This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa File: 3138392e38392e36342e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: go1KIpBJxETCBKWxwg39AGEx28Drv1stPepnRrYwglk= Subject key identifier: 5F:97:C9:75:09:CA:02:7C:C7:98:D5:24:54:DD:04:DD:F9:94:6A:88 Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 4ECD119810AC50EEEC0309D8C4B0C078CEF54392 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:35 +0000 ROA not before: Thu 08 Jan 2026 20:40:35 +0000 ROA not after: Thu 07 Jan 2027 20:45:35 +0000 asID: 28184 IP address blocks: 189.89.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cd:11:98:10:ac:50:ee:ec:03:09:d8:c4:b0:c0:78:ce:f5:43:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:35 2026 GMT Not After : Jan 7 20:45:35 2027 GMT Subject: CN=5F97C97509CA027CC798D52454DD04DDF9946A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:ec:ba:35:08:a7:81:40:ca:f6:31:61:5e: 5c:87:1c:22:21:ab:30:15:2c:d8:c2:c7:09:9f:96: c1:85:f7:df:49:51:fc:44:bb:ac:0f:5b:1c:2a:1b: a1:01:26:f5:e2:91:15:a4:77:33:25:70:14:5e:7d: 3b:60:14:6f:f3:e3:09:28:bb:3f:22:ca:e9:af:84: f1:67:97:a9:af:9a:d6:b6:12:99:fa:59:59:43:aa: eb:71:e2:b3:50:a8:eb:de:7e:61:cc:ee:cf:0f:f0: fb:92:a4:bb:ac:6c:bd:c2:6d:e7:d6:97:c5:06:a0: ca:ce:7e:4c:5e:44:56:1f:97:2e:e9:0f:79:da:61: 0a:ff:35:4f:50:f0:c7:9f:56:bd:c1:45:5b:9f:98: b2:1e:73:61:34:0e:94:e3:5a:68:42:ce:f5:df:d8: 8f:c4:e5:13:e8:53:c3:4f:85:0d:a2:3c:bf:be:05: 81:1a:51:b6:c3:8b:b3:f0:90:ae:d1:1c:e8:b5:de: b4:4c:27:33:56:57:45:94:a8:d7:3f:61:3e:0f:aa: 27:f3:77:83:5d:81:a5:c8:7d:60:cc:5c:71:b5:15: e1:35:db:54:ef:a4:27:93:da:8b:0b:76:60:6b:f8: fe:2f:9c:ee:8c:a4:7f:41:2a:35:31:a4:3c:7c:bf: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:97:C9:75:09:CA:02:7C:C7:98:D5:24:54:DD:04:DD:F9:94:6A:88 X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:7f:68:50:31:a1:61:1b:74:ce:69:c9:33:3b:31:40:f5:e4: 46:ec:8d:b4:28:c8:21:d3:87:27:ad:2b:b6:af:3a:b6:2f:df: ff:99:82:42:c9:24:3d:a7:f6:2a:08:bf:36:fd:ae:56:5e:61: 0f:e2:c3:51:dd:0d:18:48:be:be:67:f7:e5:5f:ad:a4:0a:0e: ea:20:38:8b:0c:9e:c7:3d:47:73:ef:c9:88:3b:c8:bf:3c:f3: ad:e0:6d:bb:1e:d0:c8:6f:e5:ac:85:35:74:64:23:8b:37:2d: e1:f2:d5:32:1e:cc:55:a9:e5:ab:ab:ca:4b:2d:2a:cf:15:7a: c6:cb:ed:39:dd:95:29:57:bf:bf:11:90:9f:52:c9:67:9a:ca: 90:b9:ac:c7:11:81:6a:cf:f8:8b:29:ad:30:3e:f5:18:a3:e9: f5:2e:4f:9d:aa:ea:7b:70:2f:c0:2d:86:8b:74:79:bc:d3:42: 1f:53:01:b1:70:86:ac:02:c6:ba:21:b6:42:18:8a:a5:4b:4b: 0d:e8:78:96:70:72:f0:18:07:b0:34:3d:0f:54:53:fa:f6:be: 9a:96:84:77:2a:e6:a9:ef:e9:65:29:5f:67:b7:3c:89:39:4e: 2c:29:1a:1d:42:53:14:cc:9a:86:41:02:6f:0f:77:b4:71:cb: 52:1b:4f:94 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUTs0RmBCsUO7sAwnYxLDAeM71Q5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzVaFw0yNzAxMDcyMDQ1MzVaMDMxMTAvBgNV BAMTKDVGOTdDOTc1MDlDQTAyN0NDNzk4RDUyNDU0REQwNERERjk5NDZBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVuy6NQingUDK9jFhXlyHHCIh qzAVLNjCxwmflsGF999JUfxEu6wPWxwqG6EBJvXikRWkdzMlcBRefTtgFG/z4wko uz8iyumvhPFnl6mvmta2Epn6WVlDqutx4rNQqOvefmHM7s8P8PuSpLusbL3CbefW l8UGoMrOfkxeRFYfly7pD3naYQr/NU9Q8MefVr3BRVufmLIec2E0DpTjWmhCzvXf 2I/E5RPoU8NPhQ2iPL++BYEaUbbDi7PwkK7RHOi13rRMJzNWV0WUqNc/YT4Pqifz d4NdgaXIfWDMXHG1FeE121TvpCeT2osLdmBr+P4vnO6MpH9BKjUxpDx8v1dHAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUX5fJdQnKAnzHmNUkVN0E3fmUaogwHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZQDANBgkqhkiG9w0BAQsFAAOCAQEAfH9oUDGhYRt0 zmnJMzsxQPXkRuyNtCjIIdOHJ60rtq86ti/f/5mCQskkPaf2Kgi/Nv2uVl5hD+LD Ud0NGEi+vmf35V+tpAoO6iA4iwyexz1Hc+/JiDvIvzzzreBtux7QyG/lrIU1dGQj izct4fLVMh7MVanlq6vKSy0qzxV6xsvtOd2VKVe/vxGQn1LJZ5rKkLmsxxGBas/4 iymtMD71GKPp9S5Pnarqe3AvwC2Gi3R5vNNCH1MBsXCGrALGuiG2QhiKpUtLDeh4 lnBy8BgHsDQ9D1RT+va+mpaEdyrmqe/pZSlfZ7c8iTlOLCkaHUJTFMyahkECbw93 tHHLUhtPlA== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:32 2026 by rpki-client