This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/3138372e34392e3131322e302f32302d3234203d3e203238313434.roa File: 3138372e34392e3131322e302f32302d3234203d3e203238313434.roa (raw, json) Hash identifier: zOdwAvhCdUNMrj4YgUVXLCm1Z7FltcWf8NCwDo63FaQ= Subject key identifier: A5:C1:D5:99:29:AF:67:86:31:D4:7C:59:26:44:13:5E:2A:02:27:59 Certificate issuer: /CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8 Certificate serial: 36778A429DE9D5C4B69538CBCBA2A9EB11C028A1 Authority key identifier: 24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/3138372e34392e3131322e302f32302d3234203d3e203238313434.roa Signing time: Mon 24 Nov 2025 11:52:22 +0000 ROA not before: Mon 24 Nov 2025 11:47:22 +0000 ROA not after: Mon 23 Nov 2026 11:52:22 +0000 asID: 28144 IP address blocks: 187.49.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 22:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:77:8a:42:9d:e9:d5:c4:b6:95:38:cb:cb:a2:a9:eb:11:c0:28:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8 Validity Not Before: Nov 24 11:47:22 2025 GMT Not After : Nov 23 11:52:22 2026 GMT Subject: CN=A5C1D59929AF678631D47C592644135E2A022759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:6e:6b:04:bf:f7:a6:35:35:96:c0:a5:bb: 9a:42:f4:2d:a9:cf:a0:b0:9d:9b:13:ad:c8:fb:bc: 83:b6:32:ad:b3:5b:b6:08:d7:f5:5f:b2:bb:0a:04: a5:51:28:a9:00:04:09:d0:75:dd:93:80:32:5f:58: c0:26:5f:8a:7d:99:d8:07:28:9a:d3:14:7a:d2:cc: c1:a8:6c:60:0d:c4:9c:54:4e:cb:ef:02:0a:88:0d: e7:79:f8:5e:84:10:97:b3:30:dd:71:73:91:57:50: 64:b6:1c:2f:bd:6a:73:11:31:af:85:1e:fb:a5:d2: d6:ae:70:42:2a:bc:df:9e:f5:9f:41:2a:1b:84:83: 99:34:9e:5b:5d:f0:bc:39:b2:4e:58:be:15:58:e5: 53:7a:19:a3:9c:3d:77:02:dc:01:88:99:7c:0d:87: 62:36:9c:cc:84:71:2a:ac:3c:00:30:d2:e0:6d:fa: 9e:fd:76:49:8e:5a:7f:63:c1:d7:98:80:9d:d3:62: a0:e7:be:d3:c0:b8:03:96:8b:02:76:30:33:1d:41: 9c:34:44:38:83:9c:1d:ea:de:65:c5:da:d5:ca:a4: 66:8b:d8:55:45:2b:dd:2b:ba:5d:10:3b:df:8b:5d: 39:c7:29:a3:ef:06:fd:c0:ac:92:18:c0:5c:42:ed: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:D5:99:29:AF:67:86:31:D4:7C:59:26:44:13:5E:2A:02:27:59 X509v3 Authority Key Identifier: keyid:24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/3138372e34392e3131322e302f32302d3234203d3e203238313434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.49.112.0/20 Signature Algorithm: sha256WithRSAEncryption 36:7d:bf:62:7a:ee:ba:21:15:34:59:c1:fe:0a:e8:37:ae:4f: 1b:84:35:46:fd:83:60:af:eb:a3:fc:b9:e0:03:a2:aa:0c:e3: 9b:fb:c4:91:af:ba:c9:ec:a9:ce:60:f4:ab:f2:cc:a4:9e:76: 2b:b1:ba:b3:bc:69:84:c0:e3:a4:cd:e5:4d:5e:2c:15:ae:fe: 01:dd:4b:a2:67:08:42:4e:3d:ed:e1:74:f8:e8:45:c6:1e:89: 10:1d:08:56:f9:9a:df:27:68:b2:6c:38:ce:a0:f9:f8:cd:4c: e4:a4:b7:19:47:25:72:8c:c4:29:7c:48:c2:b7:53:2a:9f:ff: 67:13:e5:a4:55:36:83:0b:a0:a4:2a:76:24:25:41:c5:92:35: 90:c3:e8:1c:c8:a4:05:64:75:54:49:c7:76:c3:d8:05:e3:8d: 16:33:09:be:bd:4d:35:58:76:ea:70:b1:d9:6e:c2:83:3b:8d: 51:03:4b:ea:cd:c4:95:6e:39:30:3a:b5:77:e3:ab:47:10:88: c3:2a:1e:e0:63:73:61:60:b1:53:f8:d5:14:98:91:c7:25:8c: c0:5d:b7:d8:2a:96:bc:10:74:89:65:84:6e:34:03:49:4e:50: 62:3c:6a:40:03:f4:07:c1:27:74:e6:f5:02:a0:f4:cc:01:8a: 99:32:c1:90 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUNneKQp3p1cS2lTjLy6Kp6xHAKKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4OEYyRTY2OUUyMDFCNEQ5OEI2RkEyNTZEQjQ0Mzcw MkY0RkFDODAeFw0yNTExMjQxMTQ3MjJaFw0yNjExMjMxMTUyMjJaMDMxMTAvBgNV BAMTKEE1QzFENTk5MjlBRjY3ODYzMUQ0N0M1OTI2NDQxMzVFMkEwMjI3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgW5rBL/3pjU1lsClu5pC9C2p z6CwnZsTrcj7vIO2Mq2zW7YI1/VfsrsKBKVRKKkABAnQdd2TgDJfWMAmX4p9mdgH KJrTFHrSzMGobGANxJxUTsvvAgqIDed5+F6EEJezMN1xc5FXUGS2HC+9anMRMa+F Hvul0taucEIqvN+e9Z9BKhuEg5k0nltd8Lw5sk5YvhVY5VN6GaOcPXcC3AGImXwN h2I2nMyEcSqsPAAw0uBt+p79dkmOWn9jwdeYgJ3TYqDnvtPAuAOWiwJ2MDMdQZw0 RDiDnB3q3mXF2tXKpGaL2FVFK90rul0QO9+LXTnHKaPvBv3ArJIYwFxC7VrfAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUpcHVmSmvZ4Yx1HxZJkQTXioCJ1kwHwYDVR0j BBgwFoAUJIjy5mniAbTZi2+iVttENwL0+sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUd4M05iUWM2TXBKV3BBZFR6MUQ5SHo4NUtGUGVFbmRvN2JZdkRyeUNR THUvMS8yNDg4RjJFNjY5RTIwMUI0RDk4QjZGQTI1NkRCNDQzNzAyRjRGQUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0ODhGMkU2NjlFMjAxQjRE OThCNkZBMjU2REI0NDM3MDJGNEZBQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FHeDNOYlFjNk1wSldwQWRUejFEOUh6ODVLRlBlRW5kbzdiWXZEcnlDUUx1LzEv MzEzODM3MmUzNDM5MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4 MzEzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEuzFwMA0GCSqGSIb3DQEBCwUAA4IBAQA2fb9ieu66 IRU0WcH+Cug3rk8bhDVG/YNgr+uj/LngA6KqDOOb+8SRr7rJ7KnOYPSr8syknnYr sbqzvGmEwOOkzeVNXiwVrv4B3UuiZwhCTj3t4XT46EXGHokQHQhW+ZrfJ2iybDjO oPn4zUzkpLcZRyVyjMQpfEjCt1Mqn/9nE+WkVTaDC6CkKnYkJUHFkjWQw+gcyKQF ZHVUScd2w9gF440WMwm+vU01WHbqcLHZbsKDO41RA0vqzcSVbjkwOrV346tHEIjD Kh7gY3NhYLFT+NUUmJHHJYzAXbfYKpa8EHSJZYRuNANJTlBiPGpAA/QHwSd05vUC oPTMAYqZMsGQ -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:46 2025 by rpki-client