This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa File: 3133382e302e35322e302f32322d3234203d3e20323634353235.roa (raw, json) Hash identifier: gUnR/cpKfNnQ61EP/ZNa/L6D6JAeYAoNKy59WV7LzdA= Subject key identifier: D3:68:6D:C7:C7:D2:AC:2D:CA:C7:F7:62:92:49:4D:8C:CC:17:A4:C4 Certificate issuer: /CN=4766F3CA43125EDED2BA274155576386D9101EDC Certificate serial: 38DC0D6244B1FB60D1101A5B199DDE8347BB4033 Authority key identifier: 47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa Signing time: Mon 05 Jan 2026 21:29:43 +0000 ROA not before: Mon 05 Jan 2026 21:24:43 +0000 ROA not after: Mon 04 Jan 2027 21:29:43 +0000 asID: 264525 IP address blocks: 138.0.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:dc:0d:62:44:b1:fb:60:d1:10:1a:5b:19:9d:de:83:47:bb:40:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4766F3CA43125EDED2BA274155576386D9101EDC Validity Not Before: Jan 5 21:24:43 2026 GMT Not After : Jan 4 21:29:43 2027 GMT Subject: CN=D3686DC7C7D2AC2DCAC7F76292494D8CCC17A4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:06:01:5d:18:17:23:01:0b:2f:fd:e9:d0: b5:76:42:19:cd:c6:cd:2d:a9:dc:54:4a:da:07:da: d8:8e:e2:00:fd:24:cb:ce:03:2c:2f:90:c3:2a:53: 91:24:bd:09:6c:8a:4b:a5:e5:27:2e:a0:32:58:f7: 50:53:83:da:ba:bd:1b:82:ee:90:a2:df:73:38:92: 41:54:8e:c0:f9:ea:e5:c5:93:d4:e2:1b:30:3e:55: dd:33:3b:3c:22:fa:3d:6c:94:6e:f3:41:61:9e:d4: 12:e2:1e:e8:5e:d5:82:01:a6:a7:18:8a:b4:98:34: f7:c7:47:bc:84:64:c3:9b:f6:55:c4:2f:fd:4c:3f: f7:4e:c3:6a:86:d8:d4:03:ac:8b:66:0f:38:31:17: c4:36:89:c9:28:7d:dc:dc:c0:a7:a6:1e:d2:19:99: 48:6a:21:c0:c5:93:52:ed:2d:67:b4:d6:f9:e7:f8: f6:ec:e1:d4:8f:1b:0e:bf:ff:92:48:1b:7c:b2:f4: c3:10:f6:b5:52:28:3c:ff:96:3b:14:6a:34:c6:f9: db:30:82:66:63:fe:c3:75:ef:b9:6c:2c:c1:be:e2: e4:2b:b9:76:d2:9a:03:f9:f4:ee:2c:f6:91:dd:e2: a1:88:32:e5:2b:82:07:f4:7f:e0:5c:c1:49:1a:05: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:68:6D:C7:C7:D2:AC:2D:CA:C7:F7:62:92:49:4D:8C:CC:17:A4:C4 X509v3 Authority Key Identifier: keyid:47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.52.0/22 Signature Algorithm: sha256WithRSAEncryption 68:d5:5a:39:98:4b:fe:fa:01:8a:2b:ff:41:51:c6:95:97:0e: 9d:36:a5:48:4a:53:f8:97:9a:6f:53:a5:7a:94:d9:2e:84:ff: ca:23:a8:38:c1:53:18:22:19:d8:4b:ae:9e:63:0d:08:44:9f: ec:1e:10:a5:6a:3d:3c:b3:64:6e:0d:99:dc:07:e8:17:05:6e: 9b:7c:de:0f:61:a9:7c:61:9f:74:c9:46:74:4f:b5:ca:50:92: c8:84:26:76:f1:1d:cd:e0:db:06:d6:5c:4d:ae:53:94:8e:90: 19:d4:37:da:7a:c7:47:92:1a:1e:8e:f2:d4:86:24:51:c2:b8: 67:86:e7:75:1a:21:c5:9a:7b:ef:8d:63:19:3a:49:e5:64:c8: ce:c6:8d:ba:7f:70:f1:b8:93:9b:2a:b1:04:48:d3:fb:a9:4b: e8:d9:36:77:f4:46:6e:16:0e:e0:8d:2c:0e:32:5a:fb:6b:7d: b7:46:a7:3c:6e:f2:e6:14:69:e1:f3:ce:cb:53:30:90:87:e3: 0b:33:03:93:5c:8a:4c:90:a4:9f:5c:e2:01:3a:61:ac:d2:46: ce:02:a2:ed:dc:1d:5a:b3:cb:fc:59:ba:a4:7c:54:fd:5b:3b: 39:fa:62:a9:3d:25:18:ef:3f:80:85:82:21:93:9b:95:d1:12: 8b:5f:79:93 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUONwNYkSx+2DREBpbGZ3eg0e7QDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2NkYzQ0E0MzEyNUVERUQyQkEyNzQxNTU1NzYzODZE OTEwMUVEQzAeFw0yNjAxMDUyMTI0NDNaFw0yNzAxMDQyMTI5NDNaMDMxMTAvBgNV BAMTKEQzNjg2REM3QzdEMkFDMkRDQUM3Rjc2MjkyNDk0RDhDQ0MxN0E0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTAAYBXRgXIwELL/3p0LV2QhnN xs0tqdxUStoH2tiO4gD9JMvOAywvkMMqU5EkvQlsikul5ScuoDJY91BTg9q6vRuC 7pCi33M4kkFUjsD56uXFk9TiGzA+Vd0zOzwi+j1slG7zQWGe1BLiHuhe1YIBpqcY irSYNPfHR7yEZMOb9lXEL/1MP/dOw2qG2NQDrItmDzgxF8Q2ickofdzcwKemHtIZ mUhqIcDFk1LtLWe01vnn+Pbs4dSPGw6//5JIG3yy9MMQ9rVSKDz/ljsUajTG+dsw gmZj/sN177lsLMG+4uQruXbSmgP59O4s9pHd4qGIMuUrggf0f+BcwUkaBQGdAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU02htx8fSrC3Kx/dikklNjMwXpMQwHwYDVR0j BBgwFoAUR2bzykMSXt7SuidBVVdjhtkQHtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4 d2kvMC80NzY2RjNDQTQzMTI1RURFRDJCQTI3NDE1NTU3NjM4NkQ5MTAxRURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NjZGM0NBNDMxMjVFREVE MkJBMjc0MTU1NTc2Mzg2RDkxMDFFREMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv MzEzMzM4MmUzMDJlMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM1 MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAooANDANBgkqhkiG9w0BAQsFAAOCAQEAaNVaOZhL/voB iiv/QVHGlZcOnTalSEpT+Jeab1OlepTZLoT/yiOoOMFTGCIZ2EuunmMNCESf7B4Q pWo9PLNkbg2Z3AfoFwVum3zeD2GpfGGfdMlGdE+1ylCSyIQmdvEdzeDbBtZcTa5T lI6QGdQ32nrHR5IaHo7y1IYkUcK4Z4bndRohxZp7741jGTpJ5WTIzsaNun9w8biT myqxBEjT+6lL6Nk2d/RGbhYO4I0sDjJa+2t9t0anPG7y5hRp4fPOy1MwkIfjCzMD k1yKTJCkn1ziATphrNJGzgKi7dwdWrPL/Fm6pHxU/Vs7OfpiqT0lGO8/gIWCIZOb ldESi195kw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:25:17 2026 by rpki-client