This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa File: 3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa (raw, json) Hash identifier: tBSQFUmlVA/2VjFHVc+NlEv9YwDnRNapAmirmYarkgs= Subject key identifier: AE:04:8F:E2:C1:03:96:E3:35:05:41:F5:FF:59:6C:89:0F:66:22:54 Certificate issuer: /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1 Certificate serial: 427939E61EAA9FC63C25532FBBFDE2029E6CF10A Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa Signing time: Fri 02 Jan 2026 21:33:37 +0000 ROA not before: Fri 02 Jan 2026 21:28:37 +0000 ROA not after: Fri 01 Jan 2027 21:33:37 +0000 asID: 263518 IP address blocks: 168.197.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 16:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:79:39:e6:1e:aa:9f:c6:3c:25:53:2f:bb:fd:e2:02:9e:6c:f1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1 Validity Not Before: Jan 2 21:28:37 2026 GMT Not After : Jan 1 21:33:37 2027 GMT Subject: CN=AE048FE2C10396E3350541F5FF596C890F662254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:68:55:21:23:ac:99:8c:60:f2:4c:ed:d2: fe:f4:99:61:8a:00:00:24:1d:75:e2:65:1b:28:ef: 82:3a:7d:00:4f:91:0a:8d:c3:31:7d:0b:3f:42:84: 12:eb:2b:85:e4:76:94:5f:61:a6:38:c8:ca:7c:24: 09:cc:0b:c1:e1:83:77:e1:9e:a6:b9:0d:a4:f8:c1: 26:97:87:e8:eb:da:1d:7a:ed:00:0c:cc:05:4f:44: f6:c2:4e:e8:28:8c:4f:2f:0b:bd:fc:e1:1f:f9:d7: 66:75:fe:83:eb:31:09:97:c3:ac:f8:dc:58:26:96: e7:fb:c7:90:5b:ac:7e:66:b1:c5:a8:37:74:ad:81: 8b:85:d6:53:f8:2a:61:ff:8c:06:24:75:0e:69:ab: 48:b1:2d:c2:19:a6:8e:5f:4e:f7:25:72:59:2b:71: d7:d4:9e:f6:05:01:16:0d:28:d5:98:06:6d:92:e6: 43:0c:71:80:6d:8f:60:84:92:05:19:13:c9:8b:14: 59:ab:2a:20:0b:aa:19:f5:ec:9f:fc:aa:de:d8:0f: ff:b7:a1:cb:40:ce:c3:0b:60:4e:49:a2:a9:1e:eb: 3f:bd:e9:c9:77:0e:72:10:b9:69:da:f9:7e:ff:5f: 56:d3:72:dd:ba:39:cf:26:a4:5c:ef:b8:77:ee:41: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:04:8F:E2:C1:03:96:E3:35:05:41:F5:FF:59:6C:89:0F:66:22:54 X509v3 Authority Key Identifier: keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.84.0/22 Signature Algorithm: sha256WithRSAEncryption 49:33:38:c3:1a:b1:f4:6f:14:86:f0:4c:62:51:dd:2f:7f:09: ea:29:b8:c6:f2:bf:92:03:92:8d:99:a5:c6:05:9f:f4:2b:31: 04:d1:56:71:6b:29:1b:fb:9e:2c:9e:73:16:24:59:91:6c:ce: 2b:6b:de:d4:ad:0f:e1:92:0e:1b:68:93:ff:da:cc:1d:42:2c: 87:34:10:5b:f0:e9:b8:1a:9f:b0:f4:74:0e:1e:f2:42:6e:f3: 2d:ec:63:86:11:e3:69:42:be:f6:4e:a0:ef:76:87:bd:39:46: 56:8e:c0:9e:69:1e:de:22:65:64:db:9d:37:51:a3:4c:d2:71: 3b:d7:5e:19:bf:82:97:0e:9c:a4:5f:3e:b6:5c:ad:ff:35:e8: 21:55:ff:f2:f3:e7:b6:ca:f2:49:c0:44:65:66:40:2e:7a:e2: 3a:13:c3:92:e4:e3:d1:b9:ac:bb:85:aa:cc:71:0c:52:93:87: 9a:e0:b3:90:dc:34:78:d9:2c:d4:75:a2:a2:42:fe:e1:aa:b0: ac:bb:da:30:a0:fb:2e:39:98:3d:cc:4c:e6:7a:54:a2:16:92: 7f:21:e9:db:27:a5:a9:0a:5b:60:c4:4f:e8:61:ea:34:bd:e0: c6:18:22:ee:d4:83:dd:22:5d:f1:15:be:03:3e:76:5d:64:bd: 22:9c:fd:aa -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQnk55h6qn8Y8JVMvu/3iAp5s8QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI4OTI4MDA2RDlFRDI4RjdFQzk4OTE3NEZDOUM0MEVB NDQ4MzhDMTAeFw0yNjAxMDIyMTI4MzdaFw0yNzAxMDEyMTMzMzdaMDMxMTAvBgNV BAMTKEFFMDQ4RkUyQzEwMzk2RTMzNTA1NDFGNUZGNTk2Qzg5MEY2NjIyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzmhVISOsmYxg8kzt0v70mWGK AAAkHXXiZRso74I6fQBPkQqNwzF9Cz9ChBLrK4XkdpRfYaY4yMp8JAnMC8Hhg3fh nqa5DaT4wSaXh+jr2h167QAMzAVPRPbCTugojE8vC7384R/512Z1/oPrMQmXw6z4 3Fgmluf7x5BbrH5mscWoN3StgYuF1lP4KmH/jAYkdQ5pq0ixLcIZpo5fTvclclkr cdfUnvYFARYNKNWYBm2S5kMMcYBtj2CEkgUZE8mLFFmrKiALqhn17J/8qt7YD/+3 octAzsMLYE5Joqke6z+96cl3DnIQuWna+X7/X1bTct26Oc8mpFzvuHfuQU2tAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUrgSP4sEDluM1BUH1/1lsiQ9mIlQwHwYDVR0j BBgwFoAUsokoAG2e0o9+yYkXT8nEDqRIOMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW5nZWVqY2NQYXozaW1WbWUzcUQ0N2lQeDZYdFZ2eXJrS1ZMMURUM2p1 UHovMC9CMjg5MjgwMDZEOUVEMjhGN0VDOTg5MTc0RkM5QzQwRUE0NDgzOEMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyODkyODAwNkQ5RUQyOEY3 RUM5ODkxNzRGQzlDNDBFQTQ0ODM4QzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzluZ2VlamNjUGF6M2ltVm1lM3FENDdpUHg2WHRWdnlya0tWTDFEVDNqdVB6LzAv MzEzNjM4MmUzMTM5MzcyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKoxVQwDQYJKoZIhvcNAQELBQADggEBAEkzOMMa sfRvFIbwTGJR3S9/CeopuMbyv5IDko2ZpcYFn/QrMQTRVnFrKRv7niyecxYkWZFs zitr3tStD+GSDhtok//azB1CLIc0EFvw6bgan7D0dA4e8kJu8y3sY4YR42lCvvZO oO92h705RlaOwJ5pHt4iZWTbnTdRo0zScTvXXhm/gpcOnKRfPrZcrf816CFV//Lz 57bK8knARGVmQC564joTw5Lk49G5rLuFqsxxDFKTh5rgs5DcNHjZLNR1oqJC/uGq sKy72jCg+y45mD3MTOZ6VKIWkn8h6dsnpakKW2DET+hh6jS94MYYIu7Ug90iXfEV vgM+dl1kvSKc/ao= -----END CERTIFICATE-----Generated at Fri Jan 9 21:13:34 2026 by rpki-client