This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa File: 3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa (raw, json) Hash identifier: 5pUyDLsvdfwdf1xjCqCad9vMEk8WnXH6wEKaQXbgEwg= Subject key identifier: 32:4A:1C:2A:35:BE:42:25:E4:1E:4C:A5:A5:71:21:9F:1A:CB:6E:7A Certificate issuer: /CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C Certificate serial: 091EF73FC2B54FDCF24B8BB28982A644C19A9342 Authority key identifier: 2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa Signing time: Mon 05 Jan 2026 14:45:36 +0000 ROA not before: Mon 05 Jan 2026 14:40:36 +0000 ROA not after: Mon 04 Jan 2027 14:45:36 +0000 asID: 265432 IP address blocks: 168.195.211.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 17:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1e:f7:3f:c2:b5:4f:dc:f2:4b:8b:b2:89:82:a6:44:c1:9a:93:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C Validity Not Before: Jan 5 14:40:36 2026 GMT Not After : Jan 4 14:45:36 2027 GMT Subject: CN=324A1C2A35BE4225E41E4CA5A571219F1ACB6E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:0f:ab:b9:dd:90:f3:aa:dc:5e:99:5f:ef: fe:2a:4c:e8:90:3f:6d:35:b0:00:22:5f:5c:f1:33: 83:ff:cd:5b:b2:ac:8e:be:55:77:3e:84:9a:0f:e6: 82:1a:9e:75:87:f6:36:2a:77:27:9b:0c:4e:43:2b: f1:76:f5:f6:9d:09:2e:cd:84:25:31:cd:f5:7e:75: 5f:72:35:21:c6:2e:b0:d4:f1:b8:ab:fe:ff:72:41: 96:6f:60:8b:5b:8a:d7:9c:0f:14:b6:a6:de:0c:19: ac:c6:d2:4b:19:55:36:c9:c8:1a:38:e5:3a:e1:ca: e4:fe:3c:6b:ba:95:f9:db:54:4f:bc:e8:67:0d:89: 50:ff:2c:65:4d:85:ef:8e:80:a1:57:dc:65:82:87: 8b:79:f8:c1:8b:b1:ba:42:6b:a4:b3:a6:9f:83:b3: c3:1e:5a:87:9e:a6:1a:ca:93:6c:6a:14:2a:d7:5f: d3:39:bd:3f:d5:a3:92:f3:d6:06:e0:8f:e4:30:bb: 90:3b:c1:f9:53:6a:a8:ad:79:be:a7:c7:33:f6:ea: a3:8c:29:f2:29:2f:d6:24:6e:f9:00:b7:7c:f0:a8: b0:24:be:0c:c6:fd:09:7a:ab:05:d0:13:26:aa:fe: 84:ce:1d:be:44:d4:e8:14:34:11:e0:95:55:5d:5b: 81:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:1C:2A:35:BE:42:25:E4:1E:4C:A5:A5:71:21:9F:1A:CB:6E:7A X509v3 Authority Key Identifier: keyid:2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.211.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:7e:96:c3:ac:1e:e3:07:8c:12:c4:ee:3b:9b:a6:5b:ad:a2: 56:24:03:57:ba:0f:c4:77:1b:63:6d:4d:da:9f:ab:45:71:02: 86:d3:c7:98:55:bb:5a:7a:a8:1a:81:aa:c7:24:41:51:9a:9f: d4:f4:80:a3:61:86:1e:89:e8:2f:c2:21:3d:ee:82:da:f6:7a: 53:2b:49:3b:95:6a:7b:86:1e:ae:b0:26:71:8d:0b:cc:3c:a8: 6a:72:e7:59:1a:93:25:6a:0d:3b:a3:87:17:65:0f:f2:b8:4f: 77:97:8e:ed:cd:ad:90:7e:94:ee:de:0d:12:4a:03:f3:62:ed: 70:ef:eb:7c:09:a8:6a:37:d8:40:84:1f:34:de:21:d3:a6:7d: 87:ed:1f:c9:2f:03:7e:2f:d2:9e:27:7f:0b:7a:61:49:7c:9f: 94:ed:33:23:f6:80:91:ef:f2:d2:50:3a:61:5a:85:5c:b6:48: b6:41:a8:73:c6:98:20:8e:81:c5:d5:8f:87:0f:55:4f:97:f5: 86:8e:b6:c2:c8:1c:6f:cf:b3:97:6a:a3:db:b9:f0:78:1e:43: 5b:35:bf:cb:ab:75:75:25:5c:51:d9:ef:fd:cb:d8:3e:71:e0: 2a:ee:5c:c3:f1:cb:44:d8:30:b4:65:2f:8e:68:d1:0f:af:bc: 22:6f:46:17 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUCR73P8K1T9zyS4uyiYKmRMGak0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGNkU4Mzk4NzgxQTQ1MjMxRTIxNjZGQkJFNEQxQzAw QkVFQUQ5QzAeFw0yNjAxMDUxNDQwMzZaFw0yNzAxMDQxNDQ1MzZaMDMxMTAvBgNV BAMTKDMyNEExQzJBMzVCRTQyMjVFNDFFNENBNUE1NzEyMTlGMUFDQjZFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Vw+rud2Q86rcXplf7/4qTOiQ P201sAAiX1zxM4P/zVuyrI6+VXc+hJoP5oIannWH9jYqdyebDE5DK/F29fadCS7N hCUxzfV+dV9yNSHGLrDU8bir/v9yQZZvYItbitecDxS2pt4MGazG0ksZVTbJyBo4 5TrhyuT+PGu6lfnbVE+86GcNiVD/LGVNhe+OgKFX3GWCh4t5+MGLsbpCa6Szpp+D s8MeWoeephrKk2xqFCrXX9M5vT/Vo5Lz1gbgj+Qwu5A7wflTaqiteb6nxzP26qOM KfIpL9YkbvkAt3zwqLAkvgzG/Ql6qwXQEyaq/oTOHb5E1OgUNBHglVVdW4FfAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUMkocKjW+QiXkHkylpXEhnxrLbnowHwYDVR0j BBgwFoAULPboOYeBpFIx4hZvu+TRwAvurZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVKWUNwMWlrRk1rc1V5ZnFGbzRrb0RWYVZqU3Q3c1FwdTVYQVc3V1lL UkMvMC8yQ0Y2RTgzOTg3ODFBNDUyMzFFMjE2NkZCQkU0RDFDMDBCRUVBRDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRjZFODM5ODc4MUE0NTIz MUUyMTY2RkJCRTREMUMwMEJFRUFEOUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh1SllDcDFpa0ZNa3NVeWZxRm80a29EVmFWalN0N3NRcHU1WEFXN1dZS1JDLzAv MzEzNjM4MmUzMTM5MzUyZTMyMzEzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy MzYzNTM0MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjD0zANBgkqhkiG9w0BAQsFAAOCAQEAPn6W w6we4weMEsTuO5umW62iViQDV7oPxHcbY21N2p+rRXEChtPHmFW7WnqoGoGqxyRB UZqf1PSAo2GGHonoL8IhPe6C2vZ6UytJO5Vqe4YerrAmcY0LzDyoanLnWRqTJWoN O6OHF2UP8rhPd5eO7c2tkH6U7t4NEkoD82LtcO/rfAmoajfYQIQfNN4h06Z9h+0f yS8Dfi/Snid/C3phSXyflO0zI/aAke/y0lA6YVqFXLZItkGoc8aYII6BxdWPhw9V T5f1ho62wsgcb8+zl2qj27nweB5DWzW/y6t1dSVcUdnv/cvYPnHgKu5cw/HLRNgw tGUvjmjRD6+8Im9GFw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:59 2026 by rpki-client