This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa File: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (raw, json) Hash identifier: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU= Subject key identifier: 44:06:36:BE:2A:20:7C:D4:61:8A:A4:5D:66:12:3F:BE:FC:95:D4:25 Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Certificate serial: 525366F966C6EF0D097742D3952F6514D88283B1 Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa Signing time: Wed 10 Dec 2025 20:15:51 +0000 ROA not before: Wed 10 Dec 2025 20:10:51 +0000 ROA not after: Wed 09 Dec 2026 20:15:51 +0000 asID: 270483 IP address blocks: 200.73.216.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 16:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:53:66:f9:66:c6:ef:0d:09:77:42:d3:95:2f:65:14:d8:82:83:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Validity Not Before: Dec 10 20:10:51 2025 GMT Not After : Dec 9 20:15:51 2026 GMT Subject: CN=440636BE2A207CD4618AA45D66123FBEFC95D425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:42:4f:1a:4e:46:8f:98:20:66:18:a7:af: 69:05:13:e9:7f:67:ee:b8:4c:b4:7f:d4:0e:fd:3d: d2:b0:bc:07:85:ec:9d:8b:79:c1:20:54:d4:2e:1f: 43:db:eb:d6:8d:5c:cc:2b:a4:6b:da:49:45:f8:1b: 4e:f7:86:b2:c0:34:7b:0d:0d:d5:c7:49:52:4e:d7: ae:c2:4f:da:e3:02:e8:3c:a7:a5:c1:1b:43:c0:4c: f9:13:52:2a:38:59:7e:92:e4:2b:86:51:1b:bf:d3: 3e:54:f3:e7:68:e7:71:f0:f6:7b:74:60:01:91:09: a4:f7:0d:82:6f:61:3b:a1:5e:0a:72:10:5c:cc:c0: 60:47:ac:19:d1:ee:ef:20:c6:56:5b:7d:6b:26:c7: a2:6d:54:c7:6a:1a:de:83:7a:bb:a4:05:b8:80:a3: a4:8a:3e:0a:13:fd:27:e6:06:d0:1f:b3:ff:f2:27: 7c:80:2f:17:27:7b:d9:0d:24:7b:c0:e7:84:21:2e: 21:fe:4d:aa:cb:8c:a5:40:ab:d5:4c:cb:ea:1b:2c: 5d:fc:c7:37:7b:20:ba:99:d8:ac:2f:6f:2f:45:4b: d9:d2:c5:9e:9e:da:e9:79:c5:52:89:32:e8:68:7e: 3d:af:23:01:6f:15:d3:29:0e:fa:39:aa:7f:c5:08: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:06:36:BE:2A:20:7C:D4:61:8A:A4:5D:66:12:3F:BE:FC:95:D4:25 X509v3 Authority Key Identifier: keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.73.216.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:a1:0f:3d:49:20:fb:bd:58:dd:a5:86:d5:36:a6:80:ad:69: 49:42:4f:26:a4:01:c5:c7:a9:88:17:54:d5:71:33:17:b4:0b: de:f3:b1:46:26:82:a7:fa:e5:df:50:54:19:19:92:2f:0d:ed: 60:ec:1d:7b:32:74:d8:e7:54:a0:bd:1f:ae:07:e4:43:e8:38: 90:37:3c:0e:72:68:9f:f6:13:a4:4d:5f:02:f4:75:8b:f0:7a: 97:bc:fd:fe:19:8e:db:75:3a:7e:d0:b0:59:8e:56:ee:5b:86: 05:4c:af:6b:a5:61:2c:1f:17:db:01:08:e4:1a:ce:43:f9:df: 50:d8:59:32:38:26:07:7a:0c:e9:fa:f8:28:aa:f8:9a:49:95: 46:a7:f9:ce:c7:ab:43:3d:8f:f5:3a:cd:e3:54:79:f6:b5:fc: 7d:c8:03:7d:a4:21:81:42:7c:77:6c:66:63:5b:39:ce:74:b4: de:12:af:76:04:90:01:88:72:60:42:93:99:74:b9:f6:ef:61: 72:e1:f7:b5:5d:7b:39:16:2a:6e:5e:81:3f:3d:01:d6:68:d5: 9d:b9:07:fc:16:e4:2a:8d:cf:cb:93:b9:64:59:31:20:81:13: 52:4f:c7:e4:68:1a:a5:12:7c:0d:c9:9a:09:20:be:81:70:f5: fd:af:d8:f6 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUUlNm+WbG7w0Jd0LTlS9lFNiCg7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGODgzOTVFOTk3OUVGRkMwMzM1MTMwN0Q4Q0QwRTU0 NTU0QkJEQjAeFw0yNTEyMTAyMDEwNTFaFw0yNjEyMDkyMDE1NTFaMDMxMTAvBgNV BAMTKDQ0MDYzNkJFMkEyMDdDRDQ2MThBQTQ1RDY2MTIzRkJFRkM5NUQ0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvEJPGk5Gj5ggZhinr2kFE+l/ Z+64TLR/1A79PdKwvAeF7J2LecEgVNQuH0Pb69aNXMwrpGvaSUX4G073hrLANHsN DdXHSVJO167CT9rjAug8p6XBG0PATPkTUio4WX6S5CuGURu/0z5U8+do53Hw9nt0 YAGRCaT3DYJvYTuhXgpyEFzMwGBHrBnR7u8gxlZbfWsmx6JtVMdqGt6DerukBbiA o6SKPgoT/SfmBtAfs//yJ3yALxcne9kNJHvA54QhLiH+TarLjKVAq9VMy+obLF38 xzd7ILqZ2Kwvby9FS9nSxZ6e2ul5xVKJMuhofj2vIwFvFdMpDvo5qn/FCE7RAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQURAY2viogfNRhiqRdZhI/vvyV1CUwHwYDVR0j BBgwFoAUyviDlemXnv/AM1EwfYzQ5UVUu9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0 OTgvMC9DQUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjg4Mzk1RTk5NzlFRkZD MDMzNTEzMDdEOENEMEU1NDU1NEJCREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JXb1BVMUhoWHVFblA1WjZEMktZVTFuelBvS05kc3lUdmRqTWNoQTVWdDk4LzAv MzIzMDMwMmUzNzMzMmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3 MzAzNDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALISdgwDQYJKoZIhvcNAQELBQADggEBAFqhDz1J IPu9WN2lhtU2poCtaUlCTyakAcXHqYgXVNVxMxe0C97zsUYmgqf65d9QVBkZki8N 7WDsHXsydNjnVKC9H64H5EPoOJA3PA5yaJ/2E6RNXwL0dYvwepe8/f4Zjtt1On7Q sFmOVu5bhgVMr2ulYSwfF9sBCOQazkP531DYWTI4Jgd6DOn6+Ciq+JpJlUan+c7H q0M9j/U6zeNUefa1/H3IA32kIYFCfHdsZmNbOc50tN4Sr3YEkAGIcmBCk5l0ufbv YXLh97VdezkWKm5egT89AdZo1Z25B/wW5CqNz8uTuWRZMSCBE1JPx+RoGqUSfA3J mgkgvoFw9f2v2PY= -----END CERTIFICATE-----Generated at Fri Dec 19 19:54:42 2025 by rpki-client