This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa File: 3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa (raw, json) Hash identifier: QcpLwS7aFbSYaVM1jXkrZB4osFoj+YXGL4xXyYpVmoE= Subject key identifier: 30:A9:5F:A5:31:08:22:69:49:4D:93:06:6C:E4:51:C9:EF:E7:59:66 Certificate issuer: /CN=645369D6E2E42074ECE0733455C39887AD27A324 Certificate serial: 7ACF63ACADA4CA24AD15A8A19EE1F8B95191353B Authority key identifier: 64:53:69:D6:E2:E4:20:74:EC:E0:73:34:55:C3:98:87:AD:27:A3:24 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa Signing time: Fri 26 Dec 2025 12:35:16 +0000 ROA not before: Fri 26 Dec 2025 12:30:16 +0000 ROA not after: Fri 25 Dec 2026 12:35:16 +0000 asID: 262675 IP address blocks: 190.111.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.crl rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 23:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cf:63:ac:ad:a4:ca:24:ad:15:a8:a1:9e:e1:f8:b9:51:91:35:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645369D6E2E42074ECE0733455C39887AD27A324 Validity Not Before: Dec 26 12:30:16 2025 GMT Not After : Dec 25 12:35:16 2026 GMT Subject: CN=30A95FA531082269494D93066CE451C9EFE75966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:29:fd:bb:4a:5d:6d:2f:2a:e5:50:6d:34: b7:b0:b2:d2:1e:c1:fa:aa:6b:7d:a6:75:b9:42:3c: 6e:dc:52:0c:7e:3f:85:5d:a2:78:81:df:3a:6c:15: 67:8c:ef:ab:fe:5f:6d:d1:84:7b:61:e7:10:61:07: d7:0b:ad:b7:5a:02:df:da:8c:3b:85:cd:a5:80:6a: 77:5b:fb:43:65:9a:01:02:08:d4:72:3e:52:c3:e0: 09:7f:73:33:e6:ea:44:f2:ff:d7:b9:0b:13:a5:43: 42:92:25:85:83:e4:db:5d:86:01:56:e9:d7:54:9c: 20:40:1f:7a:30:c5:24:0f:6d:cb:d0:29:1a:4d:b5: a1:88:35:e3:84:e8:6d:47:32:6a:be:1a:1f:f2:23: a4:2a:dd:06:62:72:e5:45:b7:ea:3a:59:20:99:c5: 80:19:28:01:89:a3:65:9c:a7:ed:f8:0f:9d:4c:91: a7:2f:62:19:86:7d:3e:28:3c:2f:95:2b:d4:84:71: 1a:4f:f9:52:37:6f:83:fb:0d:89:47:05:70:58:e2: a5:6f:4c:0c:b9:da:18:50:75:66:38:e1:56:dc:c7: 36:62:f5:90:bb:dd:30:d4:82:e7:38:e3:44:7d:66: 5d:0f:e7:7c:f8:bb:83:1a:95:62:65:23:66:a6:57: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A9:5F:A5:31:08:22:69:49:4D:93:06:6C:E4:51:C9:EF:E7:59:66 X509v3 Authority Key Identifier: keyid:64:53:69:D6:E2:E4:20:74:EC:E0:73:34:55:C3:98:87:AD:27:A3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.128.0/22 Signature Algorithm: sha256WithRSAEncryption 88:de:b1:23:28:9c:f5:cf:5a:97:7b:fb:40:eb:39:94:ec:92: 73:cb:b0:09:01:06:bf:19:48:8a:a7:ed:f5:1c:6d:ea:15:86: 82:e0:f5:23:f9:ed:70:29:42:42:a4:5c:7c:93:42:40:2e:e4: 4a:f1:1b:58:f5:cd:78:be:72:5f:76:60:49:3a:c0:94:e6:d4: bf:3d:87:fe:0b:78:54:25:b9:86:09:cb:6c:3b:8b:86:eb:75: 94:2e:eb:86:ca:c0:02:e5:7d:48:eb:2d:a4:db:b5:b4:e5:c8: f9:c6:81:61:69:53:bc:ca:81:4d:2f:f2:9f:7f:28:93:de:9d: 36:18:c8:1b:fa:40:f2:d8:d0:0d:67:27:c3:35:cb:00:f0:cc: 9d:22:95:7c:7e:12:96:c6:37:80:33:b3:a6:94:88:5f:2c:6b: e5:84:cc:a7:ee:93:dd:c4:f5:02:39:50:41:e8:6e:99:0c:4c: b8:b1:d9:0b:3a:5a:a0:bc:29:95:5b:4a:60:50:70:c8:28:d8: 44:ef:58:6f:58:f3:a4:0c:29:c3:90:55:ba:cf:24:7d:8f:4b: 63:ae:d5:50:84:2f:e6:1c:8c:53:fc:73:ed:b3:3e:cd:68:7a: 76:a8:28:c1:a1:90:b8:5c:86:80:f2:e8:cf:43:ec:3d:2d:87: 2b:70:1a:e6 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUes9jrK2kyiStFaihnuH4uVGRNTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1MzY5RDZFMkU0MjA3NEVDRTA3MzM0NTVDMzk4ODdB RDI3QTMyNDAeFw0yNTEyMjYxMjMwMTZaFw0yNjEyMjUxMjM1MTZaMDMxMTAvBgNV BAMTKDMwQTk1RkE1MzEwODIyNjk0OTREOTMwNjZDRTQ1MUM5RUZFNzU5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFSn9u0pdbS8q5VBtNLewstIe wfqqa32mdblCPG7cUgx+P4VdoniB3zpsFWeM76v+X23RhHth5xBhB9cLrbdaAt/a jDuFzaWAandb+0NlmgECCNRyPlLD4Al/czPm6kTy/9e5CxOlQ0KSJYWD5NtdhgFW 6ddUnCBAH3owxSQPbcvQKRpNtaGINeOE6G1HMmq+Gh/yI6Qq3QZicuVFt+o6WSCZ xYAZKAGJo2Wcp+34D51MkacvYhmGfT4oPC+VK9SEcRpP+VI3b4P7DYlHBXBY4qVv TAy52hhQdWY44VbcxzZi9ZC73TDUguc440R9Zl0P53z4u4MalWJlI2amV9DxAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUMKlfpTEIImlJTZMGbORRye/nWWYwHwYDVR0j BBgwFoAUZFNp1uLkIHTs4HM0VcOYh60noyQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr dzIvMC82NDUzNjlENkUyRTQyMDc0RUNFMDczMzQ1NUMzOTg4N0FEMjdBMzI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0NTM2OUQ2RTJFNDIwNzRF Q0UwNzMzNDU1QzM5ODg3QUQyN0EzMjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM1TGtkdDlTZExFWjl2NXNVRVp6dmtHTXdSVDR4QjluTVZMZmdpcmpHa3cyLzAv MzEzOTMwMmUzMTMxMzEyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMjM2MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5vgDANBgkqhkiG9w0BAQsFAAOCAQEAiN6x Iyic9c9al3v7QOs5lOySc8uwCQEGvxlIiqft9Rxt6hWGguD1I/ntcClCQqRcfJNC QC7kSvEbWPXNeL5yX3ZgSTrAlObUvz2H/gt4VCW5hgnLbDuLhut1lC7rhsrAAuV9 SOstpNu1tOXI+caBYWlTvMqBTS/yn38ok96dNhjIG/pA8tjQDWcnwzXLAPDMnSKV fH4SlsY3gDOzppSIXyxr5YTMp+6T3cT1AjlQQehumQxMuLHZCzpaoLwplVtKYFBw yCjYRO9Yb1jzpAwpw5BVus8kfY9LY67VUIQv5hyMU/xz7bM+zWh6dqgowaGQuFyG gPLoz0PsPS2HK3Aa5g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:09:01 2026 by rpki-client