This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa File: 3138392e38392e302e302f32302d3332203d3e203238313832.roa (raw, json) Hash identifier: Y748ZKgpdIt2tQUTa4MA+RDCjaYhJYn2/ijSS2+YgtU= Subject key identifier: 87:51:2E:C2:EA:66:60:A6:21:31:B7:9F:E9:DB:A5:A1:ED:D5:84:50 Certificate issuer: /CN=5A1F4CB5F026D65948F99DC818591DC9E96E24F6 Certificate serial: 7A028CE610B6E948FC2BD027BC68152743295E9C Authority key identifier: 5A:1F:4C:B5:F0:26:D6:59:48:F9:9D:C8:18:59:1D:C9:E9:6E:24:F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa Signing time: Mon 22 Dec 2025 12:03:15 +0000 ROA not before: Mon 22 Dec 2025 11:58:15 +0000 ROA not after: Mon 21 Dec 2026 12:03:15 +0000 asID: 28182 IP address blocks: 189.89.0.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.crl rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Jan 2026 10:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:02:8c:e6:10:b6:e9:48:fc:2b:d0:27:bc:68:15:27:43:29:5e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1F4CB5F026D65948F99DC818591DC9E96E24F6 Validity Not Before: Dec 22 11:58:15 2025 GMT Not After : Dec 21 12:03:15 2026 GMT Subject: CN=87512EC2EA6660A62131B79FE9DBA5A1EDD58450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:87:4e:c2:e4:d5:5e:8f:fd:2e:26:ad:27: 84:7d:6b:ab:d2:86:a2:d0:70:9e:6a:c6:fe:a2:e2: 85:26:2d:f8:16:0e:90:d5:78:af:76:46:c2:d3:4b: 72:a7:a4:95:73:19:7a:4c:b2:31:37:97:09:8d:eb: 7e:43:a4:f8:69:74:2e:30:57:31:d9:4d:08:27:49: b5:7e:6e:fb:fa:52:c6:d8:15:c9:58:f3:d7:0b:b1: 43:4b:58:4f:c6:d3:38:e4:39:ea:ff:44:18:65:15: ef:76:6c:d9:8e:cc:ca:05:2d:08:27:d8:ee:df:70: e4:3e:96:81:04:79:02:08:1f:93:a7:7d:0f:0b:2b: 35:c6:4b:45:43:83:b4:82:81:d4:76:fd:df:8d:b0: 87:17:0b:e1:7b:a6:84:16:04:57:5e:74:42:bd:a9: 96:d2:4a:b6:29:40:b1:f5:ff:13:63:ab:a9:4e:f9: b5:6e:93:78:81:27:c1:2e:4b:7b:6b:67:10:2a:26: 28:0e:fa:5b:fc:15:48:e8:64:5a:03:12:df:cf:d8: 76:c0:95:f3:db:72:54:85:af:bb:17:fb:aa:4d:83: 40:1f:d3:82:e8:df:52:0f:73:10:17:11:37:4d:cb: e5:10:95:15:d1:aa:a1:46:31:4e:f8:f3:14:19:c7: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:51:2E:C2:EA:66:60:A6:21:31:B7:9F:E9:DB:A5:A1:ED:D5:84:50 X509v3 Authority Key Identifier: keyid:5A:1F:4C:B5:F0:26:D6:59:48:F9:9D:C8:18:59:1D:C9:E9:6E:24:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.0.0/20 Signature Algorithm: sha256WithRSAEncryption 32:92:e2:a0:92:c6:24:fc:ee:45:cd:58:9c:e5:a8:f6:7d:cc: a5:16:76:df:79:5b:69:e2:b7:85:3e:ab:c8:f8:f1:af:44:04: bc:65:fc:46:b7:2c:57:16:27:2f:27:df:df:ac:32:81:5d:bd: 65:8b:29:69:9c:dd:45:78:31:68:ae:d2:21:ab:d2:01:ea:c2: dd:2f:10:87:44:85:7a:a7:2e:2f:ec:9f:6d:97:8a:e5:ef:3a: 92:42:c8:bd:ed:3b:6e:77:21:7e:3a:18:8b:82:2d:8f:9f:cf: 55:81:bf:04:0f:fd:af:ff:4e:47:87:c1:2c:fc:b4:e4:46:e5: 4c:5d:51:3c:2d:1a:40:be:79:db:a4:95:82:af:cb:01:8e:68: ff:89:32:15:10:11:57:a8:22:cd:74:4d:c3:bb:b1:a1:d4:e0: b9:4f:9d:d7:97:51:42:bb:e0:cf:5c:fa:55:d9:c4:6a:26:51: 94:da:75:6c:3d:b3:d0:39:d4:37:f1:be:a1:94:11:22:70:62: f3:12:14:33:42:88:0f:20:1c:9c:23:77:86:55:3e:31:8b:dc: a2:e4:79:30:89:79:72:9b:a6:b6:96:e6:ee:fb:7b:25:1a:e8: 31:64:cb:f8:4f:35:38:23:72:ef:f1:43:a1:8d:85:f9:37:c4: 07:c1:52:c1 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUegKM5hC26Uj8K9AnvGgVJ0MpXpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExRjRDQjVGMDI2RDY1OTQ4Rjk5REM4MTg1OTFEQzlF OTZFMjRGNjAeFw0yNTEyMjIxMTU4MTVaFw0yNjEyMjExMjAzMTVaMDMxMTAvBgNV BAMTKDg3NTEyRUMyRUE2NjYwQTYyMTMxQjc5RkU5REJBNUExRURENTg0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC534dOwuTVXo/9LiatJ4R9a6vS hqLQcJ5qxv6i4oUmLfgWDpDVeK92RsLTS3KnpJVzGXpMsjE3lwmN635DpPhpdC4w VzHZTQgnSbV+bvv6UsbYFclY89cLsUNLWE/G0zjkOer/RBhlFe92bNmOzMoFLQgn 2O7fcOQ+loEEeQIIH5OnfQ8LKzXGS0VDg7SCgdR2/d+NsIcXC+F7poQWBFdedEK9 qZbSSrYpQLH1/xNjq6lO+bVuk3iBJ8EuS3trZxAqJigO+lv8FUjoZFoDEt/P2HbA lfPbclSFr7sX+6pNg0Af04Lo31IPcxAXETdNy+UQlRXRqqFGMU748xQZx929AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUh1EuwupmYKYhMbef6duloe3VhFAwHwYDVR0j BBgwFoAUWh9MtfAm1llI+Z3IGFkdyeluJPYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw NnovMC81QTFGNENCNUYwMjZENjU5NDhGOTlEQzgxODU5MURDOUU5NkUyNEY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMUY0Q0I1RjAyNkQ2NTk0 OEY5OURDODE4NTkxREM5RTk2RTI0RjYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv MzEzODM5MmUzODM5MmUzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzgzMTM4 MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAS9WQAwDQYJKoZIhvcNAQELBQADggEBADKS4qCSxiT87kXN WJzlqPZ9zKUWdt95W2nit4U+q8j48a9EBLxl/Ea3LFcWJy8n39+sMoFdvWWLKWmc 3UV4MWiu0iGr0gHqwt0vEIdEhXqnLi/sn22XiuXvOpJCyL3tO253IX46GIuCLY+f z1WBvwQP/a//TkeHwSz8tORG5UxdUTwtGkC+eduklYKvywGOaP+JMhUQEVeoIs10 TcO7saHU4LlPndeXUUK74M9c+lXZxGomUZTadWw9s9A51DfxvqGUESJwYvMSFDNC iA8gHJwjd4ZVPjGL3KLkeTCJeXKbpraW5u77eyUa6DFky/hPNTgjcu/xQ6GNhfk3 xAfBUsE= -----END CERTIFICATE-----Generated at Thu Jan 1 01:05:59 2026 by rpki-client