This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa File: 3138392e38392e37362e302f32332d3233203d3e203238313834.roa (raw, json) Hash identifier: YXlEaoQ8H5IqU4WXgRa7RjCAirU0uOUp5G/PSLwlaTk= Subject key identifier: 4B:67:F1:33:9E:63:97:83:D2:83:CD:C2:A1:CC:64:68:50:BA:3B:9F Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 40924D04A43B7FB8EE6BDD0FA2EA5B9D4D6BAEAB Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:36 +0000 ROA not before: Thu 08 Jan 2026 20:40:36 +0000 ROA not after: Thu 07 Jan 2027 20:45:36 +0000 asID: 28184 IP address blocks: 189.89.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:92:4d:04:a4:3b:7f:b8:ee:6b:dd:0f:a2:ea:5b:9d:4d:6b:ae:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:36 2026 GMT Not After : Jan 7 20:45:36 2027 GMT Subject: CN=4B67F1339E639783D283CDC2A1CC646850BA3B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:2e:2c:9c:06:28:43:52:0d:16:e3:12:80: 45:55:1b:ee:10:93:90:5a:0c:3c:72:3a:f2:de:64: 40:19:9a:2a:62:74:0b:42:11:2c:70:19:56:d5:dd: 09:e0:b6:2f:23:e1:96:82:a9:6c:7e:6d:60:17:ee: 88:62:28:c5:30:83:99:50:8f:b9:e8:18:06:16:3f: 30:c5:4b:d5:76:ac:c0:c2:9d:e3:95:d7:e8:39:fa: a7:e2:8c:58:e0:e5:43:fe:20:5d:60:2f:fd:67:6c: 8e:6c:e7:e8:c5:16:c1:db:13:38:33:b0:e1:5f:0e: 60:48:19:9f:09:c2:f7:f1:6a:ed:28:ab:f9:12:f6: e0:31:d7:fb:6e:1c:5c:d6:40:43:a5:c4:f9:75:e6: 8c:f1:65:49:05:6c:9d:7e:47:d2:77:0d:68:df:b8: 0d:76:89:68:6c:34:6b:7f:dd:54:66:e9:c4:90:99: 08:62:93:c0:33:5a:1e:3b:3f:c4:cd:c8:08:72:0c: 34:cb:0d:11:23:5e:ce:8c:b1:99:6c:75:55:5e:08: 53:f4:ac:79:c3:4f:a9:15:16:02:0c:3f:de:1e:40: 96:ea:e7:12:a8:0f:c8:ec:fc:79:c4:34:95:c0:c1: 13:06:26:db:7a:3f:e8:a2:fc:d2:65:87:31:d7:1c: 2f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:67:F1:33:9E:63:97:83:D2:83:CD:C2:A1:CC:64:68:50:BA:3B:9F X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.76.0/23 Signature Algorithm: sha256WithRSAEncryption 56:e2:ba:cb:13:02:38:5c:90:2f:d6:a9:dd:d3:bf:7b:bc:f7: 18:22:89:01:1e:4b:8a:94:1d:c4:a7:06:c1:e9:24:f2:ee:e7: 73:fe:b2:ba:c5:ed:01:8d:ea:e6:63:5b:00:2f:18:32:43:1f: f9:58:34:b9:f5:77:57:b3:d7:40:1c:07:a9:55:e1:d5:3b:5f: 00:a2:3b:ed:87:68:18:94:c1:13:ef:0a:ef:90:9a:52:59:88: 69:af:3e:6d:8d:e0:27:06:01:e3:56:2c:9b:01:c9:0c:26:d7: 52:b4:36:69:01:1b:b5:92:0c:ab:83:80:9a:a1:3f:4b:50:b7: 3f:3a:61:b0:96:3b:a7:93:c1:16:56:47:a4:ef:61:87:36:8d: c9:dd:bc:ef:6d:36:ac:af:2a:c6:ce:42:db:90:31:ee:d3:65: 62:6c:3c:c0:c2:8b:76:6f:b7:6a:51:98:22:1c:e9:85:e4:49: cd:07:6b:91:26:81:70:3b:31:d4:c9:8a:75:66:59:cb:69:14: b8:50:67:5e:52:3c:48:a2:60:75:83:2b:88:c8:75:c4:55:8a: 2a:24:69:db:2a:63:68:26:b7:0b:66:65:35:1a:72:aa:84:80: 69:27:54:cb:50:39:62:bb:46:90:99:ed:1c:9c:4f:10:08:a2: cb:04:07:6b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUQJJNBKQ7f7jua90PoupbnU1rrqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV BAMTKDRCNjdGMTMzOUU2Mzk3ODNEMjgzQ0RDMkExQ0M2NDY4NTBCQTNCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Mi4snAYoQ1INFuMSgEVVG+4Q k5BaDDxyOvLeZEAZmipidAtCESxwGVbV3Qngti8j4ZaCqWx+bWAX7ohiKMUwg5lQ j7noGAYWPzDFS9V2rMDCneOV1+g5+qfijFjg5UP+IF1gL/1nbI5s5+jFFsHbEzgz sOFfDmBIGZ8Jwvfxau0oq/kS9uAx1/tuHFzWQEOlxPl15ozxZUkFbJ1+R9J3DWjf uA12iWhsNGt/3VRm6cSQmQhik8AzWh47P8TNyAhyDDTLDREjXs6MsZlsdVVeCFP0 rHnDT6kVFgIMP94eQJbq5xKoD8js/HnENJXAwRMGJtt6P+ii/NJlhzHXHC+5AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUS2fxM55jl4PSg83CocxkaFC6O58wHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAb1ZTDANBgkqhkiG9w0BAQsFAAOCAQEAVuK6yxMCOFyQ L9ap3dO/e7z3GCKJAR5LipQdxKcGwekk8u7nc/6yusXtAY3q5mNbAC8YMkMf+Vg0 ufV3V7PXQBwHqVXh1TtfAKI77YdoGJTBE+8K75CaUlmIaa8+bY3gJwYB41YsmwHJ DCbXUrQ2aQEbtZIMq4OAmqE/S1C3PzphsJY7p5PBFlZHpO9hhzaNyd287202rK8q xs5C25Ax7tNlYmw8wMKLdm+3alGYIhzpheRJzQdrkSaBcDsx1MmKdWZZy2kUuFBn XlI8SKJgdYMriMh1xFWKKiRp2ypjaCa3C2ZlNRpyqoSAaSdUy1A5YrtGkJntHJxP EAiiywQHaw== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:36 2026 by rpki-client