This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa File: 3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa (raw, json) Hash identifier: 3CaEcwzx9Mn9p07c3UaRAdxVQJL2l1yNRPnD8zGtlf4= Subject key identifier: C9:1B:C7:C5:67:03:DD:65:C7:84:AD:F4:F7:94:99:C2:AD:ED:EB:78 Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Certificate serial: 73BDD1C91DCF3E11A3755F911BA4ABF1431078D4 Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa Signing time: Tue 09 Dec 2025 20:01:52 +0000 ROA not before: Tue 09 Dec 2025 19:56:52 +0000 ROA not after: Tue 08 Dec 2026 20:01:52 +0000 asID: 11431 IP address blocks: 200.219.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bd:d1:c9:1d:cf:3e:11:a3:75:5f:91:1b:a4:ab:f1:43:10:78:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Validity Not Before: Dec 9 19:56:52 2025 GMT Not After : Dec 8 20:01:52 2026 GMT Subject: CN=C91BC7C56703DD65C784ADF4F79499C2ADEDEB78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:71:4c:32:d7:e1:dd:4b:89:9f:f5:cb:8b: 9b:fe:4d:36:94:3a:3e:d6:ca:15:6f:e6:d6:9a:3f: f5:12:20:c8:a6:e6:de:e9:14:64:ae:4f:46:52:3b: 9e:1a:c2:d2:94:d0:42:6d:9e:fe:54:1e:47:d2:fc: ab:a2:4b:52:e8:7b:d7:3f:30:a3:97:08:7c:f0:70: be:a2:7c:41:d5:10:aa:10:2d:1a:c6:53:2e:66:8e: 70:3c:80:7c:98:a7:c6:62:be:87:7f:2b:d8:a5:0c: a8:1d:f6:f1:37:1a:cc:87:86:27:5b:cc:9b:76:a9: 2b:28:94:00:05:2e:7d:ab:04:e1:d4:35:3c:72:1a: e6:f4:41:50:0d:76:32:7f:be:ca:84:75:12:fc:85: ac:78:9b:26:02:17:06:61:34:47:9b:d9:c1:21:e7: 36:f4:9e:ce:4a:ed:fc:94:e0:04:aa:b2:83:8d:aa: 95:76:80:1e:1c:c6:35:b9:62:71:e3:93:5a:0b:f0: dc:af:21:20:a3:f2:d3:63:ec:6e:1a:be:35:26:8a: 22:b7:a7:a4:de:be:86:51:1c:4e:b5:43:71:b0:12: 2d:49:37:57:f6:f8:38:b8:2a:61:38:53:2b:a2:1c: 83:63:ad:9f:39:54:91:6d:6a:70:e4:e8:ad:63:e3: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1B:C7:C5:67:03:DD:65:C7:84:AD:F4:F7:94:99:C2:AD:ED:EB:78 X509v3 Authority Key Identifier: keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.219.158.0/23 Signature Algorithm: sha256WithRSAEncryption ad:46:29:52:30:47:11:0d:14:65:e8:cb:a5:5f:b5:dc:33:e3: b9:8e:4a:ac:da:4e:6f:79:af:fb:0a:81:fb:f7:f6:a9:c2:f6: 5e:99:b9:8b:c4:4e:9f:f5:8a:c4:e4:24:56:9a:92:a4:9c:b8: 65:0d:2e:7b:6f:1e:3b:cb:63:d5:cd:dd:3c:0e:f7:95:b9:5c: dc:5d:3e:d7:96:ec:1c:b7:be:a3:84:50:26:20:8a:ee:87:34: 6f:bc:7f:e6:3d:f3:67:d9:cf:24:3b:89:29:37:95:69:d3:4e: ae:aa:c2:36:0c:61:07:e4:ce:82:cb:75:3b:cc:ef:c2:08:b3: ee:da:e8:de:76:d4:ae:df:b3:3b:59:ae:05:99:b8:44:56:0c: 07:88:fb:1d:64:8e:fe:1b:b9:87:68:c4:42:6c:12:1b:4b:fd: 86:8b:a8:af:a5:eb:25:cf:e9:7f:2d:c0:a8:08:9a:23:23:ec: f4:75:2e:cf:f1:7e:38:b9:3e:bc:45:bc:76:66:0e:c4:1b:67: 5e:18:92:95:d3:5d:b2:bb:ce:17:27:b0:4d:12:ba:49:ed:32: cb:8d:8a:67:9d:62:d6:73:31:c8:ba:69:0c:08:d6:44:20:cb: cb:61:63:d6:ff:a0:0b:2e:8c:62:a7:59:0c:65:6c:d2:a1:dd: 02:e5:de:49 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUc73RyR3PPhGjdV+RG6Sr8UMQeNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTJaFw0yNjEyMDgyMDAxNTJaMDMxMTAvBgNV BAMTKEM5MUJDN0M1NjcwM0RENjVDNzg0QURGNEY3OTQ5OUMyQURFREVCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiHFMMtfh3UuJn/XLi5v+TTaU Oj7WyhVv5taaP/USIMim5t7pFGSuT0ZSO54awtKU0EJtnv5UHkfS/KuiS1Loe9c/ MKOXCHzwcL6ifEHVEKoQLRrGUy5mjnA8gHyYp8Zivod/K9ilDKgd9vE3GsyHhidb zJt2qSsolAAFLn2rBOHUNTxyGub0QVANdjJ/vsqEdRL8hax4myYCFwZhNEeb2cEh 5zb0ns5K7fyU4ASqsoONqpV2gB4cxjW5YnHjk1oL8NyvISCj8tNj7G4avjUmiiK3 p6TevoZRHE61Q3GwEi1JN1f2+Di4KmE4UyuiHINjrZ85VJFtanDk6K1j47NDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUyRvHxWcD3WXHhK3095SZwq3t63gwHwYDVR0j BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2 OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv MzIzMDMwMmUzMjMxMzkyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMx MzEzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHI254wDQYJKoZIhvcNAQELBQADggEBAK1GKVIw RxENFGXoy6Vftdwz47mOSqzaTm95r/sKgfv39qnC9l6ZuYvETp/1isTkJFaakqSc uGUNLntvHjvLY9XN3TwO95W5XNxdPteW7By3vqOEUCYgiu6HNG+8f+Y982fZzyQ7 iSk3lWnTTq6qwjYMYQfkzoLLdTvM78IIs+7a6N521K7fsztZrgWZuERWDAeI+x1k jv4buYdoxEJsEhtL/YaLqK+l6yXP6X8twKgImiMj7PR1Ls/xfji5PrxFvHZmDsQb Z14YkpXTXbK7zhcnsE0SukntMsuNimedYtZzMci6aQwI1kQgy8thY9b/oAsujGKn WQxlbNKh3QLl3kk= -----END CERTIFICATE-----Generated at Sat Dec 20 17:19:15 2025 by rpki-client