This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/3230302e38302e3130302e302f32322d3332203d3e20323731333539.roa File: 3230302e38302e3130302e302f32322d3332203d3e20323731333539.roa (raw, json) Hash identifier: DBsEKZB5GxEJHxwesfU0TSktLFY9tdu5rSiHhL5I5nE= Subject key identifier: 76:34:03:D2:11:A7:D0:89:7C:29:9B:63:B5:DA:A3:9B:57:3C:57:F9 Certificate issuer: /CN=917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF Certificate serial: 7F2787B1DB331B33ED6A85F97E8410B3F131CC18 Authority key identifier: 91:7A:3E:B0:F9:B0:2C:8F:11:97:0C:81:A0:E0:6A:8A:52:09:F4:CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/3230302e38302e3130302e302f32322d3332203d3e20323731333539.roa Signing time: Wed 17 Dec 2025 18:43:17 +0000 ROA not before: Wed 17 Dec 2025 18:38:17 +0000 ROA not after: Wed 16 Dec 2026 18:43:17 +0000 asID: 271359 IP address blocks: 200.80.100.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF.crl rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:27:87:b1:db:33:1b:33:ed:6a:85:f9:7e:84:10:b3:f1:31:cc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF Validity Not Before: Dec 17 18:38:17 2025 GMT Not After : Dec 16 18:43:17 2026 GMT Subject: CN=763403D211A7D0897C299B63B5DAA39B573C57F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:13:04:ca:86:86:78:cb:c7:aa:66:21:75: ef:f6:a5:c1:54:49:d3:26:36:e9:9d:50:bf:c2:3e: 6c:05:99:d0:2e:c4:a7:0f:7a:37:f3:26:34:78:f8: 4b:c3:69:12:5f:5f:95:9e:ad:59:c7:fa:9b:0d:94: 57:90:99:0b:e3:48:b1:d8:f5:34:bb:7a:5c:69:e5: 1c:17:b2:65:53:73:c8:33:e7:30:24:43:2c:81:0f: c6:25:0e:47:f8:98:bb:61:5e:8d:a7:23:4e:6f:27: 13:21:35:01:bb:46:41:8a:48:e9:07:24:c9:f1:99: e1:db:a9:71:0a:2a:13:e7:33:ee:d0:65:4f:f9:56: b4:af:33:88:97:71:ee:88:9d:0a:3d:aa:07:c8:e4: 01:22:82:eb:04:32:f2:c6:0f:2a:63:16:06:4e:34: 0a:ed:c7:a6:f8:79:bb:17:cd:d7:57:52:e1:84:7e: b7:0d:e8:5c:c2:b4:af:73:08:fa:97:16:b0:93:03: e0:92:4e:68:26:1d:20:a5:6d:aa:26:11:0d:37:39: aa:4d:a2:5b:60:45:1f:9d:f6:e7:e7:c1:5d:51:50: f9:ed:17:b9:e3:f2:5b:85:8e:66:b8:8a:90:e4:25: 21:26:39:e3:34:12:16:77:3d:59:cd:aa:cc:89:10: 62:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:34:03:D2:11:A7:D0:89:7C:29:9B:63:B5:DA:A3:9B:57:3C:57:F9 X509v3 Authority Key Identifier: keyid:91:7A:3E:B0:F9:B0:2C:8F:11:97:0C:81:A0:E0:6A:8A:52:09:F4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/917A3EB0F9B02C8F11970C81A0E06A8A5209F4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/3230302e38302e3130302e302f32322d3332203d3e20323731333539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.80.100.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:88:0c:4a:d8:ee:74:0a:7a:3f:51:c0:28:17:82:f2:c1:80: ed:98:b2:04:3c:39:dc:1a:af:b9:3a:a4:c7:94:7d:85:29:b8: 2b:94:81:fd:8f:5b:16:5f:86:20:b9:04:cd:a0:7f:65:75:1b: ce:78:37:c0:7e:37:62:3b:ec:96:40:1f:8b:b1:8d:80:f7:a1: 6f:f7:26:87:b9:18:3a:a9:be:f3:1f:11:e2:6e:70:39:e6:1a: cc:d4:de:a8:48:32:1c:f6:03:11:ec:76:e3:5a:08:12:7c:20: b8:5c:ce:6d:55:ff:21:e5:13:fe:41:21:53:8b:45:1a:67:f7: 99:e1:2b:13:c0:44:26:1c:85:16:52:31:7c:1f:0b:4e:4b:42: 1a:56:77:4d:4b:2f:18:85:f8:74:94:3e:8b:1e:ef:d5:fa:0b: 6c:29:a4:d4:c3:aa:bf:a9:b5:ec:ae:a3:45:21:85:32:27:12: 44:76:81:c9:ba:b6:e0:9d:22:4c:ba:d1:dd:c8:d4:a4:a3:cd: e2:f7:b0:06:cb:a3:b7:32:2b:28:18:f1:45:90:26:70:e9:e9: a9:bf:2d:d9:1b:e7:16:8e:3e:cb:ba:8d:ed:cc:f8:7d:b9:b7: 9f:44:e7:6b:12:e8:20:b2:ec:a3:32:00:a5:ae:09:1e:aa:9a: 9c:bd:54:a0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUfyeHsdszGzPtaoX5foQQs/ExzBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTNFQjBGOUIwMkM4RjExOTcwQzgxQTBFMDZBOEE1 MjA5RjRDRjAeFw0yNTEyMTcxODM4MTdaFw0yNjEyMTYxODQzMTdaMDMxMTAvBgNV BAMTKDc2MzQwM0QyMTFBN0QwODk3QzI5OUI2M0I1REFBMzlCNTczQzU3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqRMEyoaGeMvHqmYhde/2pcFU SdMmNumdUL/CPmwFmdAuxKcPejfzJjR4+EvDaRJfX5WerVnH+psNlFeQmQvjSLHY 9TS7elxp5RwXsmVTc8gz5zAkQyyBD8YlDkf4mLthXo2nI05vJxMhNQG7RkGKSOkH JMnxmeHbqXEKKhPnM+7QZU/5VrSvM4iXce6InQo9qgfI5AEigusEMvLGDypjFgZO NArtx6b4ebsXzddXUuGEfrcN6FzCtK9zCPqXFrCTA+CSTmgmHSClbaomEQ03OapN oltgRR+d9ufnwV1RUPntF7nj8luFjma4ipDkJSEmOeM0EhZ3PVnNqsyJEGItAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUdjQD0hGn0Il8KZtjtdqjm1c8V/kwHwYDVR0j BBgwFoAUkXo+sPmwLI8RlwyBoOBqilIJ9M8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEEyNDl2VFdXaG1udEdpOURKUjU4OEJyQ3dMNW5kTlFyWHBzcTF5OE5K Z3MvMC85MTdBM0VCMEY5QjAyQzhGMTE5NzBDODFBMEUwNkE4QTUyMDlGNENGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxN0EzRUIwRjlCMDJDOEYx MTk3MEM4MUEwRTA2QThBNTIwOUY0Q0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRBMjQ5dlRXV2htbnRHaTlESlI1ODhCckN3TDVuZE5Rclhwc3ExeThOSmdzLzAv MzIzMDMwMmUzODMwMmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3 MzEzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALIUGQwDQYJKoZIhvcNAQELBQADggEBABuIDErY 7nQKej9RwCgXgvLBgO2YsgQ8Odwar7k6pMeUfYUpuCuUgf2PWxZfhiC5BM2gf2V1 G854N8B+N2I77JZAH4uxjYD3oW/3Joe5GDqpvvMfEeJucDnmGszU3qhIMhz2AxHs duNaCBJ8ILhczm1V/yHlE/5BIVOLRRpn95nhKxPARCYchRZSMXwfC05LQhpWd01L LxiF+HSUPose79X6C2wppNTDqr+pteyuo0UhhTInEkR2gcm6tuCdIky60d3I1KSj zeL3sAbLo7cyKygY8UWQJnDp6am/Ldkb5xaOPsu6je3M+H25t59E52sS6CCy7KMy AKWuCR6qmpy9VKA= -----END CERTIFICATE-----Generated at Sat Dec 20 12:47:42 2025 by rpki-client