This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3136382e302f32322d3234203d3e2032373136.roa File: 3230302e3133322e3136382e302f32322d3234203d3e2032373136.roa (raw, json) Hash identifier: 4bQQZWOXM73fwneBRpQHRCc/vTSzNugurukxB0d0O/M= Subject key identifier: A3:CA:A1:5B:A9:49:41:E0:B5:DD:FF:1C:2C:3C:AC:56:CA:82:F3:AE Certificate issuer: /CN=4940EEB21B4128216F8FFB3B0A997946697632F5 Certificate serial: 6CAEE162A3ADF9DF663D1CF247DFE39623AC54CC Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3136382e302f32322d3234203d3e2032373136.roa Signing time: Tue 20 Jan 2026 13:47:28 +0000 ROA not before: Tue 20 Jan 2026 13:42:28 +0000 ROA not after: Tue 19 Jan 2027 13:47:28 +0000 asID: 2716 IP address blocks: 200.132.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ae:e1:62:a3:ad:f9:df:66:3d:1c:f2:47:df:e3:96:23:ac:54:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5 Validity Not Before: Jan 20 13:42:28 2026 GMT Not After : Jan 19 13:47:28 2027 GMT Subject: CN=A3CAA15BA94941E0B5DDFF1C2C3CAC56CA82F3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:16:b0:b8:6b:71:36:c3:6a:37:f5:34:91: db:28:ab:b5:b3:82:a0:e1:5f:6c:f8:da:5e:a1:71: 2c:e6:38:79:c5:c4:c9:e7:40:2b:f6:13:40:cf:22: 7d:46:66:c6:9e:a0:ee:01:c0:0f:96:1a:f7:fb:9c: 40:de:5f:f1:1f:c4:a0:13:e2:c4:24:18:6d:d8:c1: 89:6b:34:eb:71:0b:c7:69:88:96:42:79:df:cc:96: 16:70:4a:81:dd:30:7d:4a:b1:5d:b2:be:b4:ac:46: 92:12:f0:e4:f8:73:99:63:be:2f:5d:b6:80:c4:4a: 3c:ee:1a:94:c8:3b:ba:4e:e7:d7:62:42:87:5f:9f: aa:7e:31:e4:97:a2:67:2e:49:40:78:ba:03:30:d4: 70:d6:c3:07:08:75:0e:08:c3:f0:18:f9:fa:22:e9: 52:48:74:97:f1:e5:7a:47:10:ed:4d:33:8a:60:38: 12:ef:b7:9e:5d:98:e3:95:b2:2e:b4:28:cd:d2:72: ac:bd:dc:31:58:6b:da:eb:08:55:51:42:ae:36:1b: 71:86:2c:3d:7d:df:33:94:50:72:86:a9:2a:d3:77: cf:9d:7e:c2:3a:de:26:3e:23:f5:3f:2a:f5:56:bc: 3d:3a:ef:f9:a2:1b:7f:9e:be:36:c9:82:08:d9:f5: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CA:A1:5B:A9:49:41:E0:B5:DD:FF:1C:2C:3C:AC:56:CA:82:F3:AE X509v3 Authority Key Identifier: keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3136382e302f32322d3234203d3e2032373136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.132.168.0/22 Signature Algorithm: sha256WithRSAEncryption 54:86:80:e2:c9:4c:7b:41:cb:e7:6e:d1:df:72:4a:06:9e:d0: 77:52:df:b9:cc:b6:b5:25:26:5c:e2:32:10:98:6e:ed:c8:47: b4:c7:c8:92:f5:a5:ac:98:4e:44:37:5a:e8:0b:6b:f2:35:4f: 97:89:ad:c7:2f:d9:7d:4e:9f:40:0e:8d:17:dc:a3:1c:c1:d1: b7:69:ed:c7:3c:d0:61:00:bb:4e:88:d9:e5:ac:fa:00:08:8e: 45:90:8f:94:c9:45:7c:06:3d:7c:cf:1e:89:0f:c6:b2:df:39: 7a:74:46:07:95:1d:8a:a1:b6:8b:8c:74:16:53:e6:b3:b3:f7: f1:68:39:b9:40:23:a8:6a:ef:0d:e5:ce:9a:6a:ec:b8:ea:c1: 79:e0:dd:3a:1d:a9:2c:32:e7:0e:a9:7d:9b:b8:b4:37:b2:24: 73:e5:24:76:08:9f:52:1a:91:ab:8d:c6:89:d1:48:68:f1:e7: 97:e3:dc:1e:7a:39:aa:59:10:83:db:1e:88:36:44:c0:63:c2: ed:3a:62:44:53:04:19:ac:5f:3d:29:73:cf:d8:d0:f6:db:49: f8:d1:50:02:b9:49:68:64:e3:18:e6:62:06:1a:e0:b8:cc:db: 3b:f7:dd:af:65:5b:3b:6b:aa:d8:d9:de:30:15:34:fd:58:c2: e7:ac:1b:f4 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUbK7hYqOt+d9mPRzyR9/jliOsVMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk0MEVFQjIxQjQxMjgyMTZGOEZGQjNCMEE5OTc5NDY2 OTc2MzJGNTAeFw0yNjAxMjAxMzQyMjhaFw0yNzAxMTkxMzQ3MjhaMDMxMTAvBgNV BAMTKEEzQ0FBMTVCQTk0OTQxRTBCNURERkYxQzJDM0NBQzU2Q0E4MkYzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0hawuGtxNsNqN/U0kdsoq7Wz gqDhX2z42l6hcSzmOHnFxMnnQCv2E0DPIn1GZsaeoO4BwA+WGvf7nEDeX/EfxKAT 4sQkGG3YwYlrNOtxC8dpiJZCed/MlhZwSoHdMH1KsV2yvrSsRpIS8OT4c5ljvi9d toDESjzuGpTIO7pO59diQodfn6p+MeSXomcuSUB4ugMw1HDWwwcIdQ4Iw/AY+foi 6VJIdJfx5XpHEO1NM4pgOBLvt55dmOOVsi60KM3Scqy93DFYa9rrCFVRQq42G3GG LD193zOUUHKGqSrTd8+dfsI63iY+I/U/KvVWvD067/miG3+evjbJggjZ9X2RAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUo8qhW6lJQeC13f8cLDysVsqC864wHwYDVR0j BBgwFoAUSUDushtBKCFvj/s7Cpl5Rml2MvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEViNEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFT d2EvMC80OTQwRUVCMjFCNDEyODIxNkY4RkZCM0IwQTk5Nzk0NjY5NzYzMkY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NDBFRUIyMUI0MTI4MjE2 RjhGRkIzQjBBOTk3OTQ2Njk3NjMyRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhFYjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAv MzIzMDMwMmUzMTMzMzIyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzczMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCyISoMA0GCSqGSIb3DQEBCwUAA4IBAQBUhoDiyUx7 QcvnbtHfckoGntB3Ut+5zLa1JSZc4jIQmG7tyEe0x8iS9aWsmE5EN1roC2vyNU+X ia3HL9l9Tp9ADo0X3KMcwdG3ae3HPNBhALtOiNnlrPoACI5FkI+UyUV8Bj18zx6J D8ay3zl6dEYHlR2KobaLjHQWU+azs/fxaDm5QCOoau8N5c6aauy46sF54N06Haks MucOqX2buLQ3siRz5SR2CJ9SGpGrjcaJ0Uho8eeX49weejmqWRCD2x6INkTAY8Lt OmJEUwQZrF89KXPP2ND220n40VACuUloZOMY5mIGGuC4zNs7992vZVs7a6rY2d4w FTT9WMLnrBv0 -----END CERTIFICATE-----Generated at Sun Jan 25 23:51:30 2026 by rpki-client