This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa File: 3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: tYbQaMztSY8asoifQF1P1zDNYSRD9dkMEmy3H567Ovo= Subject key identifier: 5A:73:0D:8F:98:9F:17:51:E5:16:1A:C0:DA:31:88:94:75:C5:2B:F4 Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707 Certificate serial: 7374E9091E2E8295D1E4D2C74F6337986A2E0958 Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa Signing time: Wed 28 Jan 2026 11:34:28 +0000 ROA not before: Wed 28 Jan 2026 11:29:28 +0000 ROA not after: Wed 27 Jan 2027 11:34:28 +0000 asID: 53153 IP address blocks: 138.204.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Feb 2026 21:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:74:e9:09:1e:2e:82:95:d1:e4:d2:c7:4f:63:37:98:6a:2e:09:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707 Validity Not Before: Jan 28 11:29:28 2026 GMT Not After : Jan 27 11:34:28 2027 GMT Subject: CN=5A730D8F989F1751E5161AC0DA31889475C52BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:52:1c:3d:67:ad:30:a8:65:f4:8b:1d:47: 81:b7:4d:73:29:40:26:5f:7a:af:6b:5c:0b:be:fe: fc:d9:53:0a:29:82:8b:10:03:0d:29:e7:86:38:9a: 98:37:a7:22:11:4d:ac:f3:fd:33:74:0b:cc:47:6b: e1:5c:ef:e0:f6:45:84:bb:4d:e0:68:5d:c9:05:ea: ca:39:a6:aa:07:94:7d:b1:70:24:80:15:03:ef:0f: 31:2e:e1:70:de:f0:85:ae:36:d3:ed:19:47:e6:ed: f9:76:83:b5:9a:d7:79:1e:1a:8b:28:a4:20:1d:07: 85:08:f3:91:f3:c5:25:7a:56:db:b8:1c:c3:4d:15: 97:f6:f5:3e:e7:5a:00:46:c3:3c:44:73:c8:a3:02: 65:4b:fc:96:91:bb:e8:01:ea:31:85:26:a1:f9:88: 39:00:41:57:b2:ac:05:1e:2b:f2:d6:71:87:0e:2a: 88:6c:bf:17:b2:a4:7e:45:43:25:eb:a6:8e:92:0d: 4d:1b:c4:bb:dd:39:00:f4:0a:81:1a:c8:68:bf:08: c1:ae:90:90:bd:28:1b:bb:fc:34:74:4d:d2:d8:7d: c1:07:e3:1c:67:b6:64:14:65:f4:82:e5:6a:c9:2e: b2:0e:82:94:ff:d0:d3:43:f6:b2:33:78:40:61:59: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:73:0D:8F:98:9F:17:51:E5:16:1A:C0:DA:31:88:94:75:C5:2B:F4 X509v3 Authority Key Identifier: keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.220.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f4:18:6c:4f:51:f2:1b:1f:31:ca:43:9e:64:fc:f3:3f:2a: 97:9b:10:5b:67:3c:78:33:4b:39:a6:7f:b2:57:40:cb:c9:e7: 51:ff:bc:f7:70:47:f6:f7:4b:94:96:26:97:d7:07:96:21:a3: b5:b6:0b:0e:a1:1d:c3:d2:a7:f8:f6:cb:eb:07:d8:40:9e:a0: b5:54:15:5b:de:17:f9:6b:f8:a5:ca:37:14:ac:d7:d5:6a:07: 5a:c8:1c:b7:54:a6:ef:b1:c0:b0:35:63:ae:65:7e:cd:0f:92: b0:73:06:e7:f6:35:09:d3:c5:77:82:ed:bd:31:9a:eb:22:e5: 44:f4:29:13:3e:37:e4:47:ea:78:88:35:b2:99:71:f8:bd:33: d4:05:53:35:02:4d:f3:10:80:0e:03:7c:9c:4f:22:ff:55:4c: b2:58:8e:4c:5d:9b:a2:02:d4:8d:45:87:94:92:54:1c:f0:c8: 4a:c2:7f:89:ba:81:22:5a:39:de:1d:63:dc:db:3e:60:b9:b7: 3c:26:bf:94:2c:af:3f:fd:3c:cc:6f:0e:82:0e:d4:3b:f2:2c: ac:3f:63:48:1f:21:47:ea:75:c1:48:90:b3:7f:eb:03:45:3f: 77:a0:43:83:9d:a3:70:cf:76:8a:cb:61:06:f2:7a:21:d2:d8: 32:be:7a:4f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUc3TpCR4ugpXR5NLHT2M3mGouCVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NTI5RkQzMjY0NzdBNUZFQjBBNjdBRkMxQzkzRjhG ODNBODcwNzAeFw0yNjAxMjgxMTI5MjhaFw0yNzAxMjcxMTM0MjhaMDMxMTAvBgNV BAMTKDVBNzMwRDhGOTg5RjE3NTFFNTE2MUFDMERBMzE4ODk0NzVDNTJCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyS1IcPWetMKhl9IsdR4G3TXMp QCZfeq9rXAu+/vzZUwopgosQAw0p54Y4mpg3pyIRTazz/TN0C8xHa+Fc7+D2RYS7 TeBoXckF6so5pqoHlH2xcCSAFQPvDzEu4XDe8IWuNtPtGUfm7fl2g7Wa13keGoso pCAdB4UI85HzxSV6Vtu4HMNNFZf29T7nWgBGwzxEc8ijAmVL/JaRu+gB6jGFJqH5 iDkAQVeyrAUeK/LWcYcOKohsvxeypH5FQyXrpo6SDU0bxLvdOQD0CoEayGi/CMGu kJC9KBu7/DR0TdLYfcEH4xxntmQUZfSC5WrJLrIOgpT/0NND9rIzeEBhWWF9AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUWnMNj5ifF1HlFhrA2jGIlHXFK/QwHwYDVR0j BBgwFoAUCIUp/TJkd6X+sKZ6/ByT+Pg6hwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC8wODg1MjlGRDMyNjQ3N0E1RkVCMEE2N0FGQzFDOTNGOEY4M0E4NzA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4ODUyOUZEMzI2NDc3QTVG RUIwQTY3QUZDMUM5M0Y4RjgzQTg3MDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKzNwwDQYJKoZIhvcNAQELBQADggEBAIT0GGxP UfIbHzHKQ55k/PM/KpebEFtnPHgzSzmmf7JXQMvJ51H/vPdwR/b3S5SWJpfXB5Yh o7W2Cw6hHcPSp/j2y+sH2ECeoLVUFVveF/lr+KXKNxSs19VqB1rIHLdUpu+xwLA1 Y65lfs0PkrBzBuf2NQnTxXeC7b0xmusi5UT0KRM+N+RH6niINbKZcfi9M9QFUzUC TfMQgA4DfJxPIv9VTLJYjkxdm6IC1I1Fh5SSVBzwyErCf4m6gSJaOd4dY9zbPmC5 tzwmv5Qsrz/9PMxvDoIO1DvyLKw/Y0gfIUfqdcFIkLN/6wNFP3egQ4Odo3DPdorL YQbyeiHS2DK+ek8= -----END CERTIFICATE-----Generated at Fri Feb 6 03:02:05 2026 by rpki-client