This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa File: 3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa (raw, json) Hash identifier: w5KF48LzSxj1SU9RmOZxJF6shrtOckACqZh0qTPx15s= Subject key identifier: 81:0F:FB:6E:56:A1:26:1A:67:34:F4:02:FC:3E:11:64:A2:20:55:C4 Certificate issuer: /CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4 Certificate serial: 31FE1FE25A4617EC0CA0DFFEC35E4960B00B0F54 Authority key identifier: 99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa Signing time: Mon 15 Dec 2025 13:55:36 +0000 ROA not before: Mon 15 Dec 2025 13:50:36 +0000 ROA not after: Mon 14 Dec 2026 13:55:36 +0000 asID: 265085 IP address blocks: 170.233.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 23:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fe:1f:e2:5a:46:17:ec:0c:a0:df:fe:c3:5e:49:60:b0:0b:0f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4 Validity Not Before: Dec 15 13:50:36 2025 GMT Not After : Dec 14 13:55:36 2026 GMT Subject: CN=810FFB6E56A1261A6734F402FC3E1164A22055C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:29:62:31:66:a7:3f:49:eb:9e:87:16:11: 4d:48:64:18:8c:75:90:f3:ad:ec:ab:4b:24:d0:f3: cc:13:87:ef:a3:26:1d:79:c6:ad:e3:cd:e1:e3:1e: 7a:2b:b3:c0:f3:0b:98:b6:4e:e8:47:36:8f:c6:a5: b8:a8:ff:c8:5d:0c:bb:a7:ad:06:41:40:7e:ce:80: 2f:54:aa:63:2c:0c:38:07:cb:dc:d9:58:cd:58:10: 42:1f:f8:5b:c2:35:28:89:e3:f8:cb:42:a3:21:09: 67:32:54:99:c6:63:08:f7:74:43:b2:1f:ba:b7:aa: 7d:6a:22:c7:ad:a3:29:ab:96:1b:e6:b1:5a:a9:91: f1:ad:55:19:f6:57:e4:69:15:3d:12:16:15:f1:23: e6:6d:cf:69:12:ed:ae:77:ec:52:4e:70:58:62:5f: 8a:b1:59:54:78:13:a3:10:39:a8:0c:13:76:27:2c: fe:5c:cc:4a:6e:b6:87:77:94:be:4c:f1:86:04:d0: 0e:3c:5b:04:62:34:e3:6b:2c:b5:c2:10:94:b1:06: 4c:b3:30:14:1f:7d:b1:9f:d9:1c:47:f7:19:ab:70: d9:ea:18:58:ed:fa:38:55:5e:6e:c8:71:ae:a3:92: 1c:19:82:60:2c:44:84:ba:0e:e7:28:49:b8:a6:80: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0F:FB:6E:56:A1:26:1A:67:34:F4:02:FC:3E:11:64:A2:20:55:C4 X509v3 Authority Key Identifier: keyid:99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.24.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:27:18:23:87:6c:52:b6:df:be:9c:c1:30:95:da:c0:44:b3: 6a:e8:17:a7:d9:e7:c3:37:70:ac:7e:64:83:62:5f:22:6d:39: d9:9a:29:85:be:fd:a1:21:a6:8b:1a:bb:9b:88:01:14:e8:6a: e8:ec:82:57:3a:ac:bf:bf:89:0e:82:6d:d5:c3:27:99:8c:d2: 1f:d2:d9:6f:d3:be:db:2e:f5:45:ce:b7:77:b8:7f:4c:0f:92: 93:5e:a7:9a:7f:0b:86:64:67:58:be:a5:ae:ee:a4:a8:62:04: 10:ab:94:9c:5e:36:a7:87:2a:89:4f:13:c5:7e:2b:99:1e:39: 42:06:b9:aa:f9:2d:11:e6:79:2b:0e:75:29:56:ba:21:dc:36: 97:b1:c1:13:1a:24:72:ad:d1:f1:18:b7:44:f4:07:5f:9c:3a: 67:19:37:9b:d7:40:ea:42:35:73:11:6f:c8:0a:50:bd:af:73: 72:bc:c7:af:5c:1d:3f:a3:f8:2f:d3:6d:e9:78:54:dc:cc:48: 82:07:4d:60:9d:3f:81:15:1d:b5:c3:f1:bb:e5:45:14:3c:5f: cf:18:07:13:b1:22:2b:2e:fe:c3:48:63:cb:9a:bd:21:62:8d: 5d:f1:5b:c2:27:af:34:9f:dd:a5:2e:bf:db:a6:c9:0b:1b:0f: 8b:10:7a:29 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUMf4f4lpGF+wMoN/+w15JYLALD1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0MjhDNTM3QjBFRTlGNjhGRkNBMTVEQUIxRjlERkMy NjVEQThENDAeFw0yNTEyMTUxMzUwMzZaFw0yNjEyMTQxMzU1MzZaMDMxMTAvBgNV BAMTKDgxMEZGQjZFNTZBMTI2MUE2NzM0RjQwMkZDM0UxMTY0QTIyMDU1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXSliMWanP0nrnocWEU1IZBiM dZDzreyrSyTQ88wTh++jJh15xq3jzeHjHnors8DzC5i2TuhHNo/Gpbio/8hdDLun rQZBQH7OgC9UqmMsDDgHy9zZWM1YEEIf+FvCNSiJ4/jLQqMhCWcyVJnGYwj3dEOy H7q3qn1qIsetoymrlhvmsVqpkfGtVRn2V+RpFT0SFhXxI+Ztz2kS7a537FJOcFhi X4qxWVR4E6MQOagME3YnLP5czEputod3lL5M8YYE0A48WwRiNONrLLXCEJSxBkyz MBQffbGf2RxH9xmrcNnqGFjt+jhVXm7Ica6jkhwZgmAsRIS6DucoSbimgAkzAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUgQ/7blahJhpnNPQC/D4RZKIgVcQwHwYDVR0j BBgwFoAUmUKMU3sO6faP/KFdqx+d/CZdqNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXpr QlIvMC85OTQyOEM1MzdCMEVFOUY2OEZGQ0ExNURBQjFGOURGQzI2NURBOEQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NDI4QzUzN0IwRUU5RjY4 RkZDQTE1REFCMUY5REZDMjY1REE4RDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNKV3NYR3FBcFoyZEE0RlhNUU1NVU5TZENadjlKS21HZkNKY0hYdGV6a0JSLzAv MzEzNzMwMmUzMjMzMzMyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzUzMDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq6RgwDQYJKoZIhvcNAQELBQADggEBAF8nGCOH bFK2376cwTCV2sBEs2roF6fZ58M3cKx+ZINiXyJtOdmaKYW+/aEhposau5uIARTo aujsglc6rL+/iQ6CbdXDJ5mM0h/S2W/Tvtsu9UXOt3e4f0wPkpNep5p/C4ZkZ1i+ pa7upKhiBBCrlJxeNqeHKolPE8V+K5keOUIGuar5LRHmeSsOdSlWuiHcNpexwRMa JHKt0fEYt0T0B1+cOmcZN5vXQOpCNXMRb8gKUL2vc3K8x69cHT+j+C/Tbel4VNzM SIIHTWCdP4EVHbXD8bvlRRQ8X88YBxOxIisu/sNIY8uavSFijV3xW8InrzSf3aUu v9umyQsbD4sQeik= -----END CERTIFICATE-----Generated at Sun Dec 21 23:02:29 2025 by rpki-client