This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa File: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (raw, json) Hash identifier: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw= Subject key identifier: 9F:FD:65:6C:95:DC:C7:66:9B:4E:06:10:97:6C:97:BC:D4:54:5F:D3 Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 26154FF681CFA560C3D3965067A5CB40CCC9DC7A Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa Signing time: Fri 21 Nov 2025 15:20:55 +0000 ROA not before: Fri 21 Nov 2025 15:15:55 +0000 ROA not after: Fri 20 Nov 2026 15:20:55 +0000 asID: 53158 IP address blocks: 200.229.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:15:4f:f6:81:cf:a5:60:c3:d3:96:50:67:a5:cb:40:cc:c9:dc:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Nov 21 15:15:55 2025 GMT Not After : Nov 20 15:20:55 2026 GMT Subject: CN=9FFD656C95DCC7669B4E0610976C97BCD4545FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:09:0a:72:6b:c4:f4:d7:12:f0:53:92:fe: 58:64:ae:a8:79:25:a5:a4:65:86:7e:31:f2:21:6b: 13:b3:b8:b0:a9:ef:6c:eb:d6:d9:8b:c6:d9:7e:75: 4d:62:95:b6:ec:32:c6:b5:77:2a:44:44:9e:1b:a2: 62:2c:68:1b:74:fc:a2:47:5b:d1:42:8e:69:03:2e: 67:d9:ae:a9:6c:72:6c:cc:7a:48:85:32:62:c9:4d: f0:69:42:91:9c:39:2c:df:5e:ba:d0:f4:d7:d6:49: 82:a8:65:6c:57:f7:59:f0:85:9f:6b:70:a6:9f:59: 92:be:29:88:ed:bd:84:03:fc:75:90:89:0b:5e:85: 01:9a:41:17:d2:a1:81:7b:d9:00:7c:6c:e5:2c:e2: e1:dd:e4:d8:af:4b:2f:46:b3:47:ce:e6:65:53:bd: a4:54:59:74:cb:00:34:bc:12:b1:1b:ee:53:d0:0a: 50:68:f5:3f:31:4e:7e:c0:f6:45:f2:03:a8:e5:ab: 85:7f:0e:3f:a6:f4:7a:e4:4b:cd:ab:57:95:b3:cf: 9c:d8:9e:93:41:ca:8d:b8:23:15:80:4c:54:c7:37: 7a:bc:fe:73:4c:33:8d:8e:71:c8:b3:5a:21:54:59: 4a:82:25:49:e0:58:08:21:51:8f:91:71:d0:b5:42: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FD:65:6C:95:DC:C7:66:9B:4E:06:10:97:6C:97:BC:D4:54:5F:D3 X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.88.0/22 Signature Algorithm: sha256WithRSAEncryption bd:2e:1f:74:be:05:71:88:d5:21:30:06:bd:b1:c3:61:78:92: 64:38:69:0a:17:85:a7:5c:7d:00:41:ca:d3:46:f6:85:7a:b0: 30:c3:9b:87:f7:72:40:2c:a0:81:f6:69:61:11:b0:28:97:50: 5f:ea:17:2f:4c:3f:2b:c7:7d:1a:38:60:43:37:d6:b1:3d:8c: 3d:5e:36:15:44:ea:4c:df:cb:d6:a1:4a:7f:2b:9a:d0:32:27: 63:08:71:c7:2e:b1:c9:df:64:1c:a5:7e:33:b6:46:da:ba:28: 43:70:18:a1:b9:52:54:11:cf:6b:94:19:9c:50:6d:38:71:15: d2:e5:bc:ff:db:60:80:b9:19:50:4f:f8:c6:9c:94:80:fd:dc: 0c:8d:94:c6:68:fb:9d:78:38:16:47:9d:a7:5c:c8:10:6b:e8: 2b:9a:b4:df:03:d9:ca:4a:e8:c3:a2:37:5f:fb:e8:ac:d6:31: 7c:6f:29:8e:e3:e1:3d:90:1c:86:9a:55:03:05:9e:5e:b7:e0: 27:b1:ce:c4:bc:f8:0e:98:31:e5:03:97:74:96:fe:1e:2e:84: fa:d5:bd:e5:4d:73:33:a6:ad:dd:6d:3c:18:aa:a9:ce:cd:31: 0c:2b:55:19:01:25:c0:45:72:b1:bb:1b:05:f5:04:ad:0b:f5: 85:75:15:d5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUJhVP9oHPpWDD05ZQZ6XLQMzJ3HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNTExMjExNTE1NTVaFw0yNjExMjAxNTIwNTVaMDMxMTAvBgNV BAMTKDlGRkQ2NTZDOTVEQ0M3NjY5QjRFMDYxMDk3NkM5N0JDRDQ1NDVGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKgkKcmvE9NcS8FOS/lhkrqh5 JaWkZYZ+MfIhaxOzuLCp72zr1tmLxtl+dU1ilbbsMsa1dypERJ4bomIsaBt0/KJH W9FCjmkDLmfZrqlscmzMekiFMmLJTfBpQpGcOSzfXrrQ9NfWSYKoZWxX91nwhZ9r cKafWZK+KYjtvYQD/HWQiQtehQGaQRfSoYF72QB8bOUs4uHd5NivSy9Gs0fO5mVT vaRUWXTLADS8ErEb7lPQClBo9T8xTn7A9kXyA6jlq4V/Dj+m9HrkS82rV5Wzz5zY npNByo24IxWATFTHN3q8/nNMM42OccizWiFUWUqCJUngWAghUY+RcdC1QneLAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUn/1lbJXcx2abTgYQl2yXvNRUX9MwHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzIz MDMwMmUzMjMyMzkyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMzMzEz NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCyOVYMA0GCSqGSIb3DQEBCwUAA4IBAQC9Lh90vgVxiNUh MAa9scNheJJkOGkKF4WnXH0AQcrTRvaFerAww5uH93JALKCB9mlhEbAol1Bf6hcv TD8rx30aOGBDN9axPYw9XjYVROpM38vWoUp/K5rQMidjCHHHLrHJ32QcpX4ztkba uihDcBihuVJUEc9rlBmcUG04cRXS5bz/22CAuRlQT/jGnJSA/dwMjZTGaPudeDgW R52nXMgQa+grmrTfA9nKSujDojdf++is1jF8bymO4+E9kByGmlUDBZ5et+Ansc7E vPgOmDHlA5d0lv4eLoT61b3lTXMzpq3dbTwYqqnOzTEMK1UZASXARXKxuxsF9QSt C/WFdRXV -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:09 2025 by rpki-client