This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32342d3234203d3e203238313834.roa File: 3138392e38392e37302e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: hTSlMASJKXP40CUanp1Mg1tTpJa9XFtuA9ZPNpPMkyc= Subject key identifier: 66:B7:62:3C:8F:0A:38:AF:74:D3:77:C6:2D:24:C3:F1:90:14:D1:9A Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 5ADA239AF93DE1516D5F37465FC476E515CA9314 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:35 +0000 ROA not before: Thu 08 Jan 2026 20:40:35 +0000 ROA not after: Thu 07 Jan 2027 20:45:35 +0000 asID: 28184 IP address blocks: 189.89.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:da:23:9a:f9:3d:e1:51:6d:5f:37:46:5f:c4:76:e5:15:ca:93:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:35 2026 GMT Not After : Jan 7 20:45:35 2027 GMT Subject: CN=66B7623C8F0A38AF74D377C62D24C3F19014D19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:e9:8d:ac:b0:a2:ef:fc:85:eb:24:4e:72: ef:08:1f:1a:58:9c:56:83:62:53:65:63:e6:87:f5: ed:7f:39:93:33:1a:b5:24:92:97:d6:02:bf:d7:a1: 71:fe:2e:b9:fb:99:64:ce:c4:c5:d5:37:f7:49:76: 23:be:1e:bb:c2:ff:5b:9f:b2:0d:80:c7:56:b7:7a: 99:4a:58:54:ad:7c:45:d3:4f:5a:30:6e:a4:13:a9: 1a:d1:af:2d:ad:90:52:15:f0:86:e5:99:62:8f:03: d6:ff:10:c3:65:96:a4:42:d8:c5:dc:13:eb:85:45: 8d:45:91:6d:88:ea:97:dd:ac:a0:65:b7:63:88:db: 64:b2:66:70:0a:48:03:2b:99:e2:49:95:bb:54:0c: 2f:92:2d:51:6f:3d:38:8b:43:75:89:b8:c2:59:53: 9f:22:ca:fc:0c:52:23:cb:cc:a3:7a:9a:78:a8:a7: 41:15:6a:bd:ee:2f:14:fa:68:fd:12:77:d0:ac:ba: e7:73:03:0a:b5:81:6d:75:47:39:1b:ee:af:90:81: 9a:b6:9c:da:f1:90:85:92:92:1b:86:e1:b3:a9:3e: 12:ae:ee:82:0c:c7:ba:ec:2c:2c:7b:e3:b8:a3:2b: 6d:5a:cb:12:cb:6f:3b:b4:b9:c1:9a:63:22:5a:44: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B7:62:3C:8F:0A:38:AF:74:D3:77:C6:2D:24:C3:F1:90:14:D1:9A X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:af:e8:68:c5:21:05:7b:2b:10:f2:2a:3c:2b:5f:b0:f0:31: 66:1e:a4:f8:3e:81:22:52:d0:58:a5:ed:0b:e8:ac:76:ac:b1: eb:87:bd:26:2d:6d:b3:f5:3b:6f:ce:0b:1e:e1:7f:17:c6:7f: fe:87:52:fd:90:5b:84:1b:67:ff:fb:36:1c:8b:04:f7:fc:56: 96:48:9f:c3:32:bb:33:fa:75:24:e5:63:c1:50:c1:57:76:0b: 54:fc:00:57:4f:38:4a:61:c1:6b:65:7d:d8:25:8f:22:ac:95: a9:06:b6:e4:2e:e3:4f:cb:bc:37:67:01:ea:f2:33:30:3b:3c: 14:f8:4b:6a:14:99:19:59:17:61:48:a2:23:d4:51:ec:b1:da: 90:12:ed:d8:4e:c9:be:68:e7:b1:2e:41:fe:9d:c7:8c:c3:03: 77:f3:97:73:93:af:3d:d5:6e:c3:77:da:3b:ce:b4:3e:a2:31: db:c8:f5:4b:4e:29:bd:52:a4:f3:49:71:eb:dc:00:07:75:aa: 0c:9d:d2:ab:15:4e:d5:b1:e0:16:66:fa:c1:1b:ee:30:e7:b9: 82:10:89:5f:4f:f9:58:1e:2a:4a:d0:cd:d3:51:df:a6:10:66: f1:f4:5e:0d:4b:5d:bf:4e:bd:90:ce:76:cd:97:26:76:14:3e: fd:5d:9f:65 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUWtojmvk94VFtXzdGX8R25RXKkxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzVaFw0yNzAxMDcyMDQ1MzVaMDMxMTAvBgNV BAMTKDY2Qjc2MjNDOEYwQTM4QUY3NEQzNzdDNjJEMjRDM0YxOTAxNEQxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsumNrLCi7/yF6yROcu8IHxpY nFaDYlNlY+aH9e1/OZMzGrUkkpfWAr/XoXH+Lrn7mWTOxMXVN/dJdiO+HrvC/1uf sg2Ax1a3eplKWFStfEXTT1owbqQTqRrRry2tkFIV8IblmWKPA9b/EMNllqRC2MXc E+uFRY1FkW2I6pfdrKBlt2OI22SyZnAKSAMrmeJJlbtUDC+SLVFvPTiLQ3WJuMJZ U58iyvwMUiPLzKN6mniop0EVar3uLxT6aP0Sd9CsuudzAwq1gW11Rzkb7q+QgZq2 nNrxkIWSkhuG4bOpPhKu7oIMx7rsLCx747ijK21ayxLLbzu0ucGaYyJaRNqhAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUZrdiPI8KOK9003fGLSTD8ZAU0ZowHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZRjANBgkqhkiG9w0BAQsFAAOCAQEAPa/oaMUhBXsr EPIqPCtfsPAxZh6k+D6BIlLQWKXtC+isdqyx64e9Ji1ts/U7b84LHuF/F8Z//odS /ZBbhBtn//s2HIsE9/xWlkifwzK7M/p1JOVjwVDBV3YLVPwAV084SmHBa2V92CWP IqyVqQa25C7jT8u8N2cB6vIzMDs8FPhLahSZGVkXYUiiI9RR7LHakBLt2E7Jvmjn sS5B/p3HjMMDd/OXc5OvPdVuw3faO860PqIx28j1S04pvVKk80lx69wAB3WqDJ3S qxVO1bHgFmb6wRvuMOe5ghCJX0/5WB4qStDN01HfphBm8fReDUtdv069kM52zZcm dhQ+/V2fZQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:32 2026 by rpki-client