This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa File: 3230302e35332e36372e302f32342d3234203d3e20323731353034.roa (raw, json) Hash identifier: DTaZ/PULkwfvy6VGLxYwPcKLwoGwG7hcXsKaXiZCaxA= Subject key identifier: E1:95:26:00:B8:F8:08:67:C6:B1:3B:27:E8:0C:5C:03:90:48:68:BB Certificate issuer: /CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C Certificate serial: 78FB1A5BD53B5265D8957AF7B73246C0A59CA62B Authority key identifier: DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa Signing time: Tue 16 Dec 2025 20:18:05 +0000 ROA not before: Tue 16 Dec 2025 20:13:05 +0000 ROA not after: Tue 15 Dec 2026 20:18:05 +0000 asID: 271504 IP address blocks: 200.53.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 09:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fb:1a:5b:d5:3b:52:65:d8:95:7a:f7:b7:32:46:c0:a5:9c:a6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C Validity Not Before: Dec 16 20:13:05 2025 GMT Not After : Dec 15 20:18:05 2026 GMT Subject: CN=E1952600B8F80867C6B13B27E80C5C03904868BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:86:f9:d3:ab:6d:ea:10:4e:88:eb:63:d1:be: 33:44:a5:86:9c:9b:ed:f1:5e:78:27:bf:f8:e3:8a: 8e:f1:f1:e0:1d:96:dc:c1:37:9b:ac:b7:5d:8d:a4: f6:6a:ca:41:7a:b6:7d:ac:a9:09:95:14:43:a1:f6: e7:22:2e:15:fd:b4:fb:c5:c9:d5:2d:3b:df:7a:16: 78:a4:bc:aa:aa:ed:a5:76:89:40:1f:8a:d5:09:6f: 0f:98:4d:e2:ca:e7:b2:5d:b3:8e:50:a6:06:5d:e3: c8:5d:a0:c0:a0:2f:2e:01:55:7f:1c:56:2d:f3:4a: 0b:a5:bc:26:9c:ed:fd:37:db:c0:33:15:96:58:1b: dd:17:ef:c8:b0:c3:ef:29:df:eb:d2:c1:ab:47:93: 12:2e:7f:1d:1e:2c:98:19:84:df:1f:e5:4b:99:e6: de:79:07:48:8d:fe:f9:0b:59:1b:60:2d:7c:e3:cb: 49:53:e7:4b:75:e8:43:9c:53:73:41:cd:e4:2a:af: 60:f9:2b:16:73:54:c2:ab:7c:9a:dc:c7:25:2f:25: ac:64:ca:42:2e:47:d1:9c:e6:bd:96:13:42:f7:d3: 9a:7e:37:bc:0c:36:c1:bf:24:d1:a9:86:df:2b:5c: 91:41:03:4f:b8:df:05:60:84:73:f8:e2:1e:af:fc: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:95:26:00:B8:F8:08:67:C6:B1:3B:27:E8:0C:5C:03:90:48:68:BB X509v3 Authority Key Identifier: keyid:DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.53.67.0/24 Signature Algorithm: sha256WithRSAEncryption 84:8b:84:d3:b9:a2:b4:a0:3f:56:48:82:88:bb:35:19:ac:29: a7:94:74:6b:c4:6c:2d:3d:14:fb:b0:dc:35:65:c9:df:03:1a: af:ce:f4:3f:8f:15:d0:3f:b7:8c:d7:c6:c6:c2:33:68:eb:ed: 92:e5:0c:5e:d6:66:63:13:fd:90:91:99:c3:d0:1b:48:b5:d0: f0:2e:9a:ca:36:36:42:2b:6c:f7:3b:d9:e2:b5:a8:af:6f:68: 8a:b6:f0:19:59:7a:c6:2f:f7:20:13:90:e3:81:30:ce:fb:c3: 50:ea:b2:ef:1e:fa:04:c7:26:ba:fe:d1:4e:2b:e3:27:ea:e6: fe:f3:6d:11:01:4b:83:55:3c:c1:3c:39:a3:9e:0b:76:73:de: 68:8a:7a:68:55:84:2f:bf:f6:1b:b5:52:f4:7f:1c:76:fc:c3: 49:ea:bc:64:65:73:e3:af:cd:98:42:04:7b:0a:54:49:e5:76: 02:ff:4e:de:d6:f3:aa:45:9d:b9:cf:0c:91:63:41:94:bd:a0: 6d:c1:1c:fb:51:4a:9d:5e:af:f4:85:73:01:f9:de:8b:cc:50: dd:c6:bc:6d:e1:83:00:1a:4e:f1:30:34:6a:80:7f:e5:85:b4: 43:0c:52:c2:78:7f:75:17:8d:16:19:bc:ee:c4:ba:f0:f6:ca: 61:bb:cf:a4 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUePsaW9U7UmXYlXr3tzJGwKWcpiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI0OUJGQTZBQzE0OTY1RDdEM0IxNDUzMjNFRkY2QTk5 QzNGRDA2QzAeFw0yNTEyMTYyMDEzMDVaFw0yNjEyMTUyMDE4MDVaMDMxMTAvBgNV BAMTKEUxOTUyNjAwQjhGODA4NjdDNkIxM0IyN0U4MEM1QzAzOTA0ODY4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzhvnTq23qEE6I62PRvjNEpYac m+3xXngnv/jjio7x8eAdltzBN5ust12NpPZqykF6tn2sqQmVFEOh9uciLhX9tPvF ydUtO996FnikvKqq7aV2iUAfitUJbw+YTeLK57Jds45QpgZd48hdoMCgLy4BVX8c Vi3zSgulvCac7f0328AzFZZYG90X78iww+8p3+vSwatHkxIufx0eLJgZhN8f5UuZ 5t55B0iN/vkLWRtgLXzjy0lT50t16EOcU3NBzeQqr2D5KxZzVMKrfJrcxyUvJaxk ykIuR9Gc5r2WE0L305p+N7wMNsG/JNGpht8rXJFBA0+43wVghHP44h6v/DCzAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU4ZUmALj4CGfGsTsn6AxcA5BIaLswHwYDVR0j BBgwFoAU20m/pqwUll19OxRTI+/2qZw/0GwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFdQNnd6N3hyZXNzb1NCY2dYS3FtUW9BV0ZmMmZyOEs2aFNrZjFRR3ZM OXovMC9EQjQ5QkZBNkFDMTQ5NjVEN0QzQjE0NTMyM0VGRjZBOTlDM0ZEMDZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNDlCRkE2QUMxNDk2NUQ3 RDNCMTQ1MzIzRUZGNkE5OUMzRkQwNkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RXUDZ3ejd4cmVzc29TQmNnWEtxbVFvQVdGZjJmcjhLNmhTa2YxUUd2TDl6LzAv MzIzMDMwMmUzNTMzMmUzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx MzUzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyDVDMA0GCSqGSIb3DQEBCwUAA4IBAQCEi4TTuaK0 oD9WSIKIuzUZrCmnlHRrxGwtPRT7sNw1ZcnfAxqvzvQ/jxXQP7eM18bGwjNo6+2S 5Qxe1mZjE/2QkZnD0BtItdDwLprKNjZCK2z3O9nitaivb2iKtvAZWXrGL/cgE5Dj gTDO+8NQ6rLvHvoExya6/tFOK+Mn6ub+820RAUuDVTzBPDmjngt2c95oinpoVYQv v/YbtVL0fxx2/MNJ6rxkZXPjr82YQgR7ClRJ5XYC/07e1vOqRZ25zwyRY0GUvaBt wRz7UUqdXq/0hXMB+d6LzFDdxrxt4YMAGk7xMDRqgH/lhbRDDFLCeH91F40WGbzu xLrw9sphu8+k -----END CERTIFICATE-----Generated at Sun Dec 21 19:25:33 2025 by rpki-client