7b:36: 8b:a3:84:a1:bc:d6:f1:36:0c:a3:4e:95:21:d5:c4:94:4a:0d: 89:3b:52:14:b8:40:d6:2a:c1:2b:a2:d1:e0:8b:b2:34:8d:02: ce:7e:6a:1e:39:04:6a:02:08:04:17:26:6b:00:1c:4b:66:a0: 42:97:07:14:8f:ff:80:cf:12:d3:bc:23:f6:34:f7:63:68:30: 3c:4d:de:42:af:25:ed:60:41:af:86:26:9f:4f:5e:f9:e7:67: 4b:eb:de:9f:a9:79:d2:56:6f:30:f9:83:7c:cd:72:77:33:ce: 0f:76:90:fd:72:c0:78:37:13:6b:0a:37:09:99:a8:6f:4c:65: b0:06:9d:9f:b4:d1:4d:1d:ce:ec:69:29:6a:ba:41:a6:bc:ee: e3:e5:78:1c:01:d5:f4:e9:5a:3f:76:95:21:6d:aa:8b:21:58: 8c:6b:b6:70 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUKHymhb/FpzxpVcoPM5IlWBXiMtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMUI1RERGODE2NjAyOUEwMDMzNTYyQzU1ODk1QkVD NjY1QjI4QTAeFw0yNTExMDYxMzMyMjRaFw0yNjExMDUxMzM3MjRaMDMxMTAvBgNV BAMTKEQ3RjYxOEM5QzNGNjY4OUE4NDRBOTg1Mjc0NDAzMUY5ODRCNEE2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFhF95hsgWvf080IDrmXMXWcQ uL9DeCz2ZLYX9fdCuJMvKb6hpCmD+dlU+YfSBYBl8k7Plfo0+UWxUlqvsYkSQNP1 7m1f3rSu0Fo3dggJkrq56qC5em+EDBwVScttp/AOzdmokdk+WNmomqX5wJQNkJxr 6z/nxgW9PYmUfCHwIau4jcDKY4+nlDoapW+wAdO9j5eB0fNcLMGw34HAzJlcw3eB JtiZPqXMwt/giRVKGM+wrZSIKv1J2Le2/0R1Tp0LwKxUPuBjDCEVSaxsFVZMylnU hgkF8/HVl/YVP+HLm2I79iSBOnJOFS+zrt0q/hzTQix8eaCp5qsvjc0tgN+dAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU1/YYycP2aJqESphSdEAx+YS0pt4wHwYDVR0j BBgwFoAUJDG13fgWYCmgAzVixViVvsZlsoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtw UlUvMC8yNDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCNURERjgxNjYwMjlB MDAzMzU2MkM1NTg5NUJFQzY2NUIyOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N4Z0hiWHF2dlNyOENBSmVjRHQ2YTdHN3RTalc0SmJVZnhGQ2l4NWprcFJVLzAv MzEzODM2MmUzMjMyMzQyZTM4MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzIzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAK64FQwDQYJKoZIhvcNAQELBQADggEBAHvB1IlE d6iy8jEGNk5/U1UA4OvFs51owy1fUwrs4rKOFHMrHvm1ms4eUe/gXs6I0IZ7Szyl B7RdXwfTtedRWOTFkXsj1EW7uowTt8t84mOlYH7dGyxa7g57NoujhKG81vE2DKNO lSHVxJRKDYk7UhS4QNYqwSui0eCLsjSNAs5+ah45BGoCCAQXJmsAHEtmoEKXBxSP /4DPEtO8I/Y092NoMDxN3kKvJe1gQa+GJp9PXvnnZ0vr3p+pedJWbzD5g3zNcncz zg92kP1ywHg3E2sKNwmZqG9MZbAGnZ+00U0dzuxpKWq6Qaa87uPleBwB1fTpWj92 lSFtqoshWIxrtnA= -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:14 2025 by rpki-client