This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/3139312e33362e3232342e302f32322d3232203d3e20323633333432.roa File: 3139312e33362e3232342e302f32322d3232203d3e20323633333432.roa (raw, json) Hash identifier: FXo/0jPUk8QWEXtsoG8W5pTUA8HQNsr2Yuzb7re98Sc= Subject key identifier: E9:85:4D:56:F8:69:B7:25:4F:23:77:E6:0E:44:14:A5:AD:B7:5E:6E Certificate issuer: /CN=8C5E332614CF6AC22608C2224E7F03455AAEA552 Certificate serial: 240EE73BB84FD36A788D5615E9DED170212D1A67 Authority key identifier: 8C:5E:33:26:14:CF:6A:C2:26:08:C2:22:4E:7F:03:45:5A:AE:A5:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C5E332614CF6AC22608C2224E7F03455AAEA552.cer Subject info access: rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/3139312e33362e3232342e302f32322d3232203d3e20323633333432.roa Signing time: Fri 26 Dec 2025 19:36:55 +0000 ROA not before: Fri 26 Dec 2025 19:31:55 +0000 ROA not after: Fri 25 Dec 2026 19:36:55 +0000 asID: 263342 IP address blocks: 191.36.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/8C5E332614CF6AC22608C2224E7F03455AAEA552.crl rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/8C5E332614CF6AC22608C2224E7F03455AAEA552.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C5E332614CF6AC22608C2224E7F03455AAEA552.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 Jan 2026 15:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0e:e7:3b:b8:4f:d3:6a:78:8d:56:15:e9:de:d1:70:21:2d:1a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5E332614CF6AC22608C2224E7F03455AAEA552 Validity Not Before: Dec 26 19:31:55 2025 GMT Not After : Dec 25 19:36:55 2026 GMT Subject: CN=E9854D56F869B7254F2377E60E4414A5ADB75E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:80:c5:d3:2e:36:eb:c9:5e:ef:a2:21:9c: 3e:6c:ed:6d:64:cf:34:47:ce:5f:ba:3d:80:08:c8: f9:ce:e0:8a:ee:31:8a:b4:b2:df:b8:42:c2:ae:76: 1f:a8:cd:00:71:1b:65:65:67:be:60:c8:98:93:95: 70:b9:96:96:a4:80:2d:0f:36:e9:87:99:8a:94:7a: b8:13:9c:e7:1e:f9:6f:28:a9:84:c6:e4:ce:ba:3d: f5:b2:ef:83:e0:c7:18:7b:b7:b4:98:59:f6:08:ae: 13:43:fc:68:fa:6f:8d:71:97:21:28:e2:11:c7:d4: 9d:1c:61:00:67:9f:79:01:2c:8b:ae:31:2b:d0:5d: 68:1d:b4:29:8d:3b:5a:0d:83:8e:e1:3e:42:44:57: db:c4:90:40:80:77:b0:1c:9a:f7:9f:40:bf:41:5d: 74:21:9a:55:92:81:a7:33:16:f4:e1:10:0b:7c:a6: 35:e2:d5:e4:d1:0b:f0:45:44:9b:26:02:b4:4f:3c: b7:23:18:ee:da:c3:4e:c8:ca:f1:f8:a8:7a:22:38: a4:ec:d3:4b:b9:60:31:3f:99:de:29:97:b6:55:49: 15:b5:e4:8c:af:91:d1:f2:09:31:70:84:11:81:4a: a0:ab:e1:fd:f6:b1:4d:e5:56:25:e7:8f:ac:f1:0a: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:85:4D:56:F8:69:B7:25:4F:23:77:E6:0E:44:14:A5:AD:B7:5E:6E X509v3 Authority Key Identifier: keyid:8C:5E:33:26:14:CF:6A:C2:26:08:C2:22:4E:7F:03:45:5A:AE:A5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/8C5E332614CF6AC22608C2224E7F03455AAEA552.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C5E332614CF6AC22608C2224E7F03455AAEA552.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/3139312e33362e3232342e302f32322d3232203d3e20323633333432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.36.224.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:ff:89:50:f1:a4:f4:65:fe:9d:ed:c0:73:b6:56:85:36:05: 7c:53:bc:98:bb:ab:52:a7:a0:92:3c:4b:1e:31:06:a9:e1:29: 03:77:aa:11:4f:40:88:5c:1a:32:02:47:a3:8f:bc:23:0a:6c: a5:97:59:56:cf:d7:23:98:80:0e:aa:aa:db:b2:a0:53:6e:78: 14:02:ee:d1:26:8e:86:1e:df:12:58:1f:43:cf:76:26:33:42: 2a:4d:cc:23:2d:29:af:1c:09:eb:b3:f7:43:a0:a5:cc:d7:8c: 5a:ef:a9:95:b1:46:56:26:a4:02:1e:62:4e:22:3a:9a:6c:9a: 61:06:46:71:44:e8:b9:52:a1:2d:f7:eb:3c:4e:d4:7a:fd:b3: d1:be:c4:9a:5a:e4:63:5a:5b:b3:01:79:f6:f2:07:d0:bd:1f: 0d:14:db:94:82:e0:2b:ab:d9:cc:75:4f:69:51:a2:6f:49:b0: 27:08:4f:19:d2:a5:b0:0d:d3:16:31:93:3a:7c:c5:22:43:18: 3b:79:5d:62:ce:2a:c8:6c:40:6d:3b:6f:16:89:cc:ef:b3:6a: af:e8:73:d8:c0:6c:01:f6:76:fe:95:03:9a:47:c8:bf:9e:26: 78:b2:59:b4:07:5e:a2:3a:8c:f2:84:57:d7:45:63:5c:57:cc: 87:40:f7:e6 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUJA7nO7hP02p4jVYV6d7RcCEtGmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RTMzMjYxNENGNkFDMjI2MDhDMjIyNEU3RjAzNDU1 QUFFQTU1MjAeFw0yNTEyMjYxOTMxNTVaFw0yNjEyMjUxOTM2NTVaMDMxMTAvBgNV BAMTKEU5ODU0RDU2Rjg2OUI3MjU0RjIzNzdFNjBFNDQxNEE1QURCNzVFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/G4DF0y4268le76IhnD5s7W1k zzRHzl+6PYAIyPnO4IruMYq0st+4QsKudh+ozQBxG2VlZ75gyJiTlXC5lpakgC0P NumHmYqUergTnOce+W8oqYTG5M66PfWy74Pgxxh7t7SYWfYIrhND/Gj6b41xlyEo 4hHH1J0cYQBnn3kBLIuuMSvQXWgdtCmNO1oNg47hPkJEV9vEkECAd7AcmvefQL9B XXQhmlWSgaczFvThEAt8pjXi1eTRC/BFRJsmArRPPLcjGO7aw07IyvH4qHoiOKTs 00u5YDE/md4pl7ZVSRW15IyvkdHyCTFwhBGBSqCr4f32sU3lViXnj6zxCkKbAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU6YVNVvhptyVPI3fmDkQUpa23Xm4wHwYDVR0j BBgwFoAUjF4zJhTPasImCMIiTn8DRVqupVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREU4YjZaRnAxdHZCSkJKbTdTMXU4ZWtpQm5hZ0VhWFE5eWJjU3dKWUxT ZlUvMC84QzVFMzMyNjE0Q0Y2QUMyMjYwOEMyMjI0RTdGMDM0NTVBQUVBNTUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNUUzMzI2MTRDRjZBQzIy NjA4QzIyMjRFN0YwMzQ1NUFBRUE1NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RFOGI2WkZwMXR2QkpCSm03UzF1OGVraUJuYWdFYVhROXliY1N3SllMU2ZVLzAv MzEzOTMxMmUzMzM2MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzMzMzM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAK/JOAwDQYJKoZIhvcNAQELBQADggEBAAv/iVDx pPRl/p3twHO2VoU2BXxTvJi7q1KnoJI8Sx4xBqnhKQN3qhFPQIhcGjICR6OPvCMK bKWXWVbP1yOYgA6qqtuyoFNueBQC7tEmjoYe3xJYH0PPdiYzQipNzCMtKa8cCeuz 90OgpczXjFrvqZWxRlYmpAIeYk4iOppsmmEGRnFE6LlSoS336zxO1Hr9s9G+xJpa 5GNaW7MBefbyB9C9Hw0U25SC4Cur2cx1T2lRom9JsCcITxnSpbAN0xYxkzp8xSJD GDt5XWLOKshsQG07bxaJzO+zaq/oc9jAbAH2dv6VA5pHyL+eJniyWbQHXqI6jPKE V9dFY1xXzIdA9+Y= -----END CERTIFICATE-----Generated at Sat Jan 3 06:40:35 2026 by rpki-client