This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36372e302f32342d3234203d3e203238313834.roa File: 3138392e38392e36372e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: scs62XtxpNcDsUU698KuA74Fl3FF3yheLZdcLbkQTYE= Subject key identifier: 02:3A:98:62:EB:D1:E9:3B:27:B3:FF:9F:D6:47:A2:95:7A:2F:80:5F Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 55B66A15EA4CC30A7A955BE396DFDCD242A26509 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36372e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:36 +0000 ROA not before: Thu 08 Jan 2026 20:40:36 +0000 ROA not after: Thu 07 Jan 2027 20:45:36 +0000 asID: 28184 IP address blocks: 189.89.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 08:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b6:6a:15:ea:4c:c3:0a:7a:95:5b:e3:96:df:dc:d2:42:a2:65:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:36 2026 GMT Not After : Jan 7 20:45:36 2027 GMT Subject: CN=023A9862EBD1E93B27B3FF9FD647A2957A2F805F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:47:e3:66:f6:08:f7:b6:40:9c:db:ad:bf: 1b:8a:c2:ed:a2:8a:dd:93:89:5a:11:15:cb:07:79: 98:6d:8a:af:aa:e7:fc:81:fc:31:de:8c:1b:57:43: 76:fc:44:67:98:c9:5c:89:f5:db:57:36:dc:1c:b7: 93:16:7b:1f:8e:ad:63:8f:bd:2f:39:ec:17:85:99: b4:f8:4e:83:1a:85:7d:33:7c:c7:70:92:53:5b:a8: 95:aa:c3:1e:eb:0c:08:0b:d3:c3:76:ce:ac:95:55: 09:53:1d:4d:25:7f:2d:8f:44:88:c8:0f:63:f0:5f: 89:c2:88:fd:92:fb:f8:f2:9c:3f:c2:a8:29:8b:ef: 70:34:1c:ce:cb:d8:d0:05:5c:54:ce:b9:96:c8:e6: 09:31:5d:da:c3:ca:62:c6:d5:fb:97:4d:41:1a:88: c6:1e:1b:87:fa:23:56:44:8d:fd:cc:a5:ba:ed:67: 29:da:9d:17:58:8f:42:3a:92:4d:38:b7:6d:13:91: 01:e0:77:b0:e2:57:1a:39:7d:49:b0:9e:b3:70:da: 05:4d:d3:5d:55:8b:19:3c:d7:fb:40:12:c2:b3:3e: 67:af:a6:74:c0:e2:d6:95:48:84:5e:b5:20:86:36: 6c:6f:8c:a8:c1:ef:43:df:67:31:8e:48:4b:fd:20: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3A:98:62:EB:D1:E9:3B:27:B3:FF:9F:D6:47:A2:95:7A:2F:80:5F X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36372e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.67.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:fe:e0:ca:f7:47:ac:0d:d7:0a:dd:1e:cc:26:5a:08:fb:c1: 35:1f:4c:f0:3a:42:18:b2:4e:bf:1a:cf:bc:83:8a:91:cf:8c: d8:e2:0a:52:9d:59:86:75:d0:ec:14:ed:d9:2d:66:7e:b4:b3: eb:1a:57:6b:86:e9:bc:e1:52:37:69:9d:28:61:36:64:5c:93: 52:7d:f6:70:c2:b6:8a:00:cc:5e:8c:20:10:d4:57:54:08:9e: b9:cb:79:ff:ed:8b:1b:c2:d5:b0:ec:e9:d9:38:42:16:36:a9: 90:80:b0:1b:94:9b:6e:57:43:88:13:98:b8:b8:33:2f:1e:44: 83:e1:23:ee:47:dd:b6:24:46:c6:4b:22:2f:01:b6:79:28:c1: 30:78:a0:d0:0e:00:1e:42:e8:54:1c:5f:f0:87:b0:f2:d3:61: 4d:25:5a:eb:8c:0e:cc:80:8e:eb:17:a6:f5:ad:7f:78:e7:67: a9:7f:d0:41:fc:29:1c:87:3a:62:81:60:75:87:75:24:28:03: d3:c5:d4:66:64:ba:4a:17:c7:71:24:7f:37:9c:4b:7f:7f:02: 11:bb:c6:3e:c0:20:f1:b1:dc:6d:4d:a2:cb:6a:b7:44:56:e7: 3d:05:84:eb:f0:55:cf:c6:e6:31:cf:84:e0:0e:14:0e:f4:59: 8e:0e:49:92 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUVbZqFepMwwp6lVvjlt/c0kKiZQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV BAMTKDAyM0E5ODYyRUJEMUU5M0IyN0IzRkY5RkQ2NDdBMjk1N0EyRjgwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEH0fjZvYI97ZAnNutvxuKwu2i it2TiVoRFcsHeZhtiq+q5/yB/DHejBtXQ3b8RGeYyVyJ9dtXNtwct5MWex+OrWOP vS857BeFmbT4ToMahX0zfMdwklNbqJWqwx7rDAgL08N2zqyVVQlTHU0lfy2PRIjI D2PwX4nCiP2S+/jynD/CqCmL73A0HM7L2NAFXFTOuZbI5gkxXdrDymLG1fuXTUEa iMYeG4f6I1ZEjf3MpbrtZynanRdYj0I6kk04t20TkQHgd7DiVxo5fUmwnrNw2gVN 011Vixk81/tAEsKzPmevpnTA4taVSIRetSCGNmxvjKjB70PfZzGOSEv9IIC7AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUAjqYYuvR6Tsns/+f1keilXovgF8wHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZQzANBgkqhkiG9w0BAQsFAAOCAQEAC/7gyvdHrA3X Ct0ezCZaCPvBNR9M8DpCGLJOvxrPvIOKkc+M2OIKUp1ZhnXQ7BTt2S1mfrSz6xpX a4bpvOFSN2mdKGE2ZFyTUn32cMK2igDMXowgENRXVAieuct5/+2LG8LVsOzp2ThC FjapkICwG5SbbldDiBOYuLgzLx5Eg+Ej7kfdtiRGxksiLwG2eSjBMHig0A4AHkLo VBxf8Iew8tNhTSVa64wOzICO6xem9a1/eOdnqX/QQfwpHIc6YoFgdYd1JCgD08XU ZmS6ShfHcSR/N5xLf38CEbvGPsAg8bHcbU2iy2q3RFbnPQWE6/BVz8bmMc+E4A4U DvRZjg5Jkg== -----END CERTIFICATE-----Generated at Sat Jan 10 21:10:03 2026 by rpki-client