This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa File: 3138392e38392e37372e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: wkPPbDtGeiPNBR1EVcyezjaFOggwgF4UWMWFPEap4zw= Subject key identifier: CA:B0:79:17:C3:24:7B:84:FE:7E:8A:2A:D3:92:C0:60:91:C2:7C:A1 Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 0C1B32B40EA106DF124BD0A92C81CF16948DC4F6 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:35 +0000 ROA not before: Thu 08 Jan 2026 20:40:35 +0000 ROA not after: Thu 07 Jan 2027 20:45:35 +0000 asID: 28184 IP address blocks: 189.89.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1b:32:b4:0e:a1:06:df:12:4b:d0:a9:2c:81:cf:16:94:8d:c4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:35 2026 GMT Not After : Jan 7 20:45:35 2027 GMT Subject: CN=CAB07917C3247B84FE7E8A2AD392C06091C27CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:41:24:98:78:82:0a:24:d2:68:1d:4a:20: a0:07:aa:ce:ce:74:2a:5f:61:95:82:39:ac:8d:62: 0a:ed:c3:d6:12:22:bd:41:5c:5c:22:01:c2:81:e2: b6:71:07:3f:66:83:c1:7b:69:62:0a:4d:03:cc:67: c7:a5:5f:24:27:e5:26:91:80:99:c0:58:80:58:8c: 53:85:1d:3c:91:62:a2:45:be:28:7a:56:bd:b9:9a: 32:f4:3d:d4:b4:a7:46:e7:4f:e1:6b:da:ba:9a:70: 51:c0:98:17:29:fd:a1:50:20:ac:11:de:de:af:6f: fe:53:23:6a:84:fd:4e:a3:8c:2d:a2:f4:59:4f:a1: 47:f4:b5:0b:aa:f2:9d:34:22:77:ef:6e:8b:3f:c9: 7b:e6:5b:34:73:bc:d9:26:fc:43:ee:f4:cc:a1:3d: 6b:e9:7d:4d:66:6f:e8:4a:82:99:cd:3c:c1:d0:18: bd:0f:b9:76:3a:4a:f2:eb:cf:4b:09:b9:5e:3e:5e: 0c:55:f2:f6:1d:0b:07:0f:a4:ac:f7:2b:32:a4:16: fb:ae:05:2b:c0:f3:e4:c1:07:83:a5:cf:09:3b:b9: b1:5e:d9:a0:2b:37:4a:02:e2:45:27:78:a6:2c:4a: ee:48:87:4b:60:59:18:5d:4f:d4:29:18:53:fb:7b: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B0:79:17:C3:24:7B:84:FE:7E:8A:2A:D3:92:C0:60:91:C2:7C:A1 X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.77.0/24 Signature Algorithm: sha256WithRSAEncryption 87:82:eb:f4:28:72:48:5a:95:54:5f:db:40:20:56:f3:06:2d: 97:c9:5b:1b:c8:4b:3d:10:b4:06:fa:ff:af:56:2d:4a:23:30: 6d:14:46:af:70:c2:56:1f:8e:05:f7:82:c0:ef:cf:ff:5a:91: d0:4a:e5:98:90:10:d8:8e:30:ee:32:ff:60:ac:cd:70:b7:86: 7a:66:c2:eb:32:35:7a:15:c3:11:23:aa:52:93:2f:c8:89:3e: 62:17:f5:05:ab:db:1a:83:4f:0f:e3:d0:d3:a6:1d:1b:e7:70: 19:37:e6:69:2b:fd:d8:ff:4b:55:08:6b:21:b2:b6:23:c3:64: 60:5a:27:7d:a3:7c:12:02:9f:8a:6a:1c:3c:7e:21:18:88:ea: 5b:24:0d:40:cc:78:a3:17:78:ce:aa:29:cc:e1:da:22:ae:b9: a6:80:81:19:55:32:63:23:9e:3c:94:1f:9f:3a:32:e4:a9:22: 4a:19:2f:3e:5c:a6:30:f1:74:6d:d4:bb:c2:be:a6:6e:d2:0c: ad:57:23:a4:54:0a:b1:1e:d6:12:83:2f:e8:79:4b:db:be:79: 81:8e:af:5d:31:08:60:ef:12:bc:1d:9d:5b:f1:43:02:83:67: 43:7a:af:9d:62:b0:8d:00:fb:4d:5b:00:aa:79:62:8b:e9:32: 15:80:94:95 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUDBsytA6hBt8SS9CpLIHPFpSNxPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzVaFw0yNzAxMDcyMDQ1MzVaMDMxMTAvBgNV BAMTKENBQjA3OTE3QzMyNDdCODRGRTdFOEEyQUQzOTJDMDYwOTFDMjdDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRkUEkmHiCCiTSaB1KIKAHqs7O dCpfYZWCOayNYgrtw9YSIr1BXFwiAcKB4rZxBz9mg8F7aWIKTQPMZ8elXyQn5SaR gJnAWIBYjFOFHTyRYqJFvih6Vr25mjL0PdS0p0bnT+Fr2rqacFHAmBcp/aFQIKwR 3t6vb/5TI2qE/U6jjC2i9FlPoUf0tQuq8p00Infvbos/yXvmWzRzvNkm/EPu9Myh PWvpfU1mb+hKgpnNPMHQGL0PuXY6SvLrz0sJuV4+XgxV8vYdCwcPpKz3KzKkFvuu BSvA8+TBB4Olzwk7ubFe2aArN0oC4kUneKYsSu5Ih0tgWRhdT9QpGFP7e6GvAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUyrB5F8Mke4T+fooq05LAYJHCfKEwHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZTTANBgkqhkiG9w0BAQsFAAOCAQEAh4Lr9ChySFqV VF/bQCBW8wYtl8lbG8hLPRC0Bvr/r1YtSiMwbRRGr3DCVh+OBfeCwO/P/1qR0Erl mJAQ2I4w7jL/YKzNcLeGembC6zI1ehXDESOqUpMvyIk+Yhf1BavbGoNPD+PQ06Yd G+dwGTfmaSv92P9LVQhrIbK2I8NkYFonfaN8EgKfimocPH4hGIjqWyQNQMx4oxd4 zqopzOHaIq65poCBGVUyYyOePJQfnzoy5KkiShkvPlymMPF0bdS7wr6mbtIMrVcj pFQKsR7WEoMv6HlL2755gY6vXTEIYO8SvB2dW/FDAoNnQ3qvnWKwjQD7TVsAqnli i+kyFYCUlQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:34 2026 by rpki-client