This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa File: 3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa (raw, json) Hash identifier: VBX8VVuRiQOR4WpSe4LynrqweuAdDnpKN56PfS3/QQU= Subject key identifier: 49:2B:CE:08:87:92:C4:2E:E6:35:FE:F8:21:5D:81:A8:99:80:8B:73 Certificate issuer: /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1 Certificate serial: 2F9519D5AAE817BE3287C1A27ADDC498D4602911 Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa Signing time: Fri 02 Jan 2026 21:33:36 +0000 ROA not before: Fri 02 Jan 2026 21:28:36 +0000 ROA not after: Fri 01 Jan 2027 21:33:36 +0000 asID: 263518 IP address blocks: 168.197.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 16:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:95:19:d5:aa:e8:17:be:32:87:c1:a2:7a:dd:c4:98:d4:60:29:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1 Validity Not Before: Jan 2 21:28:36 2026 GMT Not After : Jan 1 21:33:36 2027 GMT Subject: CN=492BCE088792C42EE635FEF8215D81A899808B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:00:db:5a:60:59:c0:cc:cc:57:79:cf:0e: 0f:a3:bc:76:b9:11:d5:9f:ef:b3:9f:dd:e6:1a:0a: 31:67:49:bb:ca:00:f6:4d:03:d6:93:9e:f6:2f:5f: 3b:2b:dc:90:28:f0:73:8c:cb:86:33:09:28:5c:61: d6:8b:cc:71:71:99:9d:3d:ec:57:6f:02:e6:a2:95: 3c:24:89:e0:0e:cf:41:47:7e:9e:30:d5:52:47:3a: 99:64:be:58:29:bd:d0:da:70:0d:7c:c1:74:2a:cb: 1e:13:db:42:a9:49:3c:67:ba:41:c0:aa:6f:2c:ee: 5d:27:36:ad:1f:ef:fe:16:ae:c2:d8:2a:13:6c:b6: e1:49:ab:30:c1:fe:d9:4c:3e:7d:32:08:b5:94:6f: e3:55:be:04:cb:6b:13:0d:fc:01:1f:2e:fb:cd:e7: c7:71:1a:bf:43:59:14:9e:5d:4d:cb:c5:35:a0:ff: 37:24:c5:8a:10:66:54:23:9b:98:6f:01:d5:cd:09: 12:c5:f8:94:a7:69:e5:17:d0:a0:d4:21:0d:bd:94: 8e:28:52:0f:ac:45:e5:a1:d2:14:a5:58:7a:3e:e6: ee:1b:ee:6a:34:30:e5:09:4e:3c:81:d9:5d:bf:b5: 42:3e:6e:0b:02:40:a4:63:26:23:97:38:6b:75:77: 74:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2B:CE:08:87:92:C4:2E:E6:35:FE:F8:21:5D:81:A8:99:80:8B:73 X509v3 Authority Key Identifier: keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.85.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:54:9f:e9:47:43:a9:10:f9:79:2a:de:13:a1:63:9b:a7:6a: 7c:22:78:c8:c8:e0:26:07:6d:83:a3:a5:95:1c:20:aa:9f:61: c0:26:6d:fe:90:0f:9d:55:b6:5f:d0:30:07:b4:73:a6:0a:8e: 89:c8:47:5d:de:a9:dc:0c:1a:10:fb:df:33:0a:d8:86:79:db: c7:e8:07:6b:44:49:cd:0c:44:aa:f1:e4:03:57:ac:a4:f9:8f: 15:ff:5a:34:54:13:5d:ec:34:db:0e:c9:b2:ea:6d:d8:d8:b0: 7d:c5:ea:2d:f2:d6:c2:09:fc:0a:c8:b4:13:9b:a4:5d:fc:2c: e1:e3:58:3b:c3:ff:54:04:05:9a:af:3f:68:3e:a6:98:55:a8: 7a:7b:d7:20:93:5d:43:e3:35:67:44:62:3a:46:dc:dc:87:b6: 69:64:b6:e6:92:8e:12:bd:72:45:16:15:ae:e5:a8:f5:86:48: f3:a3:8e:8c:4c:67:fa:a8:f7:70:f6:87:ec:c9:25:0b:6d:5f: e3:4a:46:56:e1:cf:f7:53:cd:3d:ee:00:ca:20:11:05:75:6c: 58:3e:ed:ba:5d:c1:c9:c0:25:7b:44:86:2a:87:f3:d7:e7:d1: ca:b6:66:c2:bb:d9:9b:cf:12:21:92:c1:b7:06:30:29:96:0b: a9:ce:68:a4 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUL5UZ1aroF74yh8Giet3EmNRgKREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI4OTI4MDA2RDlFRDI4RjdFQzk4OTE3NEZDOUM0MEVB NDQ4MzhDMTAeFw0yNjAxMDIyMTI4MzZaFw0yNzAxMDEyMTMzMzZaMDMxMTAvBgNV BAMTKDQ5MkJDRTA4ODc5MkM0MkVFNjM1RkVGODIxNUQ4MUE4OTk4MDhCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQgDbWmBZwMzMV3nPDg+jvHa5 EdWf77Of3eYaCjFnSbvKAPZNA9aTnvYvXzsr3JAo8HOMy4YzCShcYdaLzHFxmZ09 7FdvAuailTwkieAOz0FHfp4w1VJHOplkvlgpvdDacA18wXQqyx4T20KpSTxnukHA qm8s7l0nNq0f7/4WrsLYKhNstuFJqzDB/tlMPn0yCLWUb+NVvgTLaxMN/AEfLvvN 58dxGr9DWRSeXU3LxTWg/zckxYoQZlQjm5hvAdXNCRLF+JSnaeUX0KDUIQ29lI4o Ug+sReWh0hSlWHo+5u4b7mo0MOUJTjyB2V2/tUI+bgsCQKRjJiOXOGt1d3QxAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUSSvOCIeSxC7mNf74IV2BqJmAi3MwHwYDVR0j BBgwFoAUsokoAG2e0o9+yYkXT8nEDqRIOMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW5nZWVqY2NQYXozaW1WbWUzcUQ0N2lQeDZYdFZ2eXJrS1ZMMURUM2p1 UHovMC9CMjg5MjgwMDZEOUVEMjhGN0VDOTg5MTc0RkM5QzQwRUE0NDgzOEMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyODkyODAwNkQ5RUQyOEY3 RUM5ODkxNzRGQzlDNDBFQTQ0ODM4QzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzluZ2VlamNjUGF6M2ltVm1lM3FENDdpUHg2WHRWdnlya0tWTDFEVDNqdVB6LzAv MzEzNjM4MmUzMTM5MzcyZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACoxVUwDQYJKoZIhvcNAQELBQADggEBAItUn+lH Q6kQ+Xkq3hOhY5unanwieMjI4CYHbYOjpZUcIKqfYcAmbf6QD51Vtl/QMAe0c6YK jonIR13eqdwMGhD73zMK2IZ528foB2tESc0MRKrx5ANXrKT5jxX/WjRUE13sNNsO ybLqbdjYsH3F6i3y1sIJ/ArItBObpF38LOHjWDvD/1QEBZqvP2g+pphVqHp71yCT XUPjNWdEYjpG3NyHtmlktuaSjhK9ckUWFa7lqPWGSPOjjoxMZ/qo93D2h+zJJQtt X+NKRlbhz/dTzT3uAMogEQV1bFg+7bpdwcnAJXtEhiqH89fn0cq2ZsK72ZvPEiGS wbcGMCmWC6nOaKQ= -----END CERTIFICATE-----Generated at Fri Jan 9 21:13:31 2026 by rpki-client