This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa File: 3136382e302e32302e302f32322d3332203d3e20323635323432.roa (raw, json) Hash identifier: EYiQKLzz6k+MCFS7gqHOCaug8nhQNb710odOrLxLiCU= Subject key identifier: 65:31:8E:F6:42:28:B4:BB:F4:BD:56:98:9B:57:75:4F:55:88:BE:BB Certificate issuer: /CN=30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2 Certificate serial: 352D18D035A00C51300FCC8A40ACCB5DF6E033F6 Authority key identifier: 30:94:6C:8D:F3:C1:C4:B6:0A:B1:CF:C7:F1:44:F6:5B:CB:96:AF:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa Signing time: Fri 02 Jan 2026 15:37:47 +0000 ROA not before: Fri 02 Jan 2026 15:32:47 +0000 ROA not after: Fri 01 Jan 2027 15:37:47 +0000 asID: 265242 IP address blocks: 168.0.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2.crl rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 06:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2d:18:d0:35:a0:0c:51:30:0f:cc:8a:40:ac:cb:5d:f6:e0:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2 Validity Not Before: Jan 2 15:32:47 2026 GMT Not After : Jan 1 15:37:47 2027 GMT Subject: CN=65318EF64228B4BBF4BD56989B57754F5588BEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:b9:31:12:d5:b5:ed:5c:5c:c7:cf:a5:9f: 14:56:c5:f9:7d:0b:2b:d4:d1:33:85:57:7f:3c:5f: 6e:72:49:89:97:57:82:d3:fe:03:2b:e4:c3:ca:c2: 6a:b3:8a:0f:5b:6b:e9:2b:8d:8d:61:75:ee:4d:db: 07:10:95:de:e5:db:56:c8:60:c5:6a:e8:31:06:1a: 48:1d:bd:fc:4d:2b:a5:b9:12:0a:7b:d9:27:2b:f5: bd:f8:e8:df:4c:6d:c9:23:54:d3:81:02:4e:e6:68: fc:91:e6:c6:0e:9f:2a:f0:76:30:2e:8e:89:32:40: b9:fc:24:28:95:ec:53:ab:51:18:3d:30:cb:8d:22: 29:b1:7c:36:f5:40:95:f5:95:28:48:1f:0f:c7:2c: 61:d0:07:1d:8b:05:b6:61:ef:5a:f5:17:be:af:22: d6:82:ba:c5:47:b8:b6:ed:8b:95:d1:f6:72:c3:5a: 3d:2e:88:32:76:c5:8f:8b:c2:cb:de:b1:e1:1a:05: 10:20:7d:01:3b:18:9e:25:3b:92:22:6d:b4:4c:67: 38:4f:1c:4e:fe:f6:27:5a:8c:1a:5a:6c:5c:0f:cc: d4:24:2a:0d:13:98:f3:b8:20:eb:5f:a1:b8:72:e5: 38:a1:5c:c0:77:40:f5:f2:fd:dc:dd:1b:df:cd:6a: f0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:31:8E:F6:42:28:B4:BB:F4:BD:56:98:9B:57:75:4F:55:88:BE:BB X509v3 Authority Key Identifier: keyid:30:94:6C:8D:F3:C1:C4:B6:0A:B1:CF:C7:F1:44:F6:5B:CB:96:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30946C8DF3C1C4B60AB1CFC7F144F65BCB96AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.20.0/22 Signature Algorithm: sha256WithRSAEncryption 84:f8:33:b4:4e:00:87:b4:6b:f3:ae:fe:c6:5f:17:4e:93:f4: 5a:62:51:ab:e4:18:42:a2:35:7a:cc:65:a5:41:57:e3:6f:1e: b8:12:f8:a4:da:ae:af:f6:72:14:96:41:80:a9:cc:bf:9c:10: b7:ff:82:70:9a:6c:4d:85:a5:13:16:ab:d5:a9:6a:ba:a9:41: 68:61:fb:1a:a4:10:1f:62:3b:7c:4d:ac:11:9d:aa:a1:e8:ad: 9d:ca:e5:87:c3:2d:27:7b:4f:c9:38:34:b0:73:a9:21:b2:7e: f6:0e:34:53:95:86:0e:ae:9a:b6:c6:a4:fe:95:6a:1e:75:a8: ea:0a:4d:be:da:01:69:a8:f3:1e:c6:fa:16:76:b5:42:db:d0: 61:25:88:09:16:7c:89:45:db:e8:e2:1a:52:d7:34:25:38:69: 7d:05:7d:1f:ee:dd:91:de:1f:7b:6f:86:88:ff:9b:67:f9:1e: 7e:92:3d:0b:d8:8d:4a:96:bf:1f:22:0f:45:39:bc:98:79:47: 41:db:79:e6:4d:f6:2a:ca:45:dd:97:ff:3e:86:d1:24:33:45: ed:b1:5d:61:a2:b1:c0:06:90:2d:e7:17:d2:99:23:6b:fb:9a: 31:33:b9:ba:2b:3e:21:2e:cf:54:f5:c7:ac:55:34:61:8b:5b: ec:36:06:44 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUNS0Y0DWgDFEwD8yKQKzLXfbgM/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5NDZDOERGM0MxQzRCNjBBQjFDRkM3RjE0NEY2NUJD Qjk2QUZEMjAeFw0yNjAxMDIxNTMyNDdaFw0yNzAxMDExNTM3NDdaMDMxMTAvBgNV BAMTKDY1MzE4RUY2NDIyOEI0QkJGNEJENTY5ODlCNTc3NTRGNTU4OEJFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxurkxEtW17Vxcx8+lnxRWxfl9 CyvU0TOFV388X25ySYmXV4LT/gMr5MPKwmqzig9ba+krjY1hde5N2wcQld7l21bI YMVq6DEGGkgdvfxNK6W5Egp72Scr9b346N9MbckjVNOBAk7maPyR5sYOnyrwdjAu jokyQLn8JCiV7FOrURg9MMuNIimxfDb1QJX1lShIHw/HLGHQBx2LBbZh71r1F76v ItaCusVHuLbti5XR9nLDWj0uiDJ2xY+LwsveseEaBRAgfQE7GJ4lO5IibbRMZzhP HE7+9idajBpabFwPzNQkKg0TmPO4IOtfobhy5TihXMB3QPXy/dzdG9/NavBDAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUZTGO9kIotLv0vVaYm1d1T1WIvrswHwYDVR0j BBgwFoAUMJRsjfPBxLYKsc/H8UT2W8uWr9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21uRFBxZXV5Z2FRM0ZIeXBCVzhxNk1WSnI2UWNRdFNyeEtOWnFIbnBI eXUvMC8zMDk0NkM4REYzQzFDNEI2MEFCMUNGQzdGMTQ0RjY1QkNCOTZBRkQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwOTQ2QzhERjNDMUM0QjYw QUIxQ0ZDN0YxNDRGNjVCQ0I5NkFGRDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNtbkRQcWV1eWdhUTNGSHlwQlc4cTZNVkpyNlFjUXRTcnhLTlpxSG5wSHl1LzAv MzEzNjM4MmUzMDJlMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTMy MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAqgAFDANBgkqhkiG9w0BAQsFAAOCAQEAhPgztE4Ah7Rr 867+xl8XTpP0WmJRq+QYQqI1esxlpUFX428euBL4pNqur/ZyFJZBgKnMv5wQt/+C cJpsTYWlExar1alquqlBaGH7GqQQH2I7fE2sEZ2qoeitncrlh8MtJ3tPyTg0sHOp IbJ+9g40U5WGDq6atsak/pVqHnWo6gpNvtoBaajzHsb6Fna1QtvQYSWICRZ8iUXb 6OIaUtc0JThpfQV9H+7dkd4fe2+GiP+bZ/kefpI9C9iNSpa/HyIPRTm8mHlHQdt5 5k32KspF3Zf/PobRJDNF7bFdYaKxwAaQLecX0pkja/uaMTO5uis+IS7PVPXHrFU0 YYtb7DYGRA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:55:34 2026 by rpki-client