This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa File: 3138392e38392e37382e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: N2XSkEBMGcxUizbhNePn38USwWlH0veoDqwp3UxWz7o= Subject key identifier: 82:8F:70:44:32:9A:45:29:94:F0:9E:01:E6:8D:72:9A:66:0E:13:11 Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 4C16327BE54975A0C10CAB0637A34E40C9A70E58 Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:34 +0000 ROA not before: Thu 08 Jan 2026 20:40:34 +0000 ROA not after: Thu 07 Jan 2027 20:45:34 +0000 asID: 28184 IP address blocks: 189.89.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:16:32:7b:e5:49:75:a0:c1:0c:ab:06:37:a3:4e:40:c9:a7:0e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:34 2026 GMT Not After : Jan 7 20:45:34 2027 GMT Subject: CN=828F7044329A452994F09E01E68D729A660E1311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:9d:e3:01:cb:49:41:b4:15:36:e4:4d:0f: 27:37:06:97:c7:76:85:0d:7e:2f:19:5b:cf:cb:fb: dd:75:58:a5:e7:e7:33:af:bf:e1:c8:e2:cf:4d:8c: af:9f:71:d2:a2:a8:03:b4:2b:10:44:10:33:19:49: 7e:eb:25:df:2f:cd:50:98:0e:52:85:9f:3a:31:1d: 7b:2d:e6:20:45:11:f9:a8:c3:5f:6f:af:eb:8b:97: 06:01:24:1d:04:55:f6:79:50:79:61:99:49:da:9d: 28:23:75:54:5f:06:8a:eb:cd:95:8b:c9:8c:56:99: 2e:2c:6b:54:c6:5c:a4:63:08:75:89:fe:ad:dd:0e: 0f:ee:dc:16:45:4d:64:3a:ff:ec:46:0c:0b:b1:bd: 72:ca:e3:77:fa:e0:18:c0:12:c6:88:73:5e:30:d0: f7:0c:95:a7:cd:4b:7b:94:5d:a4:6e:fc:e6:73:cf: d6:38:f4:9e:04:22:bf:66:ab:27:d2:02:81:90:a3: 10:13:6e:24:63:a6:a2:d7:8c:3d:91:53:83:f2:0f: 22:d7:f6:97:2a:04:49:b2:d9:f6:3d:de:38:a0:ea: 17:51:2a:98:e2:f9:f0:79:d6:91:68:20:ce:63:ee: 9f:c3:b8:a6:be:96:97:32:08:83:ee:1b:bb:95:46: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8F:70:44:32:9A:45:29:94:F0:9E:01:E6:8D:72:9A:66:0E:13:11 X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.78.0/24 Signature Algorithm: sha256WithRSAEncryption a7:bb:e2:cf:5b:02:23:15:5d:e3:d9:b4:18:f6:5f:57:f0:0d: 3a:1f:27:ce:66:06:81:82:f4:58:bf:f5:ad:69:f3:fa:29:01: e5:4b:26:1d:6b:68:44:8f:7f:dd:40:30:6c:8c:a0:fc:84:f5: e9:87:64:67:a9:73:f0:06:15:6c:c5:1e:54:74:74:1a:c1:11: 4a:a3:89:2e:3e:1f:bb:54:da:f0:79:de:6d:13:21:a1:52:ad: 2b:20:88:a7:2c:20:03:24:8f:6b:f8:a9:af:3b:38:c3:90:97: e6:bb:67:6d:aa:34:64:81:0d:f4:c5:33:0e:19:10:86:f8:43: a9:e2:ac:c8:8c:f2:af:e0:83:d2:7c:29:1b:17:2f:38:fa:f1: 44:4d:66:11:e0:39:b7:34:b1:4b:25:19:4b:6c:15:c0:b1:24: a5:75:15:f3:4b:12:df:6b:a7:97:87:e4:3d:b5:b8:b7:3b:51: 7e:f1:7b:cb:17:38:51:6a:4e:a2:30:b5:97:22:c6:1d:3d:61: 6a:04:09:5f:4c:4d:5c:f3:73:46:bd:e0:07:60:2f:16:f7:ea: dd:fb:7c:94:e1:95:40:94:9c:d0:87:91:d6:3d:7a:b4:a1:e1: 30:4e:71:6b:18:9a:a6:a3:5c:1c:29:28:e9:11:86:59:50:c0: 8e:8e:9e:4e -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUTBYye+VJdaDBDKsGN6NOQMmnDlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzRaFw0yNzAxMDcyMDQ1MzRaMDMxMTAvBgNV BAMTKDgyOEY3MDQ0MzI5QTQ1Mjk5NEYwOUUwMUU2OEQ3MjlBNjYwRTEzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu453jActJQbQVNuRNDyc3BpfH doUNfi8ZW8/L+911WKXn5zOvv+HI4s9NjK+fcdKiqAO0KxBEEDMZSX7rJd8vzVCY DlKFnzoxHXst5iBFEfmow19vr+uLlwYBJB0EVfZ5UHlhmUnanSgjdVRfBorrzZWL yYxWmS4sa1TGXKRjCHWJ/q3dDg/u3BZFTWQ6/+xGDAuxvXLK43f64BjAEsaIc14w 0PcMlafNS3uUXaRu/OZzz9Y49J4EIr9mqyfSAoGQoxATbiRjpqLXjD2RU4PyDyLX 9pcqBEmy2fY93jig6hdRKpji+fB51pFoIM5j7p/DuKa+lpcyCIPuG7uVRjNLAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUgo9wRDKaRSmU8J4B5o1ymmYOExEwHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZTjANBgkqhkiG9w0BAQsFAAOCAQEAp7viz1sCIxVd 49m0GPZfV/ANOh8nzmYGgYL0WL/1rWnz+ikB5UsmHWtoRI9/3UAwbIyg/IT16Ydk Z6lz8AYVbMUeVHR0GsERSqOJLj4fu1Ta8HnebRMhoVKtKyCIpywgAySPa/iprzs4 w5CX5rtnbao0ZIEN9MUzDhkQhvhDqeKsyIzyr+CD0nwpGxcvOPrxRE1mEeA5tzSx SyUZS2wVwLEkpXUV80sS32unl4fkPbW4tztRfvF7yxc4UWpOojC1lyLGHT1hagQJ X0xNXPNzRr3gB2AvFvfq3ft8lOGVQJSc0IeR1j16tKHhME5xaxiapqNcHCko6RGG WVDAjo6eTg== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:32 2026 by rpki-client