This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa File: 3230302e3138392e34302e302f32332d3234203d3e203131343331.roa (raw, json) Hash identifier: ka/R1Pr5qqAvJ/quZK7jtzXmxBvAsfMVfusLTPnhFmo= Subject key identifier: 3D:9E:BA:6C:79:39:44:6C:1C:0D:9C:E8:30:04:8B:F9:BC:64:11:B9 Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Certificate serial: 28692A89A49B84953AEE54D5BE2080201C742DB6 Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa Signing time: Tue 09 Dec 2025 20:01:56 +0000 ROA not before: Tue 09 Dec 2025 19:56:56 +0000 ROA not after: Tue 08 Dec 2026 20:01:56 +0000 asID: 11431 IP address blocks: 200.189.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:69:2a:89:a4:9b:84:95:3a:ee:54:d5:be:20:80:20:1c:74:2d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Validity Not Before: Dec 9 19:56:56 2025 GMT Not After : Dec 8 20:01:56 2026 GMT Subject: CN=3D9EBA6C7939446C1C0D9CE830048BF9BC6411B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:a9:fa:8c:0a:a1:7e:12:c3:6e:9a:28:0a: 52:aa:9a:bb:5d:fd:07:48:1d:64:46:5b:2f:30:96: 4c:34:9b:97:ba:05:00:e8:a9:e9:7f:56:e7:b2:a1: 43:9f:4d:b1:3f:84:c9:2f:16:ea:6c:1e:55:0c:da: e8:db:8a:59:c6:b2:73:bd:07:bd:fa:71:9b:cb:74: 19:6a:d6:a2:61:94:70:91:22:12:8e:58:6e:3f:09: 4a:2b:63:be:9b:5c:b6:7c:dc:97:0d:d5:00:a6:f6: d0:49:cb:37:da:23:c5:4b:12:1c:8b:55:8d:f3:fc: cb:3c:b5:9a:3c:78:c3:99:18:4b:c2:d7:1f:36:02: ab:f2:78:67:2c:9c:33:1c:0b:0e:a6:a6:5a:d2:88: e8:28:96:4b:61:79:b6:71:d9:38:1d:6d:5b:8d:cd: 02:c9:da:9f:46:44:f6:53:a8:2a:3f:a3:c0:c1:e4: c2:c0:c3:2b:66:27:00:71:b2:69:22:3d:f2:30:de: 2b:ab:9a:ba:a7:68:62:82:70:ad:50:59:4e:ae:6b: 50:40:a4:48:b9:cc:c7:ce:bf:8d:1b:0a:ff:e8:bb: d5:a1:e5:ba:b0:1e:08:4a:68:9d:c7:21:8a:55:3f: 82:a6:b2:9d:5b:05:47:76:61:c8:4a:84:1e:22:9a: 34:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:BA:6C:79:39:44:6C:1C:0D:9C:E8:30:04:8B:F9:BC:64:11:B9 X509v3 Authority Key Identifier: keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.189.40.0/23 Signature Algorithm: sha256WithRSAEncryption 47:98:ca:fe:ee:35:43:19:c9:b7:23:3e:c9:f5:37:ed:d9:50: 58:c8:1a:02:18:82:2f:b3:ae:49:dc:24:c1:0e:ed:77:b1:b4: e4:21:0d:9c:e8:d6:8f:d2:8f:55:60:8d:8d:0b:d5:10:ef:58: 54:00:2c:58:f0:15:32:56:8f:19:0a:60:7c:c7:71:20:03:92: f5:58:e0:5d:61:ca:86:fa:85:5e:cb:d6:95:42:af:28:8e:f8: f9:f5:10:53:60:f3:73:60:24:b1:26:bd:fa:30:77:6f:a0:5f: f1:89:93:5e:77:9e:ef:2f:4d:c4:63:5a:ac:6c:5f:f5:29:e8: 69:7e:0d:81:81:24:f3:01:d2:9a:cc:f8:62:41:41:f1:b0:a2: 46:c5:cf:3e:94:ab:ba:e0:9f:ff:3c:fb:5e:7a:28:65:1e:56: 3e:a1:61:52:2b:7b:49:ee:03:b9:80:47:62:8c:7e:a9:dd:f1: 89:02:db:31:07:11:1d:1e:d2:36:f1:0f:6b:16:4d:5d:91:90: e3:cd:db:6b:48:59:e2:f8:0d:40:32:a1:34:c3:f0:4b:74:dc: c3:96:c0:d3:d8:41:d1:03:a0:0c:b1:b1:dc:45:e2:11:e9:19: 63:ab:c0:f4:f6:b7:87:8b:5a:58:4d:e2:99:24:72:4d:46:da: 32:07:f3:45 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUKGkqiaSbhJU67lTVviCAIBx0LbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTZaFw0yNjEyMDgyMDAxNTZaMDMxMTAvBgNV BAMTKDNEOUVCQTZDNzkzOTQ0NkMxQzBEOUNFODMwMDQ4QkY5QkM2NDExQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUHKn6jAqhfhLDbpooClKqmrtd /QdIHWRGWy8wlkw0m5e6BQDoqel/VueyoUOfTbE/hMkvFupsHlUM2ujbilnGsnO9 B736cZvLdBlq1qJhlHCRIhKOWG4/CUorY76bXLZ83JcN1QCm9tBJyzfaI8VLEhyL VY3z/Ms8tZo8eMOZGEvC1x82AqvyeGcsnDMcCw6mplrSiOgolkthebZx2TgdbVuN zQLJ2p9GRPZTqCo/o8DB5MLAwytmJwBxsmkiPfIw3iurmrqnaGKCcK1QWU6ua1BA pEi5zMfOv40bCv/ou9Wh5bqwHghKaJ3HIYpVP4Kmsp1bBUd2YchKhB4imjTFAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUPZ66bHk5RGwcDZzoMASL+bxkEbkwHwYDVR0j BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2 OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv MzIzMDMwMmUzMTM4MzkyZTM0MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMx MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQByL0oMA0GCSqGSIb3DQEBCwUAA4IBAQBHmMr+7jVD Gcm3Iz7J9Tft2VBYyBoCGIIvs65J3CTBDu13sbTkIQ2c6NaP0o9VYI2NC9UQ71hU ACxY8BUyVo8ZCmB8x3EgA5L1WOBdYcqG+oVey9aVQq8ojvj59RBTYPNzYCSxJr36 MHdvoF/xiZNed57vL03EY1qsbF/1Kehpfg2BgSTzAdKazPhiQUHxsKJGxc8+lKu6 4J//PPteeihlHlY+oWFSK3tJ7gO5gEdijH6p3fGJAtsxBxEdHtI28Q9rFk1dkZDj zdtrSFni+A1AMqE0w/BLdNzDlsDT2EHRA6AMsbHcReIR6Rljq8D09reHi1pYTeKZ JHJNRtoyB/NF -----END CERTIFICATE-----Generated at Sat Dec 20 17:18:12 2025 by rpki-client