This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32342d3234203d3e203238313834.roa File: 3138392e38392e36362e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: Xvkz3IH6hcqIXDr3q9wHlRzpwXDu6gXk3NIRcW3YiFs= Subject key identifier: 0B:7E:C0:DE:76:7D:4A:87:53:BF:D2:71:75:DC:FB:E9:F1:5E:49:F7 Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 29C8C070F79620A8E5ED8F738CC17DE10AF7A75A Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:34 +0000 ROA not before: Thu 08 Jan 2026 20:40:34 +0000 ROA not after: Thu 07 Jan 2027 20:45:34 +0000 asID: 28184 IP address blocks: 189.89.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c8:c0:70:f7:96:20:a8:e5:ed:8f:73:8c:c1:7d:e1:0a:f7:a7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:34 2026 GMT Not After : Jan 7 20:45:34 2027 GMT Subject: CN=0B7EC0DE767D4A8753BFD27175DCFBE9F15E49F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:75:59:1f:bc:9b:9e:b9:36:ee:e6:54:8b: 72:92:2e:cc:34:4e:60:df:b3:c0:72:bc:68:ce:2e: e1:e6:f2:3f:1a:5a:16:87:5d:48:dc:e7:a6:15:85: 6c:1d:7d:92:59:c8:15:d3:45:88:ac:90:ed:90:70: 6f:c6:a1:6d:55:78:28:fc:37:f5:82:1e:c1:e6:80: a6:8d:2f:a4:ed:ea:2e:fd:2f:7a:fc:9c:c0:07:00: bf:62:65:07:5d:a8:27:c5:c8:69:cc:96:97:95:41: 89:39:22:e7:ad:bc:94:9b:58:be:7e:93:c9:91:c8: ca:6c:70:cd:9d:9d:21:01:83:00:24:85:1f:78:d1: 39:28:df:c9:a3:5d:cf:bb:3e:98:9d:ed:c5:e9:9c: 10:8d:c3:77:5a:24:48:6a:4f:bb:e0:de:e3:63:18: 5f:a5:9b:a4:a3:31:3c:e0:38:9c:ed:64:f1:b5:b1: 43:98:48:59:8e:d1:62:da:bf:92:6d:60:e6:61:27: 32:ba:c2:d9:54:a0:ba:09:4c:6f:bc:a6:39:0f:66: 1f:0d:88:7d:d3:71:ce:35:20:c5:fb:76:a5:99:42: 20:83:8c:bc:a5:23:31:dd:37:f5:42:1b:90:6c:73: 38:81:1c:cf:4e:43:db:9e:f5:10:39:f1:2b:03:dc: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7E:C0:DE:76:7D:4A:87:53:BF:D2:71:75:DC:FB:E9:F1:5E:49:F7 X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36362e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.66.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:aa:39:89:5e:96:5d:e6:27:53:04:0a:67:88:51:1a:bd:4d: 84:5c:da:1d:20:e2:82:c1:48:7f:c0:29:51:40:92:a5:e7:08: 09:4b:63:c8:da:22:2e:e5:1b:93:1b:09:31:2f:79:4b:71:12: 60:dc:c9:93:26:4e:66:a5:b6:90:ce:a3:1d:4f:82:9a:e4:0b: 0a:b3:64:f1:e6:ba:35:29:25:d1:d5:04:46:12:1d:31:04:64: 73:be:43:83:e0:73:be:0e:20:24:27:ba:3d:60:1c:69:c0:be: 15:27:b9:35:17:7a:48:ee:5a:d8:b3:d3:d6:14:0d:36:1c:d5: 3b:c0:97:dd:0a:38:e4:98:fb:69:41:7c:d3:8d:6e:c8:22:35: 0f:ae:0d:48:2f:cc:ae:11:8d:74:7b:0d:25:3f:fc:db:39:8d: c3:cf:8e:30:b8:41:96:ed:e6:7f:de:e4:7a:f0:e9:54:41:17: b9:55:53:a4:24:cd:85:83:f2:95:59:de:67:50:b4:2b:3c:d3: 7a:83:81:c3:1a:5a:ce:f8:e1:ec:98:4c:ae:8e:b2:24:c8:19: 7c:43:99:7e:ea:53:86:9f:f2:39:72:14:7c:84:e8:93:34:43: 8d:63:75:5d:e9:64:20:8f:fa:27:3c:ac:50:45:be:48:7c:86: 74:be:ec:fe -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUKcjAcPeWIKjl7Y9zjMF94Qr3p1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzRaFw0yNzAxMDcyMDQ1MzRaMDMxMTAvBgNV BAMTKDBCN0VDMERFNzY3RDRBODc1M0JGRDI3MTc1RENGQkU5RjE1RTQ5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdnVZH7ybnrk27uZUi3KSLsw0 TmDfs8ByvGjOLuHm8j8aWhaHXUjc56YVhWwdfZJZyBXTRYiskO2QcG/GoW1VeCj8 N/WCHsHmgKaNL6Tt6i79L3r8nMAHAL9iZQddqCfFyGnMlpeVQYk5IuetvJSbWL5+ k8mRyMpscM2dnSEBgwAkhR940Tko38mjXc+7Ppid7cXpnBCNw3daJEhqT7vg3uNj GF+lm6SjMTzgOJztZPG1sUOYSFmO0WLav5JtYOZhJzK6wtlUoLoJTG+8pjkPZh8N iH3Tcc41IMX7dqWZQiCDjLylIzHdN/VCG5BscziBHM9OQ9ue9RA58SsD3LpnAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUC37A3nZ9SodTv9Jxddz76fFeSfcwHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZQjANBgkqhkiG9w0BAQsFAAOCAQEAm6o5iV6WXeYn UwQKZ4hRGr1NhFzaHSDigsFIf8ApUUCSpecICUtjyNoiLuUbkxsJMS95S3ESYNzJ kyZOZqW2kM6jHU+CmuQLCrNk8ea6NSkl0dUERhIdMQRkc75Dg+Bzvg4gJCe6PWAc acC+FSe5NRd6SO5a2LPT1hQNNhzVO8CX3Qo45Jj7aUF8041uyCI1D64NSC/MrhGN dHsNJT/82zmNw8+OMLhBlu3mf97kevDpVEEXuVVTpCTNhYPylVneZ1C0KzzTeoOB wxpazvjh7JhMro6yJMgZfEOZfupThp/yOXIUfITokzRDjWN1XelkII/6JzysUEW+ SHyGdL7s/g== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:32 2026 by rpki-client