This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa File: 3138392e38392e36352e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: Js79zT5EDrsCEGQ8JPnOUfZgTZIln5sgCocX2ZopBz0= Subject key identifier: D6:D6:03:E0:68:71:29:D0:71:6F:27:B8:0A:E0:57:3D:1E:86:68:C8 Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 0D22AA3BBD404C725132306C97A9D2D284A3E992 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:35 +0000 ROA not before: Thu 08 Jan 2026 20:40:35 +0000 ROA not after: Thu 07 Jan 2027 20:45:35 +0000 asID: 28184 IP address blocks: 189.89.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:22:aa:3b:bd:40:4c:72:51:32:30:6c:97:a9:d2:d2:84:a3:e9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:35 2026 GMT Not After : Jan 7 20:45:35 2027 GMT Subject: CN=D6D603E0687129D0716F27B80AE0573D1E8668C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:d9:ba:6d:6f:60:1f:17:ff:8d:c9:73:11: 71:96:4a:fd:48:eb:fb:6c:a1:84:8d:e3:04:43:71: ce:26:9a:c2:d0:88:7b:e2:25:96:23:42:4e:50:80: ef:fb:d4:7c:a4:d0:87:c4:bc:af:8a:47:80:55:20: 8f:3a:56:e7:a1:49:2f:7d:61:20:94:86:6e:18:f9: 00:c6:f9:83:b5:1a:7c:dc:ea:54:b6:2b:1a:30:7b: f5:f4:52:65:90:25:48:b0:d0:35:f0:bf:16:3f:3a: 49:18:97:7c:ac:52:af:9a:5a:66:af:90:e1:9a:eb: 4c:d1:01:93:08:dd:5e:5c:bb:5e:a7:8f:6b:fb:15: f6:9d:78:f0:bd:95:6b:4e:c1:e2:f4:cf:0a:f7:19: 80:36:3a:19:29:cd:98:11:d1:65:d9:17:fc:1a:e8: ae:09:4f:c1:ae:f9:04:38:cb:c6:70:8d:03:3f:2d: a0:3a:9b:f8:7d:88:9a:18:70:a2:5e:2d:9e:e8:55: 25:04:e1:4b:6a:bf:52:2e:dd:da:3d:22:1d:ed:ef: 78:8e:e6:18:26:9c:2d:0c:20:6a:f2:fd:8c:d3:35: 89:f6:52:fd:27:07:ad:43:8c:02:7b:d3:85:7c:03: 5d:ee:77:fb:d2:cb:58:68:5e:c0:23:a8:74:f0:6b: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D6:03:E0:68:71:29:D0:71:6F:27:B8:0A:E0:57:3D:1E:86:68:C8 X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36352e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.65.0/24 Signature Algorithm: sha256WithRSAEncryption 34:6f:67:87:75:48:3e:c8:b7:8f:44:08:bb:b4:0f:ac:9e:14: 40:46:35:38:40:1b:05:a1:24:68:ad:72:e3:ea:48:19:56:96: 7a:7c:f3:eb:33:f0:3e:87:41:18:18:81:cd:a7:b5:21:36:c0: f9:31:15:15:5c:5c:09:c1:44:cd:e9:3d:e7:b3:ce:1f:9c:1e: 6d:f2:0e:81:29:a3:17:03:07:46:c8:a9:b0:2e:57:2e:53:59: 1d:0b:ca:4c:b7:65:1b:66:78:97:a1:be:56:e3:db:e2:b9:d7: 0c:f7:de:70:8d:13:bc:54:38:10:e6:07:c0:6d:0e:9d:20:c7: a8:22:07:8b:e3:f4:a2:97:c8:3a:4a:21:d0:e2:4a:36:80:27: 3e:76:6e:42:4e:f8:bd:e7:dc:8b:8a:f6:99:b1:83:f8:fe:aa: 1d:77:5b:f6:e9:f8:b7:b9:8e:0e:71:37:dc:74:44:89:95:9c: 59:0a:64:08:4d:af:82:93:e0:02:05:84:4f:26:b3:76:f8:ad: 14:ea:09:15:19:b1:eb:73:14:f0:4f:ba:f3:5a:4a:35:af:07: f6:16:61:8f:61:6d:1f:0d:d0:70:78:9f:12:17:a2:f9:7c:59: 75:fc:07:e3:5f:2f:44:1b:6a:ea:dc:f2:d6:c2:8c:93:aa:0f: 5e:0c:b0:41 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUDSKqO71ATHJRMjBsl6nS0oSj6ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzVaFw0yNzAxMDcyMDQ1MzVaMDMxMTAvBgNV BAMTKEQ2RDYwM0UwNjg3MTI5RDA3MTZGMjdCODBBRTA1NzNEMUU4NjY4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlNm6bW9gHxf/jclzEXGWSv1I 6/tsoYSN4wRDcc4mmsLQiHviJZYjQk5QgO/71Hyk0IfEvK+KR4BVII86VuehSS99 YSCUhm4Y+QDG+YO1Gnzc6lS2Kxowe/X0UmWQJUiw0DXwvxY/OkkYl3ysUq+aWmav kOGa60zRAZMI3V5cu16nj2v7FfadePC9lWtOweL0zwr3GYA2OhkpzZgR0WXZF/wa 6K4JT8Gu+QQ4y8ZwjQM/LaA6m/h9iJoYcKJeLZ7oVSUE4Utqv1Iu3do9Ih3t73iO 5hgmnC0MIGry/YzTNYn2Uv0nB61DjAJ704V8A13ud/vSy1hoXsAjqHTwa+8FAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU1tYD4GhxKdBxbye4CuBXPR6GaMgwHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZQTANBgkqhkiG9w0BAQsFAAOCAQEANG9nh3VIPsi3 j0QIu7QPrJ4UQEY1OEAbBaEkaK1y4+pIGVaWenzz6zPwPodBGBiBzae1ITbA+TEV FVxcCcFEzek957POH5webfIOgSmjFwMHRsipsC5XLlNZHQvKTLdlG2Z4l6G+VuPb 4rnXDPfecI0TvFQ4EOYHwG0OnSDHqCIHi+P0opfIOkoh0OJKNoAnPnZuQk74vefc i4r2mbGD+P6qHXdb9un4t7mODnE33HREiZWcWQpkCE2vgpPgAgWETyazdvitFOoJ FRmx63MU8E+681pKNa8H9hZhj2FtHw3QcHifEhei+XxZdfwH418vRBtq6tzy1sKM k6oPXgywQQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:34 2026 by rpki-client