This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/3137302e3233332e35362e302f32322d3332203d3e20323635303837.roa File: 3137302e3233332e35362e302f32322d3332203d3e20323635303837.roa (raw, json) Hash identifier: EYyUElunll6ku9qCWDNirniijbr4tjX9Ij8ARgZeEgo= Subject key identifier: DE:1E:9D:26:8E:CB:8C:22:46:A4:89:89:62:2F:B2:D4:35:BD:F8:41 Certificate issuer: /CN=AF231F74DDE2311E23940DD27C9A363910CAB577 Certificate serial: 0721D42764D7FF0F8DD508CCF3814F66E3CF1FAD Authority key identifier: AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/3137302e3233332e35362e302f32322d3332203d3e20323635303837.roa Signing time: Mon 05 Jan 2026 13:36:40 +0000 ROA not before: Mon 05 Jan 2026 13:31:40 +0000 ROA not after: Mon 04 Jan 2027 13:36:40 +0000 asID: 265087 IP address blocks: 170.233.56.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 09:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:21:d4:27:64:d7:ff:0f:8d:d5:08:cc:f3:81:4f:66:e3:cf:1f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF231F74DDE2311E23940DD27C9A363910CAB577 Validity Not Before: Jan 5 13:31:40 2026 GMT Not After : Jan 4 13:36:40 2027 GMT Subject: CN=DE1E9D268ECB8C2246A48989622FB2D435BDF841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:37:ae:8c:08:9d:68:8f:54:15:a0:5c:07: f7:d0:fb:84:79:64:e7:8d:94:74:9b:5e:97:e2:cf: 09:75:18:37:9a:5b:ad:b3:66:3a:f6:f6:53:64:31: d4:ab:c8:e7:4b:0c:30:1b:eb:d3:bb:01:54:52:da: 2e:1d:e4:76:54:b2:66:ee:2e:e0:36:e5:e7:a8:24: 72:1a:2b:13:19:58:57:25:f5:ab:b0:a0:cc:15:ca: 3c:76:2b:77:24:71:1e:65:65:f3:76:f0:0d:8e:0c: 0f:fc:99:31:21:cd:33:05:fc:b8:ac:00:26:83:3e: bb:fc:9a:29:c4:36:2b:e9:da:7d:65:55:77:8c:e8: 42:8e:bd:69:a7:f4:9d:0f:75:e0:a9:c5:4f:a8:a7: a1:26:b2:37:3d:9e:4c:ea:d9:a3:d2:9f:82:14:85: 9c:b2:72:f8:71:cc:da:de:3f:35:ce:69:5a:30:db: 99:fe:82:32:c6:d2:35:20:f8:1f:79:82:ba:82:3a: a3:dc:ef:2c:b4:49:aa:7e:81:10:d9:ed:18:5b:56: d5:42:5e:9b:b1:03:76:a4:39:af:4b:51:6d:69:9f: 76:76:9a:85:65:08:fa:fa:3b:45:4c:fd:4a:36:61: 65:8d:d6:0d:2e:dd:f2:d8:04:88:3b:89:7d:1b:c5: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:9D:26:8E:CB:8C:22:46:A4:89:89:62:2F:B2:D4:35:BD:F8:41 X509v3 Authority Key Identifier: keyid:AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/3137302e3233332e35362e302f32322d3332203d3e20323635303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.56.0/22 Signature Algorithm: sha256WithRSAEncryption 04:dd:64:2d:80:cd:a4:f5:56:09:b9:42:e1:c5:04:0f:0f:4e: 77:f6:c1:10:94:be:8a:a0:44:45:49:5f:b6:51:93:9d:32:bd: 13:a5:e6:ea:17:e4:d3:e4:56:9f:4d:6a:cb:88:b3:54:14:7d: 1d:4c:61:14:0f:cf:c0:a6:83:32:cc:c1:53:4f:00:c6:3b:c5: 63:97:41:9d:f0:d1:97:de:ec:6f:e9:ed:fc:8d:9a:e4:ec:99: ea:11:20:65:48:7d:26:9d:f9:5d:c2:8b:de:70:62:99:db:72: 1a:a1:18:bd:54:b4:b0:b8:9e:7a:07:92:fa:c2:4d:6c:5d:3f: 11:36:1f:00:9d:8b:bf:ba:e4:70:a5:1d:86:49:d6:1b:cd:91: c2:d4:54:5d:22:8d:75:13:16:05:7a:a4:e6:f3:c1:d6:97:b0: e6:e2:0b:4d:ef:02:85:0d:f3:0e:8b:c9:cd:e9:3f:3e:0e:14: b6:67:35:8d:50:4c:72:f0:2a:eb:fb:34:31:38:ac:83:49:fe: 91:ef:32:42:9f:d5:3f:1c:ce:67:bc:2d:78:72:ec:c1:d0:5f: b9:37:d5:9c:c8:0e:84:03:ee:c8:04:74:d8:70:36:99:39:44: e3:b4:01:d9:8d:26:a7:e5:20:bf:e6:82:44:bc:a0:0e:e5:65: 49:35:c7:c8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUByHUJ2TX/w+N1QjM84FPZuPPH60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMzFGNzREREUyMzExRTIzOTQwREQyN0M5QTM2Mzkx MENBQjU3NzAeFw0yNjAxMDUxMzMxNDBaFw0yNzAxMDQxMzM2NDBaMDMxMTAvBgNV BAMTKERFMUU5RDI2OEVDQjhDMjI0NkE0ODk4OTYyMkZCMkQ0MzVCREY4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshjeujAidaI9UFaBcB/fQ+4R5 ZOeNlHSbXpfizwl1GDeaW62zZjr29lNkMdSryOdLDDAb69O7AVRS2i4d5HZUsmbu LuA25eeoJHIaKxMZWFcl9auwoMwVyjx2K3ckcR5lZfN28A2ODA/8mTEhzTMF/Lis ACaDPrv8minENivp2n1lVXeM6EKOvWmn9J0PdeCpxU+op6Emsjc9nkzq2aPSn4IU hZyycvhxzNrePzXOaVow25n+gjLG0jUg+B95grqCOqPc7yy0Sap+gRDZ7RhbVtVC XpuxA3akOa9LUW1pn3Z2moVlCPr6O0VM/Uo2YWWN1g0u3fLYBIg7iX0bxSWFAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU3h6dJo7LjCJGpImJYi+y1DW9+EEwHwYDVR0j BBgwFoAUryMfdN3iMR4jlA3SfJo2ORDKtXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFx dGkvMC9BRjIzMUY3NERERTIzMTFFMjM5NDBERDI3QzlBMzYzOTEwQ0FCNTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMjMxRjc0RERFMjMxMUUy Mzk0MEREMjdDOUEzNjM5MTBDQUI1NzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNyR2lhbWFjRldFeVc5WlBTN1NTcXhIRkFZSHR2Vml4RjFYZVBNb2QxcXRpLzAv MzEzNzMwMmUzMjMzMzMyZTM1MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzUzMDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq6TgwDQYJKoZIhvcNAQELBQADggEBAATdZC2A zaT1Vgm5QuHFBA8PTnf2wRCUvoqgREVJX7ZRk50yvROl5uoX5NPkVp9NasuIs1QU fR1MYRQPz8CmgzLMwVNPAMY7xWOXQZ3w0Zfe7G/p7fyNmuTsmeoRIGVIfSad+V3C i95wYpnbchqhGL1UtLC4nnoHkvrCTWxdPxE2HwCdi7+65HClHYZJ1hvNkcLUVF0i jXUTFgV6pObzwdaXsObiC03vAoUN8w6Lyc3pPz4OFLZnNY1QTHLwKuv7NDE4rINJ /pHvMkKf1T8czme8LXhy7MHQX7k31ZzIDoQD7sgEdNhwNpk5ROO0AdmNJqflIL/m gkS8oA7lZUk1x8g= -----END CERTIFICATE-----Generated at Fri Jan 9 23:25:29 2026 by rpki-client