This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa File: 3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa (raw, json) Hash identifier: 1uKNGFO+nFpZV3xAyWA9p+WPVzI3BFGlMOFuFuVgYy0= Subject key identifier: 0E:08:A4:28:3D:B9:02:AE:AD:18:63:02:2F:63:F4:75:F5:B9:49:45 Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Certificate serial: 515BA6B44F44A9591EFA18DC1D0E476B347F6A0F Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa Signing time: Tue 09 Dec 2025 20:01:50 +0000 ROA not before: Tue 09 Dec 2025 19:56:50 +0000 ROA not after: Tue 08 Dec 2026 20:01:50 +0000 asID: 11431 IP address blocks: 200.229.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5b:a6:b4:4f:44:a9:59:1e:fa:18:dc:1d:0e:47:6b:34:7f:6a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Validity Not Before: Dec 9 19:56:50 2025 GMT Not After : Dec 8 20:01:50 2026 GMT Subject: CN=0E08A4283DB902AEAD1863022F63F475F5B94945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:d4:c1:86:95:47:42:65:f7:08:77:a9:83: 42:a3:49:6e:b4:bd:b8:df:dd:a6:f5:9d:37:47:95: ea:2f:62:f1:68:a6:f2:b9:6a:6d:6e:39:14:e8:46: 38:b2:53:17:1e:0e:dc:d8:15:15:ba:4b:ec:8c:5e: 33:bc:10:fc:ee:a3:53:61:b3:6a:a1:3e:b0:03:60: c6:80:06:9b:03:58:23:75:2c:c6:1a:63:04:d0:f0: ba:0b:57:d9:9d:21:7c:a8:f6:64:a8:14:5f:15:84: e2:d0:e9:e8:c8:66:da:93:d0:bd:28:73:92:6c:97: e6:9b:58:94:00:c3:44:9b:cf:84:51:c9:fe:fa:0e: 68:da:f9:17:8a:c0:69:87:10:42:d1:87:53:a4:78: f3:3f:53:20:21:3f:48:90:2d:3c:68:8c:99:05:4b: ad:c2:0e:b4:e7:14:80:0c:a3:b5:a9:51:0a:ae:71: 96:db:02:09:e3:bc:83:90:31:d1:8f:48:98:ae:39: 33:aa:40:56:31:df:d7:98:30:ed:05:ac:52:50:25: 0d:51:22:74:11:fb:d6:65:9b:f7:60:bc:9d:5c:7e: df:eb:d9:11:58:9d:94:6b:22:c3:14:84:69:1f:57: db:34:24:19:7f:8f:8d:31:69:63:7d:8d:e0:b7:ae: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:08:A4:28:3D:B9:02:AE:AD:18:63:02:2F:63:F4:75:F5:B9:49:45 X509v3 Authority Key Identifier: keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.248.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:a3:94:13:99:7e:9f:3c:33:52:62:10:93:22:ce:f7:b9:95: 99:6a:a1:50:71:1d:c1:e9:de:89:7e:34:9f:c2:17:ed:df:dd: d1:8f:6e:d4:69:8a:e3:2b:c1:ed:ec:5c:31:fe:fc:c4:4f:e5: 06:73:0e:96:18:a2:10:7a:1f:ed:a9:57:aa:46:65:be:86:99: 71:04:53:fc:8a:92:69:a4:ab:92:4f:4e:de:30:fe:40:51:db: 56:f0:98:12:18:9c:8c:d9:b8:0a:31:f1:fc:ff:a2:74:fd:d4: ae:a2:fb:73:d2:12:7f:b4:70:bd:59:16:6c:a5:80:f6:9a:c6: 57:f8:9b:e1:f9:c0:63:46:e7:d5:f6:21:28:3a:ed:da:fb:fc: 2e:9c:c1:2b:e5:53:57:ac:ce:87:6a:0b:a4:1e:15:b5:83:ea: 55:f8:cb:e5:94:54:5d:f9:70:32:c7:46:a5:82:cb:59:ad:ac: f5:6f:e4:95:e0:36:0a:0f:c6:af:65:4b:64:c1:51:aa:bc:bb: 6a:c5:18:e4:dc:6e:e4:79:c4:b8:28:28:33:13:74:7b:1b:1b: 4e:69:34:ed:1a:51:ca:d6:02:6a:1f:cf:1f:8d:0c:f1:3a:5d: 87:dd:f3:9a:81:df:b4:72:46:25:17:89:d6:ec:45:df:e6:5a: a4:5b:fc:ef -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUUVumtE9EqVke+hjcHQ5HazR/ag8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTBaFw0yNjEyMDgyMDAxNTBaMDMxMTAvBgNV BAMTKDBFMDhBNDI4M0RCOTAyQUVBRDE4NjMwMjJGNjNGNDc1RjVCOTQ5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdNTBhpVHQmX3CHepg0KjSW60 vbjf3ab1nTdHleovYvFopvK5am1uORToRjiyUxceDtzYFRW6S+yMXjO8EPzuo1Nh s2qhPrADYMaABpsDWCN1LMYaYwTQ8LoLV9mdIXyo9mSoFF8VhOLQ6ejIZtqT0L0o c5Jsl+abWJQAw0Sbz4RRyf76Dmja+ReKwGmHEELRh1OkePM/UyAhP0iQLTxojJkF S63CDrTnFIAMo7WpUQqucZbbAgnjvIOQMdGPSJiuOTOqQFYx39eYMO0FrFJQJQ1R InQR+9Zlm/dgvJ1cft/r2RFYnZRrIsMUhGkfV9s0JBl/j40xaWN9jeC3rmoRAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUDgikKD25Aq6tGGMCL2P0dfW5SUUwHwYDVR0j BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2 OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv MzIzMDMwMmUzMjMyMzkyZTMyMzQzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMx MzEzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHI5fgwDQYJKoZIhvcNAQELBQADggEBAC2jlBOZ fp88M1JiEJMizve5lZlqoVBxHcHp3ol+NJ/CF+3f3dGPbtRpiuMrwe3sXDH+/MRP 5QZzDpYYohB6H+2pV6pGZb6GmXEEU/yKkmmkq5JPTt4w/kBR21bwmBIYnIzZuAox 8fz/onT91K6i+3PSEn+0cL1ZFmylgPaaxlf4m+H5wGNG59X2ISg67dr7/C6cwSvl U1eszodqC6QeFbWD6lX4y+WUVF35cDLHRqWCy1mtrPVv5JXgNgoPxq9lS2TBUaq8 u2rFGOTcbuR5xLgoKDMTdHsbG05pNO0aUcrWAmofzx+NDPE6XYfd85qB37RyRiUX idbsRd/mWqRb/O8= -----END CERTIFICATE-----Generated at Sat Dec 20 17:19:15 2025 by rpki-client