This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa File: 3138392e38392e37312e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: wnIJ/DIE7SI53rNDud1pHlF+7NjUh2IYuGUGENVjFbE= Subject key identifier: 33:8D:3E:A8:EB:88:A0:A6:E8:DB:9F:B0:60:F8:E8:A9:F9:3C:71:FD Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 1F7AF34B6248D588B140B6479F41A0858FF11312 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:36 +0000 ROA not before: Thu 08 Jan 2026 20:40:36 +0000 ROA not after: Thu 07 Jan 2027 20:45:36 +0000 asID: 28184 IP address blocks: 189.89.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7a:f3:4b:62:48:d5:88:b1:40:b6:47:9f:41:a0:85:8f:f1:13:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:36 2026 GMT Not After : Jan 7 20:45:36 2027 GMT Subject: CN=338D3EA8EB88A0A6E8DB9FB060F8E8A9F93C71FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:d0:dd:cd:76:ba:fc:fc:ae:f6:78:8f:1a: ac:00:9a:01:f1:09:a6:92:af:9a:d3:a8:3e:34:59: 56:18:ff:60:dd:77:ce:ae:89:55:73:75:bc:ae:08: 91:ba:c1:23:46:42:ed:b7:bb:aa:80:ef:d3:78:65: 2e:db:ea:5b:02:58:41:e5:ae:49:b0:51:00:5f:60: 07:72:04:b7:15:65:13:0d:25:cf:fa:84:92:07:f2: 8e:73:87:d5:5f:49:66:a2:cb:03:99:8a:06:f4:89: e5:75:9e:8a:6d:6c:04:12:61:d8:a3:10:67:96:ec: 10:13:8e:48:ca:42:37:b4:f0:19:85:40:60:f3:51: 35:a3:20:7f:5b:e5:64:8b:27:4c:25:f9:bb:7d:24: 27:62:33:38:ae:10:58:a0:be:3a:97:e9:47:7e:9b: 78:11:72:2a:ce:47:e9:1a:ad:b0:19:8f:c1:b4:05: 6e:a0:33:cb:45:1d:3c:97:f0:85:fd:ad:2b:c7:04: 96:4e:dd:dc:28:e9:31:4d:e3:23:8f:d7:65:da:a5: aa:37:d7:3f:e4:6c:d6:6f:de:3b:f0:06:dd:53:99: 81:6a:8c:34:7f:f5:12:df:9a:b1:4f:d3:86:e6:8b: 34:15:01:be:13:df:c4:b5:b2:7a:e1:08:fe:19:67: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:3E:A8:EB:88:A0:A6:E8:DB:9F:B0:60:F8:E8:A9:F9:3C:71:FD X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.71.0/24 Signature Algorithm: sha256WithRSAEncryption 33:cf:60:9e:dc:95:a5:fa:c9:5e:bd:b3:a3:80:78:c7:a0:df: 82:b2:d2:75:34:d3:5d:31:24:5c:df:f7:b8:a7:00:82:b2:03: 38:d8:5b:e8:b5:c6:b5:26:8a:d1:ab:f8:d5:44:35:9d:38:bc: 63:14:f3:e4:46:d0:1e:09:94:94:57:a9:3f:3e:12:e7:58:f0: 72:fb:8b:13:24:99:1c:b3:f4:80:3d:76:16:54:52:6d:b5:1d: 05:a8:0a:bd:4e:f8:c1:11:c0:7a:76:aa:e8:3f:40:5d:16:4f: c6:90:a1:e0:8d:e4:a0:b7:3d:20:39:3b:d4:6f:6a:ee:ce:81: a7:72:94:b5:04:b0:36:39:89:17:2b:3b:5f:b3:0a:81:0c:86: c1:9c:9a:e8:95:2b:65:ea:e0:e3:5a:ad:bc:4b:75:7a:07:fb: 0b:1a:1e:31:9c:4c:52:52:10:d4:e5:bc:7d:5c:be:d7:e5:a7: 7a:ef:43:d2:95:b7:52:90:0a:e0:21:68:55:24:93:0a:7e:3f: a9:58:55:2c:fa:fd:6a:fd:d5:fa:78:45:4b:b4:ad:22:b5:53: d1:eb:01:cb:76:55:67:e9:6e:8f:24:b8:01:c8:74:12:7e:d4: 1c:b1:86:4a:3f:fc:1a:03:e9:60:21:78:29:3d:2f:8d:42:b2: c7:cf:b8:28 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUH3rzS2JI1YixQLZHn0GghY/xExIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV BAMTKDMzOEQzRUE4RUI4OEEwQTZFOERCOUZCMDYwRjhFOEE5RjkzQzcxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRtDdzXa6/Pyu9niPGqwAmgHx CaaSr5rTqD40WVYY/2Ddd86uiVVzdbyuCJG6wSNGQu23u6qA79N4ZS7b6lsCWEHl rkmwUQBfYAdyBLcVZRMNJc/6hJIH8o5zh9VfSWaiywOZigb0ieV1noptbAQSYdij EGeW7BATjkjKQje08BmFQGDzUTWjIH9b5WSLJ0wl+bt9JCdiMziuEFigvjqX6Ud+ m3gRcirOR+karbAZj8G0BW6gM8tFHTyX8IX9rSvHBJZO3dwo6TFN4yOP12Xapao3 1z/kbNZv3jvwBt1TmYFqjDR/9RLfmrFP04bmizQVAb4T38S1snrhCP4ZZ4vFAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUM40+qOuIoKbo25+wYPjoqfk8cf0wHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZRzANBgkqhkiG9w0BAQsFAAOCAQEAM89gntyVpfrJ Xr2zo4B4x6DfgrLSdTTTXTEkXN/3uKcAgrIDONhb6LXGtSaK0av41UQ1nTi8YxTz 5EbQHgmUlFepPz4S51jwcvuLEySZHLP0gD12FlRSbbUdBagKvU74wRHAenaq6D9A XRZPxpCh4I3koLc9IDk71G9q7s6Bp3KUtQSwNjmJFys7X7MKgQyGwZya6JUrZerg 41qtvEt1egf7CxoeMZxMUlIQ1OW8fVy+1+Wneu9D0pW3UpAK4CFoVSSTCn4/qVhV LPr9av3V+nhFS7StIrVT0esBy3ZVZ+lujyS4Ach0En7UHLGGSj/8GgPpYCF4KT0v jUKyx8+4KA== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:31 2026 by rpki-client