This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa File: 3138392e38392e37322e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: MZUseWYes7villf3IlzYoiekn+UQBciUIoA5bOQ/cdg= Subject key identifier: 20:9E:A9:54:1A:23:B9:4B:77:58:11:3D:41:72:EA:DF:F6:6E:C3:DE Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 1A8497EB5916CD62CD613EBC96DAE29CB34CEF15 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:36 +0000 ROA not before: Thu 08 Jan 2026 20:40:36 +0000 ROA not after: Thu 07 Jan 2027 20:45:36 +0000 asID: 28184 IP address blocks: 189.89.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:84:97:eb:59:16:cd:62:cd:61:3e:bc:96:da:e2:9c:b3:4c:ef:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:36 2026 GMT Not After : Jan 7 20:45:36 2027 GMT Subject: CN=209EA9541A23B94B7758113D4172EADFF66EC3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:08:16:a2:a4:4e:c6:3e:72:ac:a8:de:9c: c9:72:65:aa:7f:15:e5:44:45:07:13:21:11:75:67: b0:2f:b5:e5:26:b1:ff:f7:9c:41:5d:c8:b8:d7:e0: e4:e0:80:03:71:ff:55:a3:44:a8:d6:1e:6f:f1:f4: 84:3f:b9:06:6b:fc:4d:06:d1:3a:f6:c8:c7:22:18: 4b:0e:92:4f:40:5b:8c:1b:53:15:47:c7:0e:20:b7: 40:82:f0:11:30:fc:95:c2:d3:04:dd:cf:ed:fa:cc: 06:05:d8:99:95:c9:f3:dd:a0:35:f0:60:db:c6:57: b6:f6:69:67:a1:90:a0:a7:4c:75:94:6f:43:fa:dc: de:1a:84:dd:83:ce:2e:d3:4a:5a:bc:27:73:37:3b: fe:d7:99:44:52:1b:87:d6:07:6b:3e:29:8d:ee:c4: c4:53:3d:21:b5:77:31:21:38:7b:52:c2:9c:05:49: 56:f4:bc:ef:90:32:c9:93:1c:ab:22:6e:4d:80:f6: 94:e6:da:cb:27:ee:da:6e:aa:b7:0b:cd:c4:17:b8: 72:c0:71:b4:64:a7:53:4b:0a:a3:9a:99:61:33:63: d8:21:ad:e3:f5:b0:4d:41:97:02:ab:1a:03:5a:14: 1a:18:f3:2a:bf:79:a8:fe:71:29:4c:bf:af:7c:85: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9E:A9:54:1A:23:B9:4B:77:58:11:3D:41:72:EA:DF:F6:6E:C3:DE X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.72.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:e1:5c:38:46:53:f6:9b:cf:fd:32:86:5a:40:9f:9b:c5:cf: 34:42:9c:d6:55:e1:7d:be:dd:4b:2b:e6:d1:91:a5:9f:89:a5: bf:f2:23:9d:ea:9b:7d:f4:23:3f:d1:78:b3:4a:61:96:bc:9e: 17:e4:b1:47:cc:f5:8f:64:28:0e:89:e3:bf:64:0a:e2:b9:7d: 8d:9c:ca:13:05:0b:ec:6c:5e:25:86:67:45:9d:25:fb:40:3d: 3e:98:cd:00:19:69:ed:f9:0a:5d:9b:f2:25:71:e6:74:bd:8a: b7:75:94:f2:10:5c:cc:8a:7d:0b:08:d2:88:b7:d8:e7:8b:57: 70:fa:98:5b:6b:32:12:b2:77:7d:b7:e9:93:a6:f1:b1:9a:04: 09:b2:e3:97:a4:7b:00:8a:37:b9:94:ee:0f:a9:1f:ed:8d:a6: 9b:86:63:8c:a7:19:ed:87:57:a4:1b:01:c5:f8:d3:fb:0d:f5: 7d:7b:a7:95:aa:f6:c5:3b:44:df:59:e8:7d:f3:5c:ae:dc:58: e3:69:26:f0:4f:17:ea:3f:f7:86:6c:b6:32:c2:1e:78:c9:b8: b7:e3:a4:24:02:77:5a:56:5b:ec:c5:03:65:fd:91:6a:54:ef: 3e:16:71:d5:12:d3:c5:6b:25:db:75:42:92:64:80:ff:0f:e4: 56:29:b5:d4 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUGoSX61kWzWLNYT68ltrinLNM7xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV BAMTKDIwOUVBOTU0MUEyM0I5NEI3NzU4MTEzRDQxNzJFQURGRjY2RUMzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoAgWoqROxj5yrKjenMlyZap/ FeVERQcTIRF1Z7AvteUmsf/3nEFdyLjX4OTggANx/1WjRKjWHm/x9IQ/uQZr/E0G 0Tr2yMciGEsOkk9AW4wbUxVHxw4gt0CC8BEw/JXC0wTdz+36zAYF2JmVyfPdoDXw YNvGV7b2aWehkKCnTHWUb0P63N4ahN2Dzi7TSlq8J3M3O/7XmURSG4fWB2s+KY3u xMRTPSG1dzEhOHtSwpwFSVb0vO+QMsmTHKsibk2A9pTm2ssn7tpuqrcLzcQXuHLA cbRkp1NLCqOamWEzY9ghreP1sE1BlwKrGgNaFBoY8yq/eaj+cSlMv698hdK3AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUIJ6pVBojuUt3WBE9QXLq3/Zuw94wHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZSDANBgkqhkiG9w0BAQsFAAOCAQEAauFcOEZT9pvP /TKGWkCfm8XPNEKc1lXhfb7dSyvm0ZGln4mlv/IjneqbffQjP9F4s0phlryeF+Sx R8z1j2QoDonjv2QK4rl9jZzKEwUL7GxeJYZnRZ0l+0A9PpjNABlp7fkKXZvyJXHm dL2Kt3WU8hBczIp9CwjSiLfY54tXcPqYW2syErJ3fbfpk6bxsZoECbLjl6R7AIo3 uZTuD6kf7Y2mm4ZjjKcZ7YdXpBsBxfjT+w31fXunlar2xTtE31noffNcrtxY42km 8E8X6j/3hmy2MsIeeMm4t+OkJAJ3WlZb7MUDZf2RalTvPhZx1RLTxWsl23VCkmSA /w/kVim11A== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:28 2026 by rpki-client