This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa File: 3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa (raw, json) Hash identifier: CX2s0f0JykRXL96kl8yuyeWiEghV1+R0xIcrptI7EXw= Subject key identifier: F3:AF:E2:94:AD:2F:B3:47:66:BB:30:F2:8D:19:05:99:A6:CC:59:C0 Certificate issuer: /CN=89572AF0EBD91AB05A4587B34A48A12C52369C71 Certificate serial: 0B023D6F33BAC012A437032A9A7AC01EA81DB961 Authority key identifier: 89:57:2A:F0:EB:D9:1A:B0:5A:45:87:B3:4A:48:A1:2C:52:36:9C:71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89572AF0EBD91AB05A4587B34A48A12C52369C71.cer Subject info access: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa Signing time: Wed 07 Jan 2026 13:55:54 +0000 ROA not before: Wed 07 Jan 2026 13:50:54 +0000 ROA not after: Wed 06 Jan 2027 13:55:54 +0000 asID: 268605 IP address blocks: 190.111.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/89572AF0EBD91AB05A4587B34A48A12C52369C71.crl rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/89572AF0EBD91AB05A4587B34A48A12C52369C71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89572AF0EBD91AB05A4587B34A48A12C52369C71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:02:3d:6f:33:ba:c0:12:a4:37:03:2a:9a:7a:c0:1e:a8:1d:b9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89572AF0EBD91AB05A4587B34A48A12C52369C71 Validity Not Before: Jan 7 13:50:54 2026 GMT Not After : Jan 6 13:55:54 2027 GMT Subject: CN=F3AFE294AD2FB34766BB30F28D190599A6CC59C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:64:ea:d6:a8:08:4d:d6:83:f0:6d:e3:d0: 98:37:fa:74:5d:f3:79:40:6c:ba:c0:5f:57:dc:c4: 91:a6:16:ba:36:62:a3:04:f6:8c:20:0a:15:e9:ce: 19:e6:05:f4:86:18:9a:2b:d0:59:d1:ed:79:ac:73: e6:04:47:4c:3c:dd:b2:8f:a8:0c:07:17:e5:05:b2: d0:2b:c0:50:fc:7f:53:94:9d:0d:80:48:d3:ab:0a: 8f:fc:1d:de:cb:a5:43:30:89:7a:7d:11:1a:17:4a: 97:2d:a6:a0:47:17:1f:f5:02:c0:09:b8:9d:c0:0e: 8d:d0:8d:53:0e:6d:9f:ae:3f:6d:9a:da:d4:6e:89: 67:dc:77:59:0b:37:16:a6:a3:8d:4c:76:58:8a:81: 60:a4:a9:3a:b9:8a:a6:01:27:62:c4:eb:5a:a4:20: 4c:01:9d:26:54:5e:01:bb:39:f0:c9:11:8c:d9:bd: f7:19:d4:27:f5:88:33:22:53:5c:43:55:68:59:9a: 24:9c:ad:00:7c:b1:74:b9:6f:af:fa:b3:49:d8:1a: 1c:f7:f2:80:0a:1b:76:73:9a:ca:ae:78:56:8f:27: 81:9c:b6:0b:d8:25:13:5b:6a:d3:4e:27:d0:7b:c7: 35:4a:69:a7:7c:04:77:d9:a2:34:b1:08:da:df:22: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:E2:94:AD:2F:B3:47:66:BB:30:F2:8D:19:05:99:A6:CC:59:C0 X509v3 Authority Key Identifier: keyid:89:57:2A:F0:EB:D9:1A:B0:5A:45:87:B3:4A:48:A1:2C:52:36:9C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/89572AF0EBD91AB05A4587B34A48A12C52369C71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89572AF0EBD91AB05A4587B34A48A12C52369C71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.159.0/24 Signature Algorithm: sha256WithRSAEncryption c6:50:4b:96:ef:80:6f:55:47:cc:b5:2a:3f:81:65:cf:99:26: 68:6b:46:72:46:2d:34:8c:af:58:b5:e3:4a:17:c1:65:05:a9: 6d:8d:84:85:44:e5:64:92:4e:dc:48:21:9d:35:80:4e:07:ee: 3d:80:5c:94:1f:14:ce:e7:b1:5b:53:8a:70:bc:75:42:fb:4e: 0e:bc:2f:a0:d0:4a:7a:a4:f5:af:56:96:87:ff:75:94:0b:2f: 51:a8:c7:49:93:31:c9:de:7f:8e:a7:76:f2:94:b5:3a:ff:01: bc:47:eb:65:60:bc:a0:35:a3:84:a5:c9:90:d7:66:96:92:0d: bd:77:17:8a:0b:0f:81:13:c3:9a:a1:d8:28:00:ab:40:52:a6: d9:78:c5:19:b3:3a:e3:ef:a8:6a:09:f9:58:52:ca:3a:7e:cd: 71:37:3a:4f:ca:4d:b8:06:96:67:b9:e0:50:43:c7:69:9b:ef: 37:09:82:8c:74:e4:29:3a:77:be:74:82:76:6f:32:e4:cd:ef: 62:8c:a5:58:26:46:23:24:87:0c:aa:83:b8:fb:4a:9e:59:5d: 3c:4d:41:d8:73:e7:28:7d:bc:e3:58:58:4d:42:91:ac:09:c7: 89:07:c9:01:6d:59:8f:c6:10:0d:88:06:74:d0:b7:5f:e6:d1: 3a:4b:15:25 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUCwI9bzO6wBKkNwMqmnrAHqgduWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NzJBRjBFQkQ5MUFCMDVBNDU4N0IzNEE0OEExMkM1 MjM2OUM3MTAeFw0yNjAxMDcxMzUwNTRaFw0yNzAxMDYxMzU1NTRaMDMxMTAvBgNV BAMTKEYzQUZFMjk0QUQyRkIzNDc2NkJCMzBGMjhEMTkwNTk5QTZDQzU5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZWTq1qgITdaD8G3j0Jg3+nRd 83lAbLrAX1fcxJGmFro2YqME9owgChXpzhnmBfSGGJor0FnR7Xmsc+YER0w83bKP qAwHF+UFstArwFD8f1OUnQ2ASNOrCo/8Hd7LpUMwiXp9ERoXSpctpqBHFx/1AsAJ uJ3ADo3QjVMObZ+uP22a2tRuiWfcd1kLNxamo41MdliKgWCkqTq5iqYBJ2LE61qk IEwBnSZUXgG7OfDJEYzZvfcZ1Cf1iDMiU1xDVWhZmiScrQB8sXS5b6/6s0nYGhz3 8oAKG3ZzmsqueFaPJ4GctgvYJRNbatNOJ9B7xzVKaad8BHfZojSxCNrfIuSPAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU86/ilK0vs0dmuzDyjRkFmabMWcAwHwYDVR0j BBgwFoAUiVcq8OvZGrBaRYezSkihLFI2nHEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWRaekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFr VEwvMC84OTU3MkFGMEVCRDkxQUIwNUE0NTg3QjM0QTQ4QTEyQzUyMzY5QzcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NTcyQUYwRUJEOTFBQjA1 QTQ1ODdCMzRBNDhBMTJDNTIzNjlDNzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlkWnpBdFBQWkJEd1BxaFVFaEdidzJlZUZCcjVaaGluc3lGdzhKeHhxa1RMLzAv MzEzOTMwMmUzMTMxMzEyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzODM2MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5vnzANBgkqhkiG9w0BAQsFAAOCAQEAxlBL lu+Ab1VHzLUqP4Flz5kmaGtGckYtNIyvWLXjShfBZQWpbY2EhUTlZJJO3EghnTWA TgfuPYBclB8UzuexW1OKcLx1QvtODrwvoNBKeqT1r1aWh/91lAsvUajHSZMxyd5/ jqd28pS1Ov8BvEfrZWC8oDWjhKXJkNdmlpINvXcXigsPgRPDmqHYKACrQFKm2XjF GbM64++oagn5WFLKOn7NcTc6T8pNuAaWZ7ngUEPHaZvvNwmCjHTkKTp3vnSCdm8y 5M3vYoylWCZGIySHDKqDuPtKnlldPE1B2HPnKH2841hYTUKRrAnHiQfJAW1Zj8YQ DYgGdNC3X+bROksVJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:44 2026 by rpki-client