This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3234203d3e2032373136.roa File: 3230302e3133322e3234302e302f32312d3234203d3e2032373136.roa (raw, json) Hash identifier: adjfVdUyyC0Z0pfnbscAx8PCOvpm+jKPbzmPSX75MT8= Subject key identifier: 21:47:53:4A:12:01:E5:F1:2B:4C:7C:0F:C6:2E:71:A5:25:40:AA:19 Certificate issuer: /CN=4940EEB21B4128216F8FFB3B0A997946697632F5 Certificate serial: 58B785550BAF5FF21AD24B00D88B84BE47B79BDE Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3234203d3e2032373136.roa Signing time: Tue 20 Jan 2026 13:47:27 +0000 ROA not before: Tue 20 Jan 2026 13:42:27 +0000 ROA not after: Tue 19 Jan 2027 13:47:27 +0000 asID: 2716 IP address blocks: 200.132.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b7:85:55:0b:af:5f:f2:1a:d2:4b:00:d8:8b:84:be:47:b7:9b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5 Validity Not Before: Jan 20 13:42:27 2026 GMT Not After : Jan 19 13:47:27 2027 GMT Subject: CN=2147534A1201E5F12B4C7C0FC62E71A52540AA19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:f1:a7:b7:a4:37:da:52:25:e6:c5:bf:f1: 68:d8:24:c4:36:57:b7:2b:ac:8b:8c:2c:3b:b7:ce: b6:2d:45:1e:5d:34:55:69:9e:90:be:db:12:d4:54: de:88:4a:c6:bf:d5:37:6b:2f:31:c0:71:8b:d5:51: 54:f8:15:a1:21:f2:22:32:b4:c5:03:ce:6a:65:8e: 26:35:64:cf:79:9d:75:d4:1e:ac:cc:c0:d4:5d:a5: c7:32:be:f7:41:e1:a4:11:d4:6b:4d:2d:00:6e:df: 1f:5e:43:b8:b0:0e:d0:84:f2:ff:bb:43:da:63:2f: 44:d4:83:1c:01:77:c1:1c:cf:27:dc:e4:9f:15:6c: fc:1d:3a:09:31:6d:27:18:d9:94:ed:4c:69:c3:69: b6:5e:d4:b5:af:76:50:79:e3:8a:96:a0:dc:d7:ab: c8:15:56:ed:f9:8b:df:9d:dc:9c:74:8f:c3:1b:4e: eb:47:4a:fe:fd:47:84:ef:8a:ec:2d:30:44:dc:2a: a7:f4:97:43:99:30:dd:e7:0d:e0:97:1e:4a:43:46: 94:e6:72:77:78:ae:c1:c9:0f:6d:f4:2e:3f:e7:cd: 28:30:09:fe:2d:3c:78:2a:e0:03:74:d8:29:3b:12: 6a:1a:bd:d9:f8:06:48:df:4d:6d:9e:20:b7:6a:7a: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:53:4A:12:01:E5:F1:2B:4C:7C:0F:C6:2E:71:A5:25:40:AA:19 X509v3 Authority Key Identifier: keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3234203d3e2032373136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.132.240.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:80:e7:a5:da:66:8a:d5:b7:d2:ac:2f:0e:f6:70:11:3a:e7: d0:a1:88:4e:c8:dc:92:46:de:5c:dd:d1:2a:63:39:d6:09:fa: 3c:1c:ae:fd:98:db:9f:59:01:ff:cb:92:e4:3f:0e:8c:75:c7: b8:d2:6a:c3:4d:47:6c:91:0b:3e:c8:c7:ed:0c:0b:df:7b:44: 5e:b5:32:39:86:a7:69:d6:fd:ae:59:b1:d6:f4:9f:7f:82:aa: 7b:88:f5:a3:42:5f:d2:3c:1f:e3:d8:bf:68:88:4c:9f:2b:d2: 1b:61:ce:e0:69:32:ca:2f:10:1b:f1:61:06:ed:f4:8d:c2:e4: 0a:04:3a:fb:c3:b0:5d:8d:4f:55:3b:9b:3b:73:d9:6a:3a:2f: 2a:a3:21:e3:df:e9:70:b0:87:95:6b:46:6f:5d:cb:1a:10:20: f9:f2:a3:3e:5a:3a:c2:74:7c:e3:35:03:aa:fb:d1:40:75:7e: c4:ec:16:46:14:22:93:62:49:ad:f6:3a:c4:0b:0f:8f:7f:3a: ca:b5:e4:87:7a:e2:bc:a9:02:49:2e:a0:85:04:47:0e:00:47: 21:3b:0d:34:69:b7:05:2c:f6:d1:a5:fc:6e:23:b2:49:90:6b: ac:36:b7:dc:ae:53:64:f2:be:a2:a6:06:23:2f:5b:da:ff:a9: 7f:5f:17:12 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWLeFVQuvX/Ia0ksA2IuEvke3m94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk0MEVFQjIxQjQxMjgyMTZGOEZGQjNCMEE5OTc5NDY2 OTc2MzJGNTAeFw0yNjAxMjAxMzQyMjdaFw0yNzAxMTkxMzQ3MjdaMDMxMTAvBgNV BAMTKDIxNDc1MzRBMTIwMUU1RjEyQjRDN0MwRkM2MkU3MUE1MjU0MEFBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSvGnt6Q32lIl5sW/8WjYJMQ2 V7crrIuMLDu3zrYtRR5dNFVpnpC+2xLUVN6ISsa/1TdrLzHAcYvVUVT4FaEh8iIy tMUDzmpljiY1ZM95nXXUHqzMwNRdpccyvvdB4aQR1GtNLQBu3x9eQ7iwDtCE8v+7 Q9pjL0TUgxwBd8Eczyfc5J8VbPwdOgkxbScY2ZTtTGnDabZe1LWvdlB544qWoNzX q8gVVu35i9+d3Jx0j8MbTutHSv79R4TviuwtMETcKqf0l0OZMN3nDeCXHkpDRpTm cnd4rsHJD230Lj/nzSgwCf4tPHgq4AN02Ck7Emoavdn4BkjfTW2eILdqetv7AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUIUdTShIB5fErTHwPxi5xpSVAqhkwHwYDVR0j BBgwFoAUSUDushtBKCFvj/s7Cpl5Rml2MvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEViNEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFT d2EvMC80OTQwRUVCMjFCNDEyODIxNkY4RkZCM0IwQTk5Nzk0NjY5NzYzMkY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NDBFRUIyMUI0MTI4MjE2 RjhGRkIzQjBBOTk3OTQ2Njk3NjMyRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhFYjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAv MzIzMDMwMmUzMTMzMzIyZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy MzczMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQDyITwMA0GCSqGSIb3DQEBCwUAA4IBAQAugOel2maK 1bfSrC8O9nAROufQoYhOyNySRt5c3dEqYznWCfo8HK79mNufWQH/y5LkPw6Mdce4 0mrDTUdskQs+yMftDAvfe0RetTI5hqdp1v2uWbHW9J9/gqp7iPWjQl/SPB/j2L9o iEyfK9IbYc7gaTLKLxAb8WEG7fSNwuQKBDr7w7BdjU9VO5s7c9lqOi8qoyHj3+lw sIeVa0ZvXcsaECD58qM+WjrCdHzjNQOq+9FAdX7E7BZGFCKTYkmt9jrECw+PfzrK teSHeuK8qQJJLqCFBEcOAEchOw00abcFLPbRpfxuI7JJkGusNrfcrlNk8r6ipgYj L1va/6l/XxcS -----END CERTIFICATE-----Generated at Sun Jan 25 23:51:35 2026 by rpki-client