This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa File: 3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa (raw, json) Hash identifier: SvOqjsWRs1KHA6LaVZECacx5MBj5PY+9m1lkVSAOS28= Subject key identifier: 84:56:8F:93:35:0C:DD:5E:76:47:E1:F3:23:10:17:7B:A9:18:91:58 Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Certificate serial: 78D9491D886831E0F8ACA8D6B7203A5A40CE5508 Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa Signing time: Tue 09 Dec 2025 20:01:47 +0000 ROA not before: Tue 09 Dec 2025 19:56:47 +0000 ROA not after: Tue 08 Dec 2026 20:01:47 +0000 asID: 28345 IP address blocks: 200.219.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d9:49:1d:88:68:31:e0:f8:ac:a8:d6:b7:20:3a:5a:40:ce:55:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Validity Not Before: Dec 9 19:56:47 2025 GMT Not After : Dec 8 20:01:47 2026 GMT Subject: CN=84568F93350CDD5E7647E1F32310177BA9189158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ae:13:ee:6a:3d:8a:0e:46:ce:fe:a2:bb:bb: 13:2b:51:76:22:a2:84:ed:7b:23:e9:f9:fb:28:6e: e5:f9:88:12:cb:2f:5d:27:d8:d5:b1:b4:3f:dc:f4: 0d:24:af:1d:fa:d8:7d:79:34:ba:c1:0b:84:24:32: 48:43:3c:10:33:93:ff:d2:1a:11:22:f3:26:e2:c3: 53:a1:d0:e9:ff:3b:8d:7b:84:10:2e:e2:62:d6:a2: 46:15:99:df:e8:30:9b:9f:21:e1:87:bc:c5:5c:bb: f0:aa:18:b0:2b:8e:e3:fb:8f:35:f6:f2:14:8c:76: 88:ac:3a:c1:2f:d2:e1:3b:e6:39:55:e3:77:ed:9b: 33:1a:4d:b7:c0:a0:9c:4b:f2:a1:c2:ab:a8:8a:e6: 51:8f:ea:6d:35:df:5c:fb:91:7e:8c:83:d1:58:62: da:6f:ff:1d:a8:52:4b:00:bb:2e:62:88:0a:be:f2: 51:0d:cc:55:fa:a4:3f:f1:9a:4b:83:3f:a9:cd:4c: a1:ae:04:d4:35:3f:03:86:d9:4b:2c:ac:5e:a6:28: e5:62:74:24:b6:39:61:95:9d:de:d7:67:72:ee:4d: 0f:a3:9e:31:65:29:e7:e5:8f:28:12:7f:d7:0d:89: 7f:27:7c:85:3b:ab:04:4d:1f:68:91:48:d7:f3:1f: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:56:8F:93:35:0C:DD:5E:76:47:E1:F3:23:10:17:7B:A9:18:91:58 X509v3 Authority Key Identifier: keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.219.158.0/23 Signature Algorithm: sha256WithRSAEncryption 80:6c:88:1a:20:6c:72:4e:70:f7:10:83:fd:c2:a8:2b:5f:94: d7:03:5c:ed:d9:55:19:f5:5d:a2:d3:28:8b:97:d9:02:b4:4e: e0:d2:d1:63:ad:c9:86:5d:08:84:e5:82:92:e7:be:39:29:18: 00:8f:fb:b7:85:88:17:a2:75:53:06:c6:82:7c:80:b9:fe:c6: e1:d9:28:e7:55:cd:e3:c9:ae:93:15:c7:a5:8f:4f:76:06:33: 1b:15:49:6d:17:19:35:c8:ef:97:35:f3:c2:0b:9a:77:b6:ac: 39:ee:ef:5d:76:24:3b:a8:c8:fa:fd:9d:c1:50:76:0c:36:2e: ad:d3:9d:d5:83:ff:ab:0b:09:6d:45:dd:7d:a6:69:26:24:79: b0:78:88:89:75:90:e1:22:a6:57:4f:48:b4:65:6e:2a:47:bb: cd:a0:49:ec:6b:ec:1c:2f:71:fb:3b:51:6a:3d:92:1b:c2:4d: dd:64:22:d7:0b:ed:3c:72:77:66:9e:39:43:eb:96:24:29:0f: c5:7a:12:8e:bb:f2:d8:ab:27:1d:f2:48:aa:7b:d4:3a:9a:93: 8d:c5:eb:1c:e1:14:23:88:25:a4:a7:68:f0:b5:e8:35:1c:95: ae:b6:dd:3c:5c:66:43:df:f9:10:8c:91:f5:99:a5:f6:57:9b: 3d:41:16:29 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUeNlJHYhoMeD4rKjWtyA6WkDOVQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF NDRCRjFGMDAeFw0yNTEyMDkxOTU2NDdaFw0yNjEyMDgyMDAxNDdaMDMxMTAvBgNV BAMTKDg0NTY4RjkzMzUwQ0RENUU3NjQ3RTFGMzIzMTAxNzdCQTkxODkxNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvrhPuaj2KDkbO/qK7uxMrUXYi ooTteyPp+fsobuX5iBLLL10n2NWxtD/c9A0krx362H15NLrBC4QkMkhDPBAzk//S GhEi8ybiw1Oh0On/O417hBAu4mLWokYVmd/oMJufIeGHvMVcu/CqGLArjuP7jzX2 8hSMdoisOsEv0uE75jlV43ftmzMaTbfAoJxL8qHCq6iK5lGP6m0131z7kX6Mg9FY Ytpv/x2oUksAuy5iiAq+8lENzFX6pD/xmkuDP6nNTKGuBNQ1PwOG2UssrF6mKOVi dCS2OWGVnd7XZ3LuTQ+jnjFlKefljygSf9cNiX8nfIU7qwRNH2iRSNfzH7+dAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUhFaPkzUM3V52R+HzIxAXe6kYkVgwHwYDVR0j BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2 OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv MzIzMDMwMmUzMjMxMzkyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy MzgzMzM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHI254wDQYJKoZIhvcNAQELBQADggEBAIBsiBog bHJOcPcQg/3CqCtflNcDXO3ZVRn1XaLTKIuX2QK0TuDS0WOtyYZdCITlgpLnvjkp GACP+7eFiBeidVMGxoJ8gLn+xuHZKOdVzePJrpMVx6WPT3YGMxsVSW0XGTXI75c1 88ILmne2rDnu7112JDuoyPr9ncFQdgw2Lq3TndWD/6sLCW1F3X2maSYkebB4iIl1 kOEipldPSLRlbipHu82gSexr7Bwvcfs7UWo9khvCTd1kItcL7Txyd2aeOUPrliQp D8V6Eo678tirJx3ySKp71Dqak43F6xzhFCOIJaSnaPC16DUcla623TxcZkPf+RCM kfWZpfZXmz1BFik= -----END CERTIFICATE-----Generated at Sat Dec 20 17:19:16 2025 by rpki-client