This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/3230302e392e31362e302f32322d3234203d3e20323636323234.roa File: 3230302e392e31362e302f32322d3234203d3e20323636323234.roa (raw, json) Hash identifier: Z9fAIVDzwVC9lx9x1+YO7yTiPOnKszI+BQGCLE+rMDc= Subject key identifier: 73:F0:86:BD:D8:7B:28:E2:C5:AD:BD:99:B9:10:18:AB:9D:DE:6C:7F Certificate issuer: /CN=28C222B8380EDA26588BC99D18AE110A348BF3D6 Certificate serial: 47CFC88DA3857A2934A634FEA8A0BC0022D5F22C Authority key identifier: 28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer Subject info access: rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/3230302e392e31362e302f32322d3234203d3e20323636323234.roa Signing time: Fri 19 Dec 2025 19:57:59 +0000 ROA not before: Fri 19 Dec 2025 19:52:59 +0000 ROA not after: Fri 18 Dec 2026 19:57:59 +0000 asID: 266224 IP address blocks: 200.9.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.crl rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 20:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cf:c8:8d:a3:85:7a:29:34:a6:34:fe:a8:a0:bc:00:22:d5:f2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28C222B8380EDA26588BC99D18AE110A348BF3D6 Validity Not Before: Dec 19 19:52:59 2025 GMT Not After : Dec 18 19:57:59 2026 GMT Subject: CN=73F086BDD87B28E2C5ADBD99B91018AB9DDE6C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:01:d4:73:24:b1:f8:fb:f2:44:1d:71:ec: b5:48:cb:93:bd:66:3e:1d:8f:31:b8:c5:74:c5:13: 7d:3b:c8:9f:43:54:6b:54:ef:6f:94:fc:2e:ee:07: bd:f0:b9:34:e9:6b:22:2e:fc:61:d1:07:b8:8d:8e: c7:62:f0:db:44:f5:db:1e:c2:80:b1:30:a2:09:49: 3c:e9:9d:17:a6:88:b0:51:a1:ad:73:18:d3:38:d4: 87:b1:dc:37:95:3d:62:98:60:ca:28:ed:f6:b8:65: 9c:f7:8c:72:32:b0:72:7d:27:b3:77:84:df:6c:a0: 14:dd:5f:09:c8:28:71:b4:45:0b:b0:19:11:74:9f: 17:11:67:c7:7f:9b:ae:8a:41:13:2c:db:3d:67:e1: 03:29:82:2b:3a:f0:37:5d:6d:ce:05:64:38:4b:7c: e6:06:e8:45:7b:87:be:9d:cb:24:09:aa:4e:d6:93: 09:39:81:d9:99:85:f3:1d:6a:2e:ef:9e:82:72:2d: 1f:33:81:93:31:4f:82:c8:4a:38:24:24:2c:a9:72: 6a:ea:a9:56:4d:5b:08:a5:71:39:fd:eb:70:47:0f: 36:89:9c:ec:e2:26:99:dd:16:91:7b:b0:39:4a:3f: fe:90:80:61:fa:60:1b:fb:f4:21:14:23:94:5f:c6: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F0:86:BD:D8:7B:28:E2:C5:AD:BD:99:B9:10:18:AB:9D:DE:6C:7F X509v3 Authority Key Identifier: keyid:28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/3230302e392e31362e302f32322d3234203d3e20323636323234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.9.16.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:11:54:dd:5d:e1:62:04:69:2e:24:5b:91:3b:0a:14:04:be: 4e:4f:49:ee:6e:55:39:b5:72:1b:79:29:11:b8:fd:4d:ce:cd: 34:c1:c7:ac:7e:51:3f:2b:bd:93:20:3c:fe:5f:65:27:74:c9: 5f:dc:80:f7:9c:81:5a:c0:36:65:16:6f:e0:cc:7a:58:88:17: ed:ee:12:32:36:93:f2:66:d8:83:31:83:af:85:43:b3:81:cb: 8c:95:22:cd:54:19:60:54:03:f2:ed:1d:7a:e9:a7:ed:80:f3: 44:b6:8c:8b:4b:c1:c5:a9:13:d8:99:61:b9:68:ca:b9:09:98: d8:51:b9:c6:42:e9:ec:df:14:8c:fa:e9:1d:43:f4:2d:67:9a: 46:96:4b:f6:21:9a:a6:83:6b:d0:8e:cf:df:9c:31:5e:39:24: 83:34:f7:7d:81:75:df:38:83:e2:e2:f4:21:bc:4a:6f:ca:ab: 62:db:36:88:bf:76:d5:33:59:56:bd:3d:ca:e6:e3:0a:e9:e0: 8c:85:e1:0a:c8:e6:30:a4:7a:04:0b:45:79:b8:82:94:77:53: 4f:de:64:61:ec:56:ce:38:ad:18:fb:54:6c:7f:fa:b4:9e:05: 33:1f:8c:a3:03:58:b9:83:34:aa:09:97:b6:0f:0b:43:e1:a6: 32:91:3e:0f -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUR8/IjaOFeik0pjT+qKC8ACLV8iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhDMjIyQjgzODBFREEyNjU4OEJDOTlEMThBRTExMEEz NDhCRjNENjAeFw0yNTEyMTkxOTUyNTlaFw0yNjEyMTgxOTU3NTlaMDMxMTAvBgNV BAMTKDczRjA4NkJERDg3QjI4RTJDNUFEQkQ5OUI5MTAxOEFCOURERTZDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMgHUcySx+PvyRB1x7LVIy5O9 Zj4djzG4xXTFE307yJ9DVGtU72+U/C7uB73wuTTpayIu/GHRB7iNjsdi8NtE9dse woCxMKIJSTzpnRemiLBRoa1zGNM41Iex3DeVPWKYYMoo7fa4ZZz3jHIysHJ9J7N3 hN9soBTdXwnIKHG0RQuwGRF0nxcRZ8d/m66KQRMs2z1n4QMpgis68Dddbc4FZDhL fOYG6EV7h76dyyQJqk7Wkwk5gdmZhfMdai7vnoJyLR8zgZMxT4LISjgkJCypcmrq qVZNWwilcTn963BHDzaJnOziJpndFpF7sDlKP/6QgGH6YBv79CEUI5RfxrlZAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUc/CGvdh7KOLFrb2ZuRAYq53ebH8wHwYDVR0j BBgwFoAUKMIiuDgO2iZYi8mdGK4RCjSL89YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnI5eHdKaFZweWpCVDVmbUNYbnl4TkNWUExleE10VldGNFFxcHJEUmti WksvMC8yOEMyMjJCODM4MEVEQTI2NTg4QkM5OUQxOEFFMTEwQTM0OEJGM0Q2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzIyMkI4MzgwRURBMjY1 ODhCQzk5RDE4QUUxMTBBMzQ4QkYzRDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJyOXh3SmhWcHlqQlQ1Zm1DWG55eE5DVlBMZXhNdFZXRjRRcXByRFJrYlpLLzAv MzIzMDMwMmUzOTJlMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjMy MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAsgJEDANBgkqhkiG9w0BAQsFAAOCAQEADBFU3V3hYgRp LiRbkTsKFAS+Tk9J7m5VObVyG3kpEbj9Tc7NNMHHrH5RPyu9kyA8/l9lJ3TJX9yA 95yBWsA2ZRZv4Mx6WIgX7e4SMjaT8mbYgzGDr4VDs4HLjJUizVQZYFQD8u0deumn 7YDzRLaMi0vBxakT2JlhuWjKuQmY2FG5xkLp7N8UjPrpHUP0LWeaRpZL9iGapoNr 0I7P35wxXjkkgzT3fYF13ziD4uL0IbxKb8qrYts2iL921TNZVr09yubjCungjIXh CsjmMKR6BAtFebiClHdTT95kYexWzjitGPtUbH/6tJ4FMx+MowNYuYM0qgmXtg8L Q+GmMpE+Dw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:47:33 2025 by rpki-client