This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa File: 3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (raw, json) Hash identifier: MQSsEBmbTFs+u836IYuAxkGUz5TinycGzPBh0NSq8PI= Subject key identifier: 40:88:F3:F1:83:FF:68:03:AA:4A:A2:F3:D1:A2:FC:B7:6F:F8:89:4C Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90 Certificate serial: 4A4D15370887BC3E99ADA0E600A0A43256CC1299 Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa Signing time: Fri 09 Jan 2026 06:20:11 +0000 ROA not before: Fri 09 Jan 2026 06:15:11 +0000 ROA not after: Fri 08 Jan 2027 06:20:11 +0000 asID: 266178 IP address blocks: 138.97.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4d:15:37:08:87:bc:3e:99:ad:a0:e6:00:a0:a4:32:56:cc:12:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90 Validity Not Before: Jan 9 06:15:11 2026 GMT Not After : Jan 8 06:20:11 2027 GMT Subject: CN=4088F3F183FF6803AA4AA2F3D1A2FCB76FF8894C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:fb:bd:6b:ce:0e:6d:e0:2a:30:13:07:89: 83:d9:ee:4a:b4:a5:6d:7f:14:51:80:d6:57:52:07: a0:75:8a:4d:7d:ea:30:ae:25:85:53:6a:b8:f2:91: 80:8d:58:82:ff:81:3d:ff:d9:6d:01:e5:61:21:b4: c4:6e:be:65:e0:50:13:65:4a:e4:86:2e:a3:fb:78: 5b:d1:95:98:ab:39:b0:fc:fb:ae:0e:82:35:9a:92: f9:ca:2e:ae:af:86:06:f2:81:61:19:00:3c:80:cd: 9a:41:40:9e:14:b9:4a:23:74:02:b1:77:0a:63:66: e9:20:55:48:88:11:cf:e0:64:bd:51:8d:26:52:a8: 0d:7a:38:33:52:d7:b3:bd:85:b1:19:a7:c0:06:2a: 39:09:97:f5:28:73:ca:04:57:4f:19:7b:0f:c9:2c: 6c:c4:eb:d5:3a:3b:c3:f2:a4:2a:33:46:1d:c3:75: 75:ba:12:c9:b4:38:4f:b3:0f:97:59:19:d2:c6:e8: 22:73:1f:5f:95:f3:99:35:bd:6b:07:e2:9f:04:da: 67:08:d4:e4:ee:c1:4d:13:02:cb:9b:77:1f:6f:69: 89:7c:64:b5:1e:5b:52:8a:5f:f3:48:bd:55:f1:ac: bc:65:56:87:88:0a:a6:b0:1a:3f:60:2e:d0:3e:a8: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:88:F3:F1:83:FF:68:03:AA:4A:A2:F3:D1:A2:FC:B7:6F:F8:89:4C X509v3 Authority Key Identifier: keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:17:3a:0d:f3:b7:64:04:68:8c:78:1b:14:5c:32:34:1b:83: 38:9f:c3:be:c1:e7:99:9a:a8:5b:07:04:65:b2:ff:ab:ee:97: 83:d9:0e:cd:15:f6:6f:85:89:ee:1c:de:93:d2:8e:9d:3f:e7: 54:79:a2:17:fa:67:72:fd:f0:68:50:c9:c9:35:86:ea:09:d7: 51:2a:81:07:c6:0a:cf:19:50:47:c3:44:c7:d3:c8:94:b0:d2: 2d:9e:1f:ef:43:54:a6:35:c1:4b:c9:4d:6c:71:90:cb:0f:05: 89:89:25:6a:b6:c1:71:d0:74:84:48:12:70:ed:f2:e7:5d:9b: a9:71:6c:b6:be:4e:34:86:0b:97:1e:9b:2b:2d:40:6f:67:2b: ce:d7:ce:c4:68:da:d4:30:74:fb:02:41:1d:bc:ba:e1:5d:17: ca:48:42:4c:5a:ed:54:f8:a2:ae:03:d0:74:36:67:44:87:62: c4:af:e7:38:30:51:bf:e0:bb:89:da:b0:9c:32:9c:b4:2e:bc: 7e:d5:d3:75:6c:a1:7d:01:28:d2:a0:4d:43:2d:fc:69:0f:d3: 61:0f:34:b4:e2:a4:6c:38:5a:05:dd:8e:e6:ba:c9:b4:66:0c: ed:a0:d2:f4:84:43:f3:4e:f6:22:c8:70:80:f1:72:66:e1:d4: 18:68:4c:f2 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUSk0VNwiHvD6ZraDmAKCkMlbMEpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCMjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENF QkMzQkI5MDAeFw0yNjAxMDkwNjE1MTFaFw0yNzAxMDgwNjIwMTFaMDMxMTAvBgNV BAMTKDQwODhGM0YxODNGRjY4MDNBQTRBQTJGM0QxQTJGQ0I3NkZGODg5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConPu9a84ObeAqMBMHiYPZ7kq0 pW1/FFGA1ldSB6B1ik196jCuJYVTarjykYCNWIL/gT3/2W0B5WEhtMRuvmXgUBNl SuSGLqP7eFvRlZirObD8+64OgjWakvnKLq6vhgbygWEZADyAzZpBQJ4UuUojdAKx dwpjZukgVUiIEc/gZL1RjSZSqA16ODNS17O9hbEZp8AGKjkJl/Uoc8oEV08Zew/J LGzE69U6O8PypCozRh3DdXW6Esm0OE+zD5dZGdLG6CJzH1+V85k1vWsH4p8E2mcI 1OTuwU0TAsubdx9vaYl8ZLUeW1KKX/NIvVXxrLxlVoeICqawGj9gLtA+qMMlAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQIjz8YP/aAOqSqLz0aL8t2/4iUwwHwYDVR0j BBgwFoAUi7I/sPOPfN4XhS3GG9I03OvDu5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3Ix cVEvMS84QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQjIzRkIwRjM4RjdDREUx Nzg1MkRDNjFCRDIzNERDRUJDM0JCOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzMxRUNlTmE2SkZyUU5OeVNaZ3VTaTgyU3oxMTRnQTVqUnhRWU0yUG9yMXFRLzEv MzEzMzM4MmUzOTM3MmUzMTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzYzMTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKYZAwDQYJKoZIhvcNAQELBQADggEBAJoXOg3z t2QEaIx4GxRcMjQbgzifw77B55maqFsHBGWy/6vul4PZDs0V9m+Fie4c3pPSjp0/ 51R5ohf6Z3L98GhQyck1huoJ11EqgQfGCs8ZUEfDRMfTyJSw0i2eH+9DVKY1wUvJ TWxxkMsPBYmJJWq2wXHQdIRIEnDt8uddm6lxbLa+TjSGC5cemystQG9nK87XzsRo 2tQwdPsCQR28uuFdF8pIQkxa7VT4oq4D0HQ2Z0SHYsSv5zgwUb/gu4nasJwynLQu vH7V03VsoX0BKNKgTUMt/GkP02EPNLTipGw4WgXdjua6ybRmDO2g0vSEQ/NO9iLI cIDxcmbh1BhoTPI= -----END CERTIFICATE-----Generated at Sun Jan 25 22:08:09 2026 by rpki-client