This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3139312e3234322e33322e302f32322d3234203d3e203532353733.roa File: 3139312e3234322e33322e302f32322d3234203d3e203532353733.roa (raw, json) Hash identifier: EfCZrreOVhHnAyjdCBguEzlrSRcCBbZPDM5Odr/zOPc= Subject key identifier: 2E:60:CE:03:87:4C:0F:E8:F0:E7:3A:C7:A5:53:F0:33:9B:00:33:F7 Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Certificate serial: 73A6192A8E9CAABA4329164008AE5FB212DB3D30 Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3139312e3234322e33322e302f32322d3234203d3e203532353733.roa Signing time: Wed 07 Jan 2026 22:22:49 +0000 ROA not before: Wed 07 Jan 2026 22:17:49 +0000 ROA not after: Wed 06 Jan 2027 22:22:49 +0000 asID: 52573 IP address blocks: 191.242.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 05:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a6:19:2a:8e:9c:aa:ba:43:29:16:40:08:ae:5f:b2:12:db:3d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Validity Not Before: Jan 7 22:17:49 2026 GMT Not After : Jan 6 22:22:49 2027 GMT Subject: CN=2E60CE03874C0FE8F0E73AC7A553F0339B0033F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:fc:91:fa:c5:16:d1:db:36:24:f4:e9:74: 15:78:2e:b5:d9:e9:a3:76:0c:00:d7:e5:33:f0:4a: 85:aa:e5:62:63:71:8a:33:37:14:36:e2:7f:81:7a: fa:2a:8a:c8:c1:14:13:ee:74:1f:27:e3:3c:8f:1e: 97:58:bb:6d:0d:01:24:15:c9:7a:d2:0c:41:b0:b0: eb:ef:05:e4:05:39:e2:44:b9:c1:3c:76:78:13:b8: b4:50:fe:1d:b3:81:66:64:9a:8e:d6:f9:b8:05:68: 55:0b:d3:4e:7d:25:42:ae:b5:d0:b2:0c:18:b8:ce: e8:fb:2f:1b:a1:c2:58:e7:73:4a:84:62:df:60:c5: 8a:b2:a9:d7:80:05:ef:d9:03:7a:ff:81:00:e2:8b: 44:64:18:6d:dd:c5:1b:4f:16:d4:df:ca:22:4e:7e: d5:c7:75:20:fe:9e:0a:87:d4:59:30:97:99:51:6f: 4b:20:e4:2c:6c:6c:f0:a7:d2:8e:d6:24:e3:e9:5c: 0a:1b:46:bd:25:30:28:dc:09:6a:2d:d9:2e:6d:a8: 75:e1:ee:cb:e4:c5:52:27:d2:a6:a5:dd:db:89:6c: 26:a3:ff:9d:d9:56:6e:87:8a:00:93:b8:88:35:28: 0b:29:f8:cf:50:5e:6a:b6:52:f7:e4:a4:18:ed:e9: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:60:CE:03:87:4C:0F:E8:F0:E7:3A:C7:A5:53:F0:33:9B:00:33:F7 X509v3 Authority Key Identifier: keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3139312e3234322e33322e302f32322d3234203d3e203532353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.242.32.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:9f:3e:ed:18:72:4b:ab:ff:3d:8e:7b:50:9c:51:c1:04:9e: 4f:03:3f:b7:15:57:98:8f:ea:bf:d0:34:b8:ed:d2:63:d2:33: 0c:45:e8:27:01:4a:7f:34:b0:51:0a:35:50:97:ae:07:4a:40: 67:ff:c7:ed:78:1f:bb:bd:29:4b:ed:2a:d9:50:d7:62:9f:13: 15:bb:02:0e:25:7c:fa:0b:22:a0:bd:ba:54:fa:77:f9:eb:d9: 2b:2e:33:c6:4f:7b:c2:ba:e2:61:06:10:fa:ba:01:16:3b:88: 2c:6b:de:0e:a3:07:b2:54:c7:2c:16:3e:5d:68:14:42:5e:19: 0b:6e:34:fe:80:91:61:eb:cd:dc:40:55:b2:dd:0a:fc:88:3c: f9:e3:fc:ea:8c:c8:08:eb:27:d3:c6:07:6a:5a:d4:d5:c6:b4: bc:cc:2d:ca:9a:43:86:f4:aa:63:e5:5a:0f:37:29:54:aa:f8: 36:47:06:7d:79:76:56:a2:68:44:5a:c9:8f:cb:89:fb:d9:ab: 8b:b0:16:d3:1c:47:6a:15:48:34:2f:45:ea:8c:35:73:b9:43: 91:14:2e:10:24:f9:54:60:af:5b:a6:27:33:1a:41:82:8e:05: 4a:a1:2b:c0:84:55:37:56:d4:1a:90:db:c1:0e:e0:27:04:b8: b3:9b:82:72 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUc6YZKo6cqrpDKRZACK5fshLbPTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4 NjdFMjVDNzAeFw0yNjAxMDcyMjE3NDlaFw0yNzAxMDYyMjIyNDlaMDMxMTAvBgNV BAMTKDJFNjBDRTAzODc0QzBGRThGMEU3M0FDN0E1NTNGMDMzOUIwMDMzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJfyR+sUW0ds2JPTpdBV4LrXZ 6aN2DADX5TPwSoWq5WJjcYozNxQ24n+BevoqisjBFBPudB8n4zyPHpdYu20NASQV yXrSDEGwsOvvBeQFOeJEucE8dngTuLRQ/h2zgWZkmo7W+bgFaFUL0059JUKutdCy DBi4zuj7Lxuhwljnc0qEYt9gxYqyqdeABe/ZA3r/gQDii0RkGG3dxRtPFtTfyiJO ftXHdSD+ngqH1Fkwl5lRb0sg5CxsbPCn0o7WJOPpXAobRr0lMCjcCWot2S5tqHXh 7svkxVIn0qal3duJbCaj/53ZVm6HigCTuIg1KAsp+M9QXmq2UvfkpBjt6SvtAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQULmDOA4dMD+jw5zrHpVPwM5sAM/cwHwYDVR0j BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4 MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv MzEzOTMxMmUzMjM0MzIyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCv/IgMA0GCSqGSIb3DQEBCwUAA4IBAQA6nz7tGHJL q/89jntQnFHBBJ5PAz+3FVeYj+q/0DS47dJj0jMMRegnAUp/NLBRCjVQl64HSkBn /8fteB+7vSlL7SrZUNdinxMVuwIOJXz6CyKgvbpU+nf569krLjPGT3vCuuJhBhD6 ugEWO4gsa94OoweyVMcsFj5daBRCXhkLbjT+gJFh683cQFWy3Qr8iDz54/zqjMgI 6yfTxgdqWtTVxrS8zC3KmkOG9Kpj5VoPNylUqvg2RwZ9eXZWomhEWsmPy4n72auL sBbTHEdqFUg0L0XqjDVzuUORFC4QJPlUYK9bpiczGkGCjgVKoSvAhFU3VtQakNvB DuAnBLizm4Jy -----END CERTIFICATE-----Generated at Mon Jan 26 08:22:57 2026 by rpki-client