This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa File: 3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa (raw, json) Hash identifier: w77oCkQBpdRwXefDZjJD1Z2F1ocHqWUGo67Ayk9XK5U= Subject key identifier: 5C:08:40:57:47:D0:5B:58:A7:0D:DD:83:45:1C:1A:43:04:FA:79:45 Certificate issuer: /CN=513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3 Certificate serial: 4E89CC6E0990B2969994DAB8AF94FD0A92FD1015 Authority key identifier: 51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa Signing time: Fri 12 Dec 2025 19:31:13 +0000 ROA not before: Fri 12 Dec 2025 19:26:13 +0000 ROA not after: Fri 11 Dec 2026 19:31:13 +0000 asID: 270274 IP address blocks: 200.124.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.crl rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 12:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:89:cc:6e:09:90:b2:96:99:94:da:b8:af:94:fd:0a:92:fd:10:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3 Validity Not Before: Dec 12 19:26:13 2025 GMT Not After : Dec 11 19:31:13 2026 GMT Subject: CN=5C08405747D05B58A70DDD83451C1A4304FA7945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:49:1d:09:f1:73:1b:e2:b1:72:b1:51:82: 43:b0:57:3c:e1:b0:da:fc:37:f3:69:7e:a9:19:71: 0a:7d:e9:85:fd:e1:09:2d:04:b2:d4:2b:df:ef:0d: 3a:2e:bc:23:10:98:9e:4f:51:76:8c:da:ff:25:44: 00:79:5b:6c:e5:b8:46:a1:e1:f4:14:9f:63:dd:28: a6:34:6c:ee:32:cf:ad:5b:95:67:48:c4:be:07:91: 2f:92:ee:b8:2e:46:7a:cf:43:dd:3c:b3:02:a4:6e: 5f:e0:34:04:4e:9b:11:5d:af:0a:a7:2f:60:d0:04: 2f:9b:85:39:26:bf:7d:29:ba:fc:9c:cc:25:74:f7: 2d:f3:70:37:9f:71:ad:45:67:28:91:f1:cf:f6:62: 8e:d3:be:91:5a:62:86:a1:94:21:98:b0:4c:d4:bd: 74:66:1b:cc:51:26:c3:ca:d4:29:59:c7:7d:5f:2a: f8:6b:5a:d7:62:a4:98:ed:8d:65:f8:cd:e2:99:be: 9a:c2:e0:ff:66:1b:33:39:d2:a8:86:94:ea:3c:7f: 7a:9b:2c:29:2f:b7:b8:31:91:a3:50:a4:ad:dd:5d: fd:be:8b:57:95:f7:a1:c2:6f:49:6a:2c:3c:14:b3: 3a:99:ed:74:61:d8:f7:55:2a:7e:0b:c1:cf:0c:ae: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:08:40:57:47:D0:5B:58:A7:0D:DD:83:45:1C:1A:43:04:FA:79:45 X509v3 Authority Key Identifier: keyid:51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.124.84.0/22 Signature Algorithm: sha256WithRSAEncryption d6:52:d3:73:b5:7d:a1:4e:d2:15:e0:4f:22:5d:ce:8b:a4:1c: c8:b0:f1:6c:6a:7b:b2:2f:d0:13:fb:ff:4c:cc:82:89:e7:97: 0e:b4:38:d6:c3:31:22:1d:1b:d3:68:4f:f9:12:6f:02:2e:4d: 88:ee:91:42:13:3c:33:e8:9a:a0:d1:21:46:19:ce:94:51:38: 30:ee:d2:75:9a:57:a7:15:6a:c9:ea:e0:70:0d:4e:1d:b5:3f: d8:ac:2d:2d:b3:d4:61:32:26:72:57:aa:1a:ae:b7:ca:3e:54: ff:9a:4c:05:54:31:24:a6:88:5d:28:56:27:33:1f:99:b2:56: 7f:27:b7:25:c7:3d:77:35:f6:bc:74:1d:af:8f:0e:6b:7b:fc: ff:bc:51:1d:48:d2:fa:13:a0:30:5f:62:b7:7e:58:92:83:77: 8f:c1:bd:ed:49:25:7f:4f:49:8b:61:27:0f:ed:6a:75:92:0c: 6f:9c:ca:86:04:e1:cb:c0:41:42:b5:da:f2:00:d8:13:d8:e8: 25:28:a4:a5:10:83:2d:ea:e2:c6:a1:b6:23:ba:92:7f:bf:b4: 35:5b:ba:81:02:ed:ae:ef:35:9f:8f:ee:d1:cc:16:15:0a:19: c3:4f:12:0c:11:e9:22:1f:61:e1:18:3d:da:7e:df:a2:b4:9c: 65:34:83:61 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTonMbgmQspaZlNq4r5T9CpL9EBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzQTM2QjFGRUUzMTg5NDNGQTU4QUM2RjUwOTlENEZD QkVDN0REMzAeFw0yNTEyMTIxOTI2MTNaFw0yNjEyMTExOTMxMTNaMDMxMTAvBgNV BAMTKDVDMDg0MDU3NDdEMDVCNThBNzBEREQ4MzQ1MUMxQTQzMDRGQTc5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJ0kdCfFzG+KxcrFRgkOwVzzh sNr8N/NpfqkZcQp96YX94QktBLLUK9/vDTouvCMQmJ5PUXaM2v8lRAB5W2zluEah 4fQUn2PdKKY0bO4yz61blWdIxL4HkS+S7rguRnrPQ908swKkbl/gNAROmxFdrwqn L2DQBC+bhTkmv30puvyczCV09y3zcDefca1FZyiR8c/2Yo7TvpFaYoahlCGYsEzU vXRmG8xRJsPK1ClZx31fKvhrWtdipJjtjWX4zeKZvprC4P9mGzM50qiGlOo8f3qb LCkvt7gxkaNQpK3dXf2+i1eV96HCb0lqLDwUszqZ7XRh2PdVKn4Lwc8MrgXpAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUXAhAV0fQW1inDd2DRRwaQwT6eUUwHwYDVR0j BBgwFoAUUTo2sf7jGJQ/pYrG9QmdT8vsfdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdF eVovMC81MTNBMzZCMUZFRTMxODk0M0ZBNThBQzZGNTA5OUQ0RkNCRUM3REQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxM0EzNkIxRkVFMzE4OTQz RkE1OEFDNkY1MDk5RDRGQ0JFQzdERDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIzSnFrQUpEc25BN042VnBkUEpGTWdUY25wSlQ2TWZzaTFjYlNIOVk3RXlaLzAv MzIzMDMwMmUzMTMyMzQyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3 MzAzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALIfFQwDQYJKoZIhvcNAQELBQADggEBANZS03O1 faFO0hXgTyJdzoukHMiw8Wxqe7Iv0BP7/0zMgonnlw60ONbDMSIdG9NoT/kSbwIu TYjukUITPDPomqDRIUYZzpRRODDu0nWaV6cVasnq4HANTh21P9isLS2z1GEyJnJX qhqut8o+VP+aTAVUMSSmiF0oViczH5myVn8ntyXHPXc19rx0Ha+PDmt7/P+8UR1I 0voToDBfYrd+WJKDd4/Bve1JJX9PSYthJw/tanWSDG+cyoYE4cvAQUK12vIA2BPY 6CUopKUQgy3q4sahtiO6kn+/tDVbuoEC7a7vNZ+P7tHMFhUKGcNPEgwR6SIfYeEY Pdp+36K0nGU0g2E= -----END CERTIFICATE-----Generated at Wed Dec 17 16:30:13 2025 by rpki-client