This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa File: 3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa (raw, json) Hash identifier: pF+weIwvbdKH2egybjx9gMDWvq5qm8hqd5aUuZAoLG4= Subject key identifier: 16:03:29:73:00:16:F0:6F:3F:3C:E7:1F:8C:DC:99:F2:D1:44:8E:73 Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B Certificate serial: 219D8E25D696BF521206566309F80ACFE4E25F5C Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa Signing time: Fri 14 Nov 2025 01:00:23 +0000 ROA not before: Fri 14 Nov 2025 00:55:23 +0000 ROA not after: Fri 13 Nov 2026 01:00:23 +0000 asID: 11921 IP address blocks: 200.150.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9d:8e:25:d6:96:bf:52:12:06:56:63:09:f8:0a:cf:e4:e2:5f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B Validity Not Before: Nov 14 00:55:23 2025 GMT Not After : Nov 13 01:00:23 2026 GMT Subject: CN=160329730016F06F3F3CE71F8CDC99F2D1448E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:46:2a:9b:70:a3:c2:35:72:66:45:66:77: 5f:33:df:34:ba:ca:4e:86:38:28:86:ae:38:b0:f5: 8b:c8:ea:91:38:ce:aa:b3:e3:30:20:5e:9c:b0:b0: 5f:92:af:2a:9f:05:dd:87:17:82:86:41:65:11:e6: 34:00:00:7a:86:7f:83:66:bb:c2:e9:d7:cf:78:21: fa:c2:5e:60:e7:6d:e9:ab:25:aa:c3:cd:9b:07:15: 4b:b4:35:ab:61:a4:6b:37:79:09:10:bb:32:5a:fe: 49:5f:0f:f2:cf:2a:bd:03:ba:0b:39:1a:b5:0a:7c: 36:28:d5:82:3a:64:53:22:c3:d6:8a:45:3d:3c:26: 7d:f8:95:da:fc:28:8b:37:d1:fc:b2:56:a4:9f:20: 17:33:58:e3:4b:5e:b7:7c:d7:d4:b1:7c:a6:82:d0: 73:52:78:20:95:db:34:d1:c2:fa:4f:02:53:c9:70: ab:87:e7:c5:65:99:7d:7b:1a:f7:54:ab:1a:30:b8: 16:75:97:00:db:e2:37:77:1a:98:54:08:ec:a6:0c: 74:e9:75:2d:b5:bb:fd:43:58:76:cd:d2:9e:57:59: 56:d7:a4:4a:fd:8b:0c:2a:70:53:2b:8a:59:88:20: a8:eb:b0:84:6c:f2:d7:8d:02:61:06:78:49:01:ef: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:29:73:00:16:F0:6F:3F:3C:E7:1F:8C:DC:99:F2:D1:44:8E:73 X509v3 Authority Key Identifier: keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.150.128.0/20 Signature Algorithm: sha256WithRSAEncryption 31:66:18:f7:36:79:dc:f1:96:1c:a1:5c:a5:a7:05:90:e3:30: c3:3e:b5:61:44:9e:03:36:3a:f7:5a:17:eb:df:21:63:38:c9: f6:49:7c:4a:e4:c2:5a:58:5f:58:f8:46:70:3e:bd:ba:bc:70: 4d:72:6d:cf:af:8c:00:d3:38:3e:7e:cc:58:c4:30:e0:71:6f: 4f:af:7c:1f:f9:34:8d:8b:ae:8c:a9:5c:9e:a0:4b:f8:0b:8a: cb:35:da:ec:b8:d9:11:3a:da:0a:d9:97:76:97:df:94:64:17: 1a:c5:96:aa:02:90:9a:c3:31:f4:48:c0:cd:75:fd:c2:81:eb: c5:a8:99:f7:df:23:29:49:b8:c0:f2:c9:c6:39:74:9b:e1:be: dd:13:39:5d:e0:0d:6a:8a:bd:ae:62:5e:9d:a3:dc:4a:3c:45: 43:e7:ff:5b:88:b1:df:8c:cb:56:bc:54:31:fc:f7:25:6a:a2: 54:80:c7:b1:16:a0:d5:3a:85:32:bc:df:36:c7:08:1b:a4:bb: 78:5e:35:0c:c3:ca:ca:6e:75:9c:91:35:ce:4f:b9:bc:8d:1e: 25:e8:bd:63:b9:73:42:03:97:4c:0e:1c:c3:6e:32:bd:e9:c7: 8e:f9:8d:22:63:78:48:29:d4:92:85:a2:7f:6a:01:7a:9b:78: 21:32:e6:81 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUIZ2OJdaWv1ISBlZjCfgKz+TiX1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG QzU5MEMwQjAeFw0yNTExMTQwMDU1MjNaFw0yNjExMTMwMTAwMjNaMDMxMTAvBgNV BAMTKDE2MDMyOTczMDAxNkYwNkYzRjNDRTcxRjhDREM5OUYyRDE0NDhFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCau0Yqm3CjwjVyZkVmd18z3zS6 yk6GOCiGrjiw9YvI6pE4zqqz4zAgXpywsF+SryqfBd2HF4KGQWUR5jQAAHqGf4Nm u8Lp1894IfrCXmDnbemrJarDzZsHFUu0NathpGs3eQkQuzJa/klfD/LPKr0Dugs5 GrUKfDYo1YI6ZFMiw9aKRT08Jn34ldr8KIs30fyyVqSfIBczWONLXrd819SxfKaC 0HNSeCCV2zTRwvpPAlPJcKuH58VlmX17GvdUqxowuBZ1lwDb4jd3GphUCOymDHTp dS21u/1DWHbN0p5XWVbXpEr9iwwqcFMrilmIIKjrsIRs8teNAmEGeEkB7wLZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUFgMpcwAW8G8/POcfjNyZ8tFEjnMwHwYDVR0j BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2 cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv MzIzMDMwMmUzMTM1MzAyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMx MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATIloAwDQYJKoZIhvcNAQELBQADggEBADFmGPc2 edzxlhyhXKWnBZDjMMM+tWFEngM2OvdaF+vfIWM4yfZJfErkwlpYX1j4RnA+vbq8 cE1ybc+vjADTOD5+zFjEMOBxb0+vfB/5NI2LroypXJ6gS/gLiss12uy42RE62grZ l3aX35RkFxrFlqoCkJrDMfRIwM11/cKB68WomfffIylJuMDyycY5dJvhvt0TOV3g DWqKva5iXp2j3Eo8RUPn/1uIsd+My1a8VDH89yVqolSAx7EWoNU6hTK83zbHCBuk u3heNQzDyspudZyRNc5PubyNHiXovWO5c0IDl0wOHMNuMr3px475jSJjeEgp1JKF on9qAXqbeCEy5oE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:26 2025 by rpki-client