This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa File: 3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa (raw, json) Hash identifier: sH8ATRdhV490GlrucuKgURQMwjZg17H5D7pEVKbbwFE= Subject key identifier: 4A:FF:76:68:3A:DB:77:1B:23:EC:7B:F2:80:70:5F:44:B1:99:DD:75 Certificate issuer: /CN=513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3 Certificate serial: 7F465D91BB498294A5FA40627CA77A1AB79DDCF3 Authority key identifier: 51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa Signing time: Fri 12 Dec 2025 19:31:12 +0000 ROA not before: Fri 12 Dec 2025 19:26:12 +0000 ROA not after: Fri 11 Dec 2026 19:31:12 +0000 asID: 270274 IP address blocks: 200.124.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.crl rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 12:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:46:5d:91:bb:49:82:94:a5:fa:40:62:7c:a7:7a:1a:b7:9d:dc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3 Validity Not Before: Dec 12 19:26:12 2025 GMT Not After : Dec 11 19:31:12 2026 GMT Subject: CN=4AFF76683ADB771B23EC7BF280705F44B199DD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:cd:f0:c4:ae:60:c7:b3:80:bc:6e:79:98: 9d:b5:4b:0e:54:71:d6:2e:d5:62:6e:19:c8:95:38: 2d:ba:fd:36:41:13:28:e0:b9:b7:9f:9f:d4:e1:88: 1c:39:c8:cb:92:91:6a:3c:b5:13:0a:7f:02:4a:33: f2:c6:0c:b1:f3:b2:a5:3c:eb:c0:79:df:a1:18:e3: b7:0b:3e:91:46:87:dd:b2:15:2c:1f:d1:5f:e3:bc: 28:50:52:92:d2:84:d9:76:4c:a5:24:e3:16:9f:be: bf:3b:bb:01:7e:af:6a:d0:8b:3b:94:30:be:60:1a: 7d:7e:c8:dc:df:2b:f2:69:96:71:bf:89:cd:3d:8b: ae:4c:98:d9:a0:de:a4:f8:94:b8:df:01:cf:12:b8: ba:cc:61:73:7f:e9:92:9e:22:f0:ce:81:44:65:96: 8d:6a:dc:7f:8d:ae:ab:7c:49:12:ab:54:3f:5a:ab: 13:71:2b:fa:14:5f:a9:ad:f5:f6:4a:28:08:da:0d: 9a:9f:31:ce:77:51:bf:1b:34:9d:f0:f0:39:14:61: 35:24:d3:db:c6:f8:3c:25:68:64:6e:40:15:fc:1f: b2:cc:97:82:49:c9:16:91:5e:ba:de:6b:f3:14:0d: a5:68:9d:6a:bb:3a:13:cb:53:9d:45:0d:8a:cf:7d: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FF:76:68:3A:DB:77:1B:23:EC:7B:F2:80:70:5F:44:B1:99:DD:75 X509v3 Authority Key Identifier: keyid:51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.124.86.0/23 Signature Algorithm: sha256WithRSAEncryption 99:5d:0d:8f:ee:21:3c:b1:88:8e:d3:b3:5f:0f:7a:82:66:ae: bc:8c:8f:9f:53:9c:07:3e:b6:74:c5:36:05:50:05:0e:7a:08: 0d:b5:cf:7d:e6:ce:20:fe:9a:a0:9f:2a:96:cb:40:11:13:67: fb:dc:bc:3a:73:19:c1:89:94:ac:b8:d0:66:f6:14:02:4c:7d: 09:23:fd:f6:6b:4a:37:d5:fc:77:74:ac:4a:ca:93:ad:44:65: 08:1e:03:76:57:c0:bf:67:89:65:5f:74:8a:33:d4:ab:c9:96: 2b:67:9b:8b:04:95:68:f7:8f:33:56:18:df:fa:27:2a:01:6f: 8b:c5:1d:af:6f:b0:3f:85:b8:1c:0b:a7:e0:55:19:f3:f6:66: c0:f3:4c:34:9a:dc:a4:43:be:1a:2d:91:ca:e2:96:5d:c4:12: 14:ee:08:2d:f5:cd:3e:a9:43:5e:50:b7:2a:2f:7b:b3:7b:c9: 57:c9:0a:04:ec:9e:f2:34:48:c0:1c:3a:6d:ce:c5:5d:d4:6f: 07:a9:e4:af:68:73:c2:11:0b:b7:00:d6:1c:bf:3e:fe:9d:19: 32:0d:c1:5a:61:f5:4f:f2:14:d7:82:43:4c:8c:8a:c7:c7:7e: a9:8b:32:56:de:8d:21:20:36:a3:5e:dd:0b:ca:c1:d3:e2:2d: e9:ef:31:cc -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUf0ZdkbtJgpSl+kBifKd6Gred3PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzQTM2QjFGRUUzMTg5NDNGQTU4QUM2RjUwOTlENEZD QkVDN0REMzAeFw0yNTEyMTIxOTI2MTJaFw0yNjEyMTExOTMxMTJaMDMxMTAvBgNV BAMTKDRBRkY3NjY4M0FEQjc3MUIyM0VDN0JGMjgwNzA1RjQ0QjE5OURENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp983wxK5gx7OAvG55mJ21Sw5U cdYu1WJuGciVOC26/TZBEyjgubefn9ThiBw5yMuSkWo8tRMKfwJKM/LGDLHzsqU8 68B536EY47cLPpFGh92yFSwf0V/jvChQUpLShNl2TKUk4xafvr87uwF+r2rQizuU ML5gGn1+yNzfK/JplnG/ic09i65MmNmg3qT4lLjfAc8SuLrMYXN/6ZKeIvDOgURl lo1q3H+Nrqt8SRKrVD9aqxNxK/oUX6mt9fZKKAjaDZqfMc53Ub8bNJ3w8DkUYTUk 09vG+DwlaGRuQBX8H7LMl4JJyRaRXrrea/MUDaVonWq7OhPLU51FDYrPfT2XAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUSv92aDrbdxsj7HvygHBfRLGZ3XUwHwYDVR0j BBgwFoAUUTo2sf7jGJQ/pYrG9QmdT8vsfdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdF eVovMC81MTNBMzZCMUZFRTMxODk0M0ZBNThBQzZGNTA5OUQ0RkNCRUM3REQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxM0EzNkIxRkVFMzE4OTQz RkE1OEFDNkY1MDk5RDRGQ0JFQzdERDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIzSnFrQUpEc25BN042VnBkUEpGTWdUY25wSlQ2TWZzaTFjYlNIOVk3RXlaLzAv MzIzMDMwMmUzMTMyMzQyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3 MzAzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHIfFYwDQYJKoZIhvcNAQELBQADggEBAJldDY/u ITyxiI7Ts18PeoJmrryMj59TnAc+tnTFNgVQBQ56CA21z33mziD+mqCfKpbLQBET Z/vcvDpzGcGJlKy40Gb2FAJMfQkj/fZrSjfV/Hd0rErKk61EZQgeA3ZXwL9niWVf dIoz1KvJlitnm4sElWj3jzNWGN/6JyoBb4vFHa9vsD+FuBwLp+BVGfP2ZsDzTDSa 3KRDvhotkcrill3EEhTuCC31zT6pQ15Qtyove7N7yVfJCgTsnvI0SMAcOm3OxV3U bwep5K9oc8IRC7cA1hy/Pv6dGTINwVph9U/yFNeCQ0yMisfHfqmLMlbejSEgNqNe 3QvKwdPiLenvMcw= -----END CERTIFICATE-----Generated at Wed Dec 17 16:30:12 2025 by rpki-client