This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa File: 3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: 7d/HvgdP98DoZ8NWW1vR+Ltt7utCgkRmJiHie/Bm+y8= Subject key identifier: 9A:F2:E3:0A:CC:FE:A6:B0:AD:19:FB:71:FB:A7:BE:A8:64:51:74:A2 Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707 Certificate serial: 3824F3AB5DDB257A0C42457EBB267D9C880EE0AA Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa Signing time: Wed 28 Jan 2026 11:34:29 +0000 ROA not before: Wed 28 Jan 2026 11:29:29 +0000 ROA not after: Wed 27 Jan 2027 11:34:29 +0000 asID: 53153 IP address blocks: 186.209.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Feb 2026 21:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:24:f3:ab:5d:db:25:7a:0c:42:45:7e:bb:26:7d:9c:88:0e:e0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707 Validity Not Before: Jan 28 11:29:29 2026 GMT Not After : Jan 27 11:34:29 2027 GMT Subject: CN=9AF2E30ACCFEA6B0AD19FB71FBA7BEA8645174A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:16:c6:fa:aa:70:1c:9b:dd:5a:d1:ef:cb: a0:8e:0f:db:ae:be:9b:49:fc:d2:bf:19:a4:1a:b9: 90:65:59:6b:96:e8:cd:74:f6:ea:42:64:66:73:d2: 99:c0:e2:47:f1:22:69:61:8d:73:c4:17:7d:54:81: ca:d3:ba:6d:38:cb:aa:9f:4e:81:27:66:6a:54:2c: d1:3c:72:51:5d:2b:31:81:ae:37:2d:6e:76:c4:9e: 2e:30:5b:9d:ab:cb:1f:11:cd:19:d6:ec:1a:53:87: d7:35:2a:fe:76:ff:3d:55:b3:91:00:d1:d3:09:19: 1f:4b:22:ec:ca:6c:2c:a3:1c:37:1d:af:39:76:0a: cd:f3:08:ae:d3:fd:c6:9c:18:d7:a6:19:49:33:4a: 59:12:a9:7f:6f:c6:73:9c:9e:e3:84:9b:21:b3:4f: 70:a4:2f:02:b7:0f:7b:79:25:07:2a:02:1f:16:3a: f6:49:b4:ef:0c:f7:32:42:d4:d2:e7:3e:87:cc:bd: 56:94:10:17:9f:dd:85:0a:34:9d:50:4f:40:43:6d: c3:71:ea:e9:93:5b:5f:c0:97:be:9b:1f:87:1c:46: 8b:e3:4e:08:de:d7:26:73:09:87:da:cb:46:2f:7a: 0c:5c:d6:3c:62:e9:c9:15:a0:6a:36:c3:f3:97:10: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:E3:0A:CC:FE:A6:B0:AD:19:FB:71:FB:A7:BE:A8:64:51:74:A2 X509v3 Authority Key Identifier: keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.209.100.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:30:0d:6c:d5:96:9b:10:97:4e:64:39:1e:9b:eb:da:99:f8: 01:2e:ff:61:26:c9:98:bd:4f:74:92:7e:c2:94:f4:fd:1f:88: c6:7c:83:06:24:40:a1:7c:9a:d1:2c:7e:6d:12:90:46:c2:6a: c8:35:e6:78:03:f8:8d:6f:ce:de:86:d9:12:3e:a8:01:a1:19: 6f:e7:50:8c:fb:9a:18:54:da:09:29:95:43:dd:e4:2b:85:bf: 0b:6e:51:8b:c9:85:41:1c:11:9b:63:b6:58:55:f2:5e:31:0c: fc:3a:df:ca:cf:50:a6:e3:6c:5d:4b:b9:df:10:a1:89:58:89: 06:e6:35:67:92:84:65:2b:ad:1d:37:e2:44:9e:01:5b:78:b2: 6b:5d:e1:e8:ea:c6:19:3d:fe:d7:a0:db:b0:a9:c4:91:28:4b: a3:60:95:df:4c:8d:0a:c1:fd:73:5d:5b:27:5d:4f:f6:b6:ac: b8:89:82:35:bb:1f:c8:7a:61:e9:10:94:72:2a:fe:82:3c:23: eb:10:f3:66:41:16:1d:60:7a:93:57:78:e1:e1:77:53:61:f0: c2:fb:33:24:8d:c1:90:48:ff:dc:4f:09:2e:fa:1e:4b:d7:41: 00:1f:b8:45:37:72:8e:1f:ba:8e:56:f0:ab:2a:b3:9f:12:c6: 8f:6a:3f:30 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUOCTzq13bJXoMQkV+uyZ9nIgO4KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NTI5RkQzMjY0NzdBNUZFQjBBNjdBRkMxQzkzRjhG ODNBODcwNzAeFw0yNjAxMjgxMTI5MjlaFw0yNzAxMjcxMTM0MjlaMDMxMTAvBgNV BAMTKDlBRjJFMzBBQ0NGRUE2QjBBRDE5RkI3MUZCQTdCRUE4NjQ1MTc0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0BbG+qpwHJvdWtHvy6COD9uu vptJ/NK/GaQauZBlWWuW6M109upCZGZz0pnA4kfxImlhjXPEF31UgcrTum04y6qf ToEnZmpULNE8clFdKzGBrjctbnbEni4wW52ryx8RzRnW7BpTh9c1Kv52/z1Vs5EA 0dMJGR9LIuzKbCyjHDcdrzl2Cs3zCK7T/cacGNemGUkzSlkSqX9vxnOcnuOEmyGz T3CkLwK3D3t5JQcqAh8WOvZJtO8M9zJC1NLnPofMvVaUEBef3YUKNJ1QT0BDbcNx 6umTW1/Al76bH4ccRovjTgje1yZzCYfay0Yvegxc1jxi6ckVoGo2w/OXEKBPAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUmvLjCsz+prCtGftx+6e+qGRRdKIwHwYDVR0j BBgwFoAUCIUp/TJkd6X+sKZ6/ByT+Pg6hwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC8wODg1MjlGRDMyNjQ3N0E1RkVCMEE2N0FGQzFDOTNGOEY4M0E4NzA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4ODUyOUZEMzI2NDc3QTVG RUIwQTY3QUZDMUM5M0Y4RjgzQTg3MDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzODM2MmUzMjMwMzkyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAC60WQwDQYJKoZIhvcNAQELBQADggEBAI8wDWzV lpsQl05kOR6b69qZ+AEu/2EmyZi9T3SSfsKU9P0fiMZ8gwYkQKF8mtEsfm0SkEbC asg15ngD+I1vzt6G2RI+qAGhGW/nUIz7mhhU2gkplUPd5CuFvwtuUYvJhUEcEZtj tlhV8l4xDPw638rPUKbjbF1Lud8QoYlYiQbmNWeShGUrrR034kSeAVt4smtd4ejq xhk9/teg27CpxJEoS6Ngld9MjQrB/XNdWyddT/a2rLiJgjW7H8h6YekQlHIq/oI8 I+sQ82ZBFh1gepNXeOHhd1Nh8ML7MySNwZBI/9xPCS76HkvXQQAfuEU3co4fuo5W 8Ksqs58Sxo9qPzA= -----END CERTIFICATE-----Generated at Fri Feb 6 03:04:27 2026 by rpki-client