This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32322d3232203d3e203532383338.roa File: 3134332e3230322e39322e302f32322d3232203d3e203532383338.roa (raw, json) Hash identifier: Jdjlx+P7UhldltYffxLB9aM1xBWl0ARCuO1fZ1/3TFg= Subject key identifier: F2:52:80:A4:91:2B:FF:62:D2:B9:BF:8A:06:29:65:9F:9E:B0:4B:C0 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 20497920482835993A48A89217CC749700C5FEA6 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32322d3232203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:36:31 +0000 ROA not before: Wed 03 Dec 2025 00:31:31 +0000 ROA not after: Wed 02 Dec 2026 00:36:31 +0000 asID: 52838 IP address blocks: 143.202.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:49:79:20:48:28:35:99:3a:48:a8:92:17:cc:74:97:00:c5:fe:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:31:31 2025 GMT Not After : Dec 2 00:36:31 2026 GMT Subject: CN=F25280A4912BFF62D2B9BF8A0629659F9EB04BC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:09:f8:3e:75:45:67:bf:53:d2:1e:8c:02:96: d0:b7:a7:d5:fd:d3:9f:6c:f1:0b:3c:6b:c8:49:24: dc:16:d8:92:e3:d6:db:8b:06:26:79:30:e2:5b:51: 53:a7:9d:d2:e8:b1:58:be:d1:60:1a:dd:9a:1d:de: df:6e:0d:7e:25:ba:b0:10:30:a8:f6:9e:59:8a:52: 99:1d:0b:33:ed:19:3b:46:9c:22:f8:27:e2:49:b6: 95:6a:95:59:24:35:39:fa:5f:07:85:f5:52:b8:80: fb:69:36:cc:b2:2e:47:fb:b3:5a:8a:bf:89:85:35: e6:9e:60:89:58:cb:fb:58:8f:38:b2:36:f6:c4:8e: 83:da:53:6e:8f:37:e6:12:10:4e:0e:12:7f:ea:bf: 29:a0:ae:c7:f0:0d:c7:a3:50:90:55:4b:f0:2c:17: 78:3c:6e:5f:14:da:56:02:17:df:1f:48:df:a8:2d: 36:33:df:25:7c:9b:82:3e:81:50:02:18:fa:60:61: a9:4b:c7:91:0b:42:78:49:fe:fb:10:bd:de:50:e1: ec:2e:51:30:cf:33:7c:5f:ef:15:7a:39:48:ed:4a: 78:40:4f:9c:ca:d4:31:65:78:48:74:a1:41:f8:64: 3d:2b:c3:d1:c3:6f:f6:17:71:37:c0:ae:9d:cc:48: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:80:A4:91:2B:FF:62:D2:B9:BF:8A:06:29:65:9F:9E:B0:4B:C0 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32322d3232203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:9e:e0:66:47:ae:4f:87:6d:bc:95:11:8d:28:0f:20:47:20: 6c:cb:fd:29:c2:f9:24:2c:a2:09:bd:01:43:ee:01:ab:4c:3c: 4e:ba:71:b2:c4:86:57:e4:8e:17:99:48:e2:70:2a:e4:f1:2f: eb:20:9e:76:d1:36:a7:76:bc:99:57:79:7e:3b:37:01:f9:a1: dd:fd:4d:6c:68:64:f0:6b:fd:3d:e9:42:c1:55:c3:31:aa:ff: d3:a9:da:dc:b0:4f:fd:b1:c9:0e:60:de:af:d8:11:eb:09:5b: 96:8f:28:c6:d2:e4:a9:ac:84:c2:84:f8:0a:fc:d6:6f:3f:15: d2:e1:ae:af:aa:dc:8a:84:a8:00:db:85:08:0e:06:75:cd:25: c4:19:14:d7:4d:2d:9d:c7:33:2e:07:db:54:ce:aa:82:4e:08: f8:cf:ec:9b:cf:e8:52:3e:b6:e7:da:e3:14:b1:f1:41:5a:7b: 9a:ee:3a:76:2f:62:5c:79:91:93:86:0b:75:b7:e6:86:54:e2: 6c:bf:02:1b:98:e4:d6:2b:7a:a0:68:4c:d4:61:a2:00:b3:e6: be:93:ff:45:f8:a5:66:35:8d:e1:98:38:4f:4a:3b:56:4a:3d: f3:94:83:7a:94:7a:b6:01:d2:13:ba:bc:ec:4e:71:a8:18:c7: aa:41:3f:4b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUIEl5IEgoNZk6SKiSF8x0lwDF/qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDMxMzFaFw0yNjEyMDIwMDM2MzFaMDMxMTAvBgNV BAMTKEYyNTI4MEE0OTEyQkZGNjJEMkI5QkY4QTA2Mjk2NTlGOUVCMDRCQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJCfg+dUVnv1PSHowCltC3p9X9 059s8Qs8a8hJJNwW2JLj1tuLBiZ5MOJbUVOnndLosVi+0WAa3Zod3t9uDX4lurAQ MKj2nlmKUpkdCzPtGTtGnCL4J+JJtpVqlVkkNTn6XweF9VK4gPtpNsyyLkf7s1qK v4mFNeaeYIlYy/tYjziyNvbEjoPaU26PN+YSEE4OEn/qvymgrsfwDcejUJBVS/As F3g8bl8U2lYCF98fSN+oLTYz3yV8m4I+gVACGPpgYalLx5ELQnhJ/vsQvd5Q4ewu UTDPM3xf7xV6OUjtSnhAT5zK1DFleEh0oUH4ZD0rw9HDb/YXcTfArp3MSBdNAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU8lKApJEr/2LSub+KBilln56wS8AwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz NDMzMmUzMjMwMzIyZTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzgz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCj8pcMA0GCSqGSIb3DQEBCwUAA4IBAQBunuBmR65Ph228 lRGNKA8gRyBsy/0pwvkkLKIJvQFD7gGrTDxOunGyxIZX5I4XmUjicCrk8S/rIJ52 0TandryZV3l+OzcB+aHd/U1saGTwa/096ULBVcMxqv/TqdrcsE/9sckOYN6v2BHr CVuWjyjG0uSprITChPgK/NZvPxXS4a6vqtyKhKgA24UIDgZ1zSXEGRTXTS2dxzMu B9tUzqqCTgj4z+ybz+hSPrbn2uMUsfFBWnua7jp2L2JceZGThgt1t+aGVOJsvwIb mOTWK3qgaEzUYaIAs+a+k/9F+KVmNY3hmDhPSjtWSj3zlIN6lHq2AdITurzsTnGo GMeqQT9L -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:19 2025 by rpki-client