This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa File: 3230302e3231392e3133382e302f32332d3332203d3e2030.roa (raw, json) Hash identifier: RjXv1GPKSnItLHGKOR9lQo0qBQRQ0kfO3gjih+Dx9B4= Subject key identifier: F9:E1:6C:9D:F6:D8:EE:5B:B6:6F:88:2D:1F:E3:D9:B1:F0:D4:20:B6 Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Certificate serial: 7DFDAEB1F31AF2E4BD19937671254F18C1F148A5 Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa Signing time: Tue 09 Dec 2025 20:01:53 +0000 ROA not before: Tue 09 Dec 2025 19:56:53 +0000 ROA not after: Tue 08 Dec 2026 20:01:53 +0000 asID: 0 IP address blocks: 200.219.138.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fd:ae:b1:f3:1a:f2:e4:bd:19:93:76:71:25:4f:18:c1:f1:48:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Validity Not Before: Dec 9 19:56:53 2025 GMT Not After : Dec 8 20:01:53 2026 GMT Subject: CN=F9E16C9DF6D8EE5BB66F882D1FE3D9B1F0D420B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:08:fe:fc:a9:ed:65:f8:82:5c:49:db:a0: 15:da:3d:03:b6:5a:ed:af:25:43:32:2f:c1:4d:44: a7:db:0a:f0:63:78:2f:a5:6a:82:3d:32:a0:22:bb: 85:ec:2d:15:b1:02:ba:2b:55:e2:3b:77:2f:b0:e0: 64:4e:90:02:de:de:a7:b8:9e:f8:66:27:26:64:ef: 5a:15:15:b1:ba:db:bd:0a:1d:5f:a6:9a:df:1d:d4: c5:94:a4:4a:0e:da:10:ec:26:66:b3:23:09:73:47: 13:ae:39:73:35:9d:e3:8d:89:a8:25:a2:51:af:81: 19:e4:a4:6c:59:67:12:10:0d:d7:83:6f:67:54:44: 7d:64:5e:d6:12:bd:9d:10:5f:a0:7f:1b:1a:1c:8f: 18:e7:4b:0b:04:e5:4a:95:81:65:f9:78:74:fc:37: 4c:1d:9e:e3:c6:b6:18:79:cb:2e:1a:72:84:02:67: 09:e4:52:f9:ae:14:c1:b0:e4:aa:e5:6f:df:ce:98: 68:af:08:79:cf:f6:1b:47:9c:ea:ee:e0:d0:41:1c: 81:11:ef:47:4b:fd:9a:73:f2:db:84:f3:e9:9b:0b: 8c:8c:4e:5b:ac:29:c1:4e:cb:99:92:74:ea:32:c3: 64:6f:93:49:ba:71:04:3e:1c:7c:de:20:ef:ef:60: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E1:6C:9D:F6:D8:EE:5B:B6:6F:88:2D:1F:E3:D9:B1:F0:D4:20:B6 X509v3 Authority Key Identifier: keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.219.138.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:71:69:70:ae:ec:25:03:f0:66:15:78:ed:93:b7:07:3a:80: c6:31:21:ac:e6:f0:ac:f7:26:de:6a:e2:6b:00:eb:46:37:28: 35:17:93:24:67:63:07:60:aa:e3:2d:63:9a:77:c5:5c:4e:e6: ac:c9:ff:f1:bf:22:01:3b:a1:29:ab:6a:e8:b3:75:50:2c:17: 4a:88:ed:1f:4b:e8:8d:b4:81:ab:db:8c:8b:e1:34:b3:2c:e2: 3f:9b:a4:bd:f8:ad:b8:5e:07:59:56:38:2b:a2:0d:61:96:07: 94:91:a9:9c:2a:a8:fd:49:fc:1f:46:00:65:28:30:c5:97:73: 97:18:b7:4d:ee:36:a8:b8:e0:79:32:1f:b2:b9:b2:74:89:ec: 79:e5:85:fa:fb:87:a1:7f:01:d3:fa:14:e1:3d:0e:54:bb:a4: ea:4f:55:ad:db:b1:c6:db:a0:a6:f7:91:76:dc:b1:75:72:2e: 4f:03:b3:ca:7a:e6:eb:ba:2a:13:2c:53:48:13:b7:f3:86:8f: 20:78:6c:a8:71:f3:d8:8c:71:3a:b0:ba:85:2b:07:c7:61:70: 02:a9:16:3d:db:98:5d:ad:89:bc:a6:75:4b:59:92:7b:d6:85: 3f:46:ec:ec:b7:b4:14:1f:7f:e5:09:0b:30:1b:6a:40:a0:f1: 37:b4:02:40 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUff2usfMa8uS9GZN2cSVPGMHxSKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTNaFw0yNjEyMDgyMDAxNTNaMDMxMTAvBgNV BAMTKEY5RTE2QzlERjZEOEVFNUJCNjZGODgyRDFGRTNEOUIxRjBENDIwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlAj+/KntZfiCXEnboBXaPQO2 Wu2vJUMyL8FNRKfbCvBjeC+laoI9MqAiu4XsLRWxArorVeI7dy+w4GROkALe3qe4 nvhmJyZk71oVFbG6270KHV+mmt8d1MWUpEoO2hDsJmazIwlzRxOuOXM1neONiagl olGvgRnkpGxZZxIQDdeDb2dURH1kXtYSvZ0QX6B/GxocjxjnSwsE5UqVgWX5eHT8 N0wdnuPGthh5yy4acoQCZwnkUvmuFMGw5Krlb9/OmGivCHnP9htHnOru4NBBHIER 70dL/Zpz8tuE8+mbC4yMTlusKcFOy5mSdOoyw2Rvk0m6cQQ+HHzeIO/vYD8FAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU+eFsnfbY7lu2b4gtH+PZsfDUILYwHwYDVR0j BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2 OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv MzIzMDMwMmUzMjMxMzkyZTMxMzMzODJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMw LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQByNuKMA0GCSqGSIb3DQEBCwUAA4IBAQBNcWlwruwlA/BmFXjt k7cHOoDGMSGs5vCs9ybeauJrAOtGNyg1F5MkZ2MHYKrjLWOad8VcTuasyf/xvyIB O6Epq2ros3VQLBdKiO0fS+iNtIGr24yL4TSzLOI/m6S9+K24XgdZVjgrog1hlgeU kamcKqj9SfwfRgBlKDDFl3OXGLdN7jaouOB5Mh+yubJ0iex55YX6+4ehfwHT+hTh PQ5Uu6TqT1Wt27HG26Cm95F23LF1ci5PA7PKeubruioTLFNIE7fzho8geGyocfPY jHE6sLqFKwfHYXACqRY925hdrYm8pnVLWZJ71oU/Ruzst7QUH3/lCQswG2pAoPE3 tAJA -----END CERTIFICATE-----Generated at Sat Dec 20 17:19:02 2025 by rpki-client