This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa File: 3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa (raw, json) Hash identifier: UykRaT/wZ0OgHI7yKDjplt4WQe5InFSf54c0tYZCa4E= Subject key identifier: 99:70:5E:EC:DD:40:F3:42:94:D7:33:FB:42:44:C3:13:3D:E4:F1:72 Certificate issuer: /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A Certificate serial: 363128FB4CC9C92BB0B1B84C23049B9A225BA176 Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa Signing time: Wed 26 Nov 2025 15:19:40 +0000 ROA not before: Wed 26 Nov 2025 15:14:40 +0000 ROA not after: Wed 25 Nov 2026 15:19:40 +0000 asID: 264397 IP address blocks: 131.161.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 11:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:31:28:fb:4c:c9:c9:2b:b0:b1:b8:4c:23:04:9b:9a:22:5b:a1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A Validity Not Before: Nov 26 15:14:40 2025 GMT Not After : Nov 25 15:19:40 2026 GMT Subject: CN=99705EECDD40F34294D733FB4244C3133DE4F172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d6:68:35:08:7e:43:41:e1:ac:42:fd:09:37: 4d:58:2e:11:45:bd:94:b7:b9:2d:33:4b:f3:b3:b8: 61:50:7b:1e:0b:51:e7:95:ce:04:eb:17:ea:22:b0: df:a0:c6:2c:1c:e1:57:91:4e:0d:92:b4:2c:e1:f0: 6f:bb:8f:85:f2:ce:4d:8b:80:9d:9e:b7:0e:5a:db: c6:32:40:89:48:21:81:f7:77:43:4c:87:21:4d:39: 87:23:c8:10:81:d7:fb:20:b0:4c:16:fe:11:06:9d: 68:db:fd:e4:9d:e1:3a:a8:7b:b8:bd:66:2f:be:e2: f0:db:47:cb:88:a7:57:7f:8f:b5:49:1c:f8:4e:88: f1:27:92:6a:cf:70:52:61:ad:2a:72:45:1a:14:34: 69:49:25:b6:7b:07:0e:b1:86:66:be:3d:d8:fd:bb: 7d:91:8d:36:c7:62:c0:93:b5:74:4b:40:7c:24:c5: 9a:87:79:57:ed:ff:92:a7:b5:7f:b4:f2:d4:63:2d: 5f:1d:90:47:e5:c5:ef:58:01:55:51:11:a4:0e:fe: 86:07:54:f6:61:09:33:41:a4:20:03:69:c0:37:80: 99:2a:3d:c6:04:b0:55:dc:a0:92:0a:e5:a1:5f:fc: 88:b5:a2:3d:b3:9f:14:20:b6:c2:c0:7d:6f:c8:ae: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:70:5E:EC:DD:40:F3:42:94:D7:33:FB:42:44:C3:13:3D:E4:F1:72 X509v3 Authority Key Identifier: keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.94.0/24 Signature Algorithm: sha256WithRSAEncryption 48:85:9d:1d:4f:49:74:c4:f3:c1:60:c2:b1:82:a9:03:ac:b3: e0:c5:1d:e8:12:63:f3:31:a7:c1:1f:cc:c0:c5:9a:4f:f1:f8: 30:2f:76:60:94:42:ec:e5:c3:78:ea:07:92:b8:9c:af:0c:a8: cd:52:44:ea:c5:96:63:e9:16:a4:ab:f5:29:55:91:70:7f:36: 33:3e:9d:71:17:1c:03:8a:49:a4:8e:96:2b:87:2c:a7:30:9c: 78:2c:55:09:f1:72:4f:5a:d9:76:90:c4:22:9e:96:7b:0a:79: 5e:72:fb:f5:e1:eb:dd:27:72:c3:df:6d:9c:40:a7:26:8d:c3: d2:fd:55:4b:4b:81:8c:a7:16:05:e2:4a:de:e4:a3:f2:7a:01: 23:68:f0:52:f9:bc:ca:fc:4c:d4:e6:d8:a8:d9:02:d4:aa:9d: 77:87:e1:b3:a9:e7:16:ff:02:ca:30:48:09:c6:53:08:c3:8e: 72:0d:8c:dd:ee:a5:31:ad:d7:57:96:eb:9b:bd:86:0a:02:72: c0:50:d9:cc:65:1d:b9:4c:21:10:70:54:46:b0:77:ef:1a:2a: 02:21:f9:55:18:0d:2e:97:b1:e6:0b:00:66:53:77:f3:7a:f8: 9c:b0:bf:10:75:e7:45:1b:e0:7c:07:3d:c1:78:be:54:f9:f6: b9:38:54:15 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUNjEo+0zJySuwsbhMIwSbmiJboXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM0N0E2RTE4MTUxQTgyOEE1NzAwRDJCN0UxNkM5QTFG Q0FCRDIwQTAeFw0yNTExMjYxNTE0NDBaFw0yNjExMjUxNTE5NDBaMDMxMTAvBgNV BAMTKDk5NzA1RUVDREQ0MEYzNDI5NEQ3MzNGQjQyNDRDMzEzM0RFNEYxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1mg1CH5DQeGsQv0JN01YLhFF vZS3uS0zS/OzuGFQex4LUeeVzgTrF+oisN+gxiwc4VeRTg2StCzh8G+7j4Xyzk2L gJ2etw5a28YyQIlIIYH3d0NMhyFNOYcjyBCB1/sgsEwW/hEGnWjb/eSd4Tqoe7i9 Zi++4vDbR8uIp1d/j7VJHPhOiPEnkmrPcFJhrSpyRRoUNGlJJbZ7Bw6xhma+Pdj9 u32RjTbHYsCTtXRLQHwkxZqHeVft/5KntX+08tRjLV8dkEflxe9YAVVREaQO/oYH VPZhCTNBpCADacA3gJkqPcYEsFXcoJIK5aFf/Ii1oj2znxQgtsLAfW/Irq+pAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUmXBe7N1A80KU1zP7QkTDEz3k8XIwHwYDVR0j BBgwFoAULEem4YFRqCilcA0rfhbJofyr0gowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy OGEvMC8yQzQ3QTZFMTgxNTFBODI4QTU3MDBEMkI3RTE2QzlBMUZDQUJEMjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDNDdBNkUxODE1MUE4MjhB NTcwMEQyQjdFMTZDOUExRkNBQkQyMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv MzEzMzMxMmUzMTM2MzEyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzQzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACDoV4wDQYJKoZIhvcNAQELBQADggEBAEiFnR1P SXTE88FgwrGCqQOss+DFHegSY/Mxp8EfzMDFmk/x+DAvdmCUQuzlw3jqB5K4nK8M qM1SROrFlmPpFqSr9SlVkXB/NjM+nXEXHAOKSaSOliuHLKcwnHgsVQnxck9a2XaQ xCKelnsKeV5y+/Xh690ncsPfbZxApyaNw9L9VUtLgYynFgXiSt7ko/J6ASNo8FL5 vMr8TNTm2KjZAtSqnXeH4bOp5xb/AsowSAnGUwjDjnINjN3upTGt11eW65u9hgoC csBQ2cxlHblMIRBwVEawd+8aKgIh+VUYDS6XseYLAGZTd/N6+JywvxB150Ub4HwH PcF4vlT59rk4VBU= -----END CERTIFICATE-----Generated at Wed Dec 17 16:53:54 2025 by rpki-client