This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa File: 3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa (raw, json) Hash identifier: m6wayj/8ArygpAe9VjU7LDB0oCkWCiYOwx2YKY6abP0= Subject key identifier: 2A:43:D4:F3:43:0D:B1:DC:99:9F:E3:97:D4:4B:D7:86:54:DF:B3:6A Certificate issuer: /CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D Certificate serial: 0326DD8E5B8028AAF1E4D998F3535EE574CB911C Authority key identifier: AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa Signing time: Thu 15 Jan 2026 22:26:48 +0000 ROA not before: Thu 15 Jan 2026 22:21:48 +0000 ROA not after: Thu 14 Jan 2027 22:26:48 +0000 asID: 268151 IP address blocks: 138.59.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:26:dd:8e:5b:80:28:aa:f1:e4:d9:98:f3:53:5e:e5:74:cb:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D Validity Not Before: Jan 15 22:21:48 2026 GMT Not After : Jan 14 22:26:48 2027 GMT Subject: CN=2A43D4F3430DB1DC999FE397D44BD78654DFB36A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:9c:ef:06:12:dd:0f:41:84:a0:eb:f3:45: f5:5e:4e:45:42:d6:81:5f:1a:f1:b2:80:2c:cf:3b: 72:ac:88:23:7d:82:67:79:2c:35:0a:21:1d:44:78: b2:44:b8:96:c7:f0:fb:2b:01:ee:3b:5f:c7:00:56: b4:4a:fa:65:03:a3:25:a1:8f:8f:05:66:73:3a:a3: c1:18:32:e5:78:0a:3e:39:7e:0d:2e:92:48:84:ef: ee:9b:b8:a9:c6:f7:57:cd:9a:93:a2:81:f3:ea:5a: 91:2a:d3:e6:79:86:81:1d:5a:ea:21:66:fa:48:b3: b1:df:9d:c0:57:69:84:d6:20:ff:35:c7:a1:47:94: 55:48:3b:56:ca:68:dc:f9:30:c3:f4:a9:d4:10:7f: 51:a9:1d:85:9b:e8:7d:0d:f7:3a:ba:b9:70:02:dd: cb:9f:42:3e:b5:3c:ff:76:06:b2:66:69:d9:bb:25: e3:c2:51:ef:d0:fd:02:a2:bb:de:a4:81:02:4e:7a: 52:d9:60:e5:3f:07:fe:08:1c:5f:62:f6:3e:73:38: 5a:32:dd:7b:f8:5f:4b:df:22:f4:60:bc:39:13:7a: 36:da:3a:00:eb:e0:47:a3:6f:55:12:ba:27:20:af: c6:34:c5:68:09:1c:e8:97:29:c2:81:35:e2:48:f0: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:D4:F3:43:0D:B1:DC:99:9F:E3:97:D4:4B:D7:86:54:DF:B3:6A X509v3 Authority Key Identifier: keyid:AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.152.0/22 Signature Algorithm: sha256WithRSAEncryption cb:19:1c:1b:a6:f6:e5:7b:4e:23:c7:e9:bc:6c:ca:7c:99:0b: b3:53:80:02:e5:c7:2d:f7:82:c9:33:fb:18:05:00:81:c6:1c: 92:71:ed:ac:ed:ba:42:c0:87:05:46:74:77:3c:01:92:79:00: 68:65:fd:ec:da:7b:88:23:37:b5:08:ef:03:a1:03:0c:15:fa: 43:02:dd:ef:dc:47:be:9b:96:a0:19:d0:51:44:98:8e:4d:9f: 71:4e:85:79:ee:f6:8a:e4:d3:5c:f7:15:40:2b:12:ea:a6:29: c2:82:54:8c:25:4d:5b:f9:b4:33:a8:a6:f6:4f:a4:ea:f4:9a: 65:82:e4:cc:4e:4d:86:98:d1:d4:6a:45:90:40:3c:d6:45:eb: 63:52:e5:2e:f6:16:8e:30:4c:4f:0b:84:6c:06:37:47:3a:03: a6:00:53:2d:b8:e1:6d:7d:df:b9:f4:e7:52:9d:3b:71:b3:2e: 6f:58:a3:e0:0d:f9:cb:b0:7a:92:04:af:28:55:ef:47:67:ca: b2:69:f4:bf:6d:2e:4b:53:bd:bf:a8:27:81:40:9d:4b:c3:bd: 23:70:76:14:c9:1f:61:b6:85:9e:32:8d:f0:00:0b:fe:0f:4a: 4c:f3:2e:cc:95:af:46:7e:92:af:54:4f:a7:ee:87:ae:13:d3: d3:0a:43:1a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUAybdjluAKKrx5NmY81Ne5XTLkRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3OTNFM0ZCOEUxRTdGOTE3MkU1RTlFRTU4RUI0RDIy OTM3NDQzRDAeFw0yNjAxMTUyMjIxNDhaFw0yNzAxMTQyMjI2NDhaMDMxMTAvBgNV BAMTKDJBNDNENEYzNDMwREIxREM5OTlGRTM5N0Q0NEJENzg2NTRERkIzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+JzvBhLdD0GEoOvzRfVeTkVC 1oFfGvGygCzPO3KsiCN9gmd5LDUKIR1EeLJEuJbH8PsrAe47X8cAVrRK+mUDoyWh j48FZnM6o8EYMuV4Cj45fg0ukkiE7+6buKnG91fNmpOigfPqWpEq0+Z5hoEdWuoh ZvpIs7HfncBXaYTWIP81x6FHlFVIO1bKaNz5MMP0qdQQf1GpHYWb6H0N9zq6uXAC 3cufQj61PP92BrJmadm7JePCUe/Q/QKiu96kgQJOelLZYOU/B/4IHF9i9j5zOFoy 3Xv4X0vfIvRgvDkTejbaOgDr4Eejb1USuicgr8Y0xWgJHOiXKcKBNeJI8Cj7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUKkPU80MNsdyZn+OX1EvXhlTfs2owHwYDVR0j BBgwFoAUrnk+P7jh5/kXLl6e5Y600ik3RD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFGSDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZx WW0vMC9BRTc5M0UzRkI4RTFFN0Y5MTcyRTVFOUVFNThFQjREMjI5Mzc0NDNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNzkzRTNGQjhFMUU3Rjkx NzJFNUU5RUU1OEVCNEQyMjkzNzQ0M0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhhRkg4SEhyb2lmQ0I1ZUxmZkpqU0hzOEw0RGt6b1RtQ0t3bURvWGFmcVltLzAv MzEzMzM4MmUzNTM5MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKO5gwDQYJKoZIhvcNAQELBQADggEBAMsZHBum 9uV7TiPH6bxsynyZC7NTgALlxy33gskz+xgFAIHGHJJx7aztukLAhwVGdHc8AZJ5 AGhl/ezae4gjN7UI7wOhAwwV+kMC3e/cR76blqAZ0FFEmI5Nn3FOhXnu9ork01z3 FUArEuqmKcKCVIwlTVv5tDOopvZPpOr0mmWC5MxOTYaY0dRqRZBAPNZF62NS5S72 Fo4wTE8LhGwGN0c6A6YAUy244W1937n051KdO3GzLm9Yo+AN+cuwepIEryhV70dn yrJp9L9tLktTvb+oJ4FAnUvDvSNwdhTJH2G2hZ4yjfAAC/4PSkzzLsyVr0Z+kq9U T6fuh64T09MKQxo= -----END CERTIFICATE-----Generated at Mon Jan 26 05:58:08 2026 by rpki-client