This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32342d3234203d3e203631373933.roa File: 3230312e3133302e32382e302f32342d3234203d3e203631373933.roa (raw, json) Hash identifier: cduWhJRQ20YXhY+noeq1eBunIZ9DAWfrUGPlyUQJ/tE= Subject key identifier: 9C:D4:C3:5D:2A:EB:13:96:CA:D0:F5:4A:79:5A:39:9E:10:8A:0A:92 Certificate issuer: /CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1 Certificate serial: 3AD47C2899CA9544DE5E7D372DE14ED2D1F7D171 Authority key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32342d3234203d3e203631373933.roa Signing time: Fri 23 Jan 2026 16:43:16 +0000 ROA not before: Fri 23 Jan 2026 16:38:16 +0000 ROA not after: Fri 22 Jan 2027 16:43:16 +0000 asID: 61793 IP address blocks: 201.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 22:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d4:7c:28:99:ca:95:44:de:5e:7d:37:2d:e1:4e:d2:d1:f7:d1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1 Validity Not Before: Jan 23 16:38:16 2026 GMT Not After : Jan 22 16:43:16 2027 GMT Subject: CN=9CD4C35D2AEB1396CAD0F54A795A399E108A0A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:09:cc:09:ae:0a:49:0c:ef:8a:ae:f3:4b: 5f:d2:97:64:e8:51:ad:3d:6f:4f:c0:86:05:63:33: af:8d:02:a7:d0:27:32:00:70:03:cb:96:db:d9:e9: 44:92:59:f7:7d:31:cb:1d:59:d1:3d:f7:43:a9:7f: 1d:4b:7c:94:50:25:27:ec:21:b6:d5:bd:fb:24:40: ab:8c:d3:7c:bf:d1:6d:30:a9:56:85:18:f9:73:f1: c5:4b:17:00:21:70:b9:e5:c1:0a:01:8a:f9:13:6d: 11:ef:b5:c4:14:79:69:8f:4e:d2:8c:b4:5b:43:94: 5b:fd:88:e3:37:e8:07:b7:d2:47:d2:2f:1c:31:00: 45:0f:ac:51:73:b9:df:49:0b:bc:35:9e:c1:d6:bd: 2d:60:58:0e:93:56:f7:0c:6e:a0:2f:4f:bf:91:71: 58:86:94:83:b6:44:2a:6d:fc:9e:79:be:33:9e:19: c1:c6:9c:8c:b5:33:cf:29:d5:96:5f:75:37:2e:0c: 26:b6:84:fd:32:c8:0b:e0:83:b0:e3:5f:83:b4:08: ef:54:8f:1f:0a:c5:e0:c1:8c:42:6f:f4:ab:b3:16: b0:51:56:a4:60:64:03:a4:12:db:15:6d:44:9f:d0: 65:ba:91:71:b0:95:ee:06:0b:3d:dc:f8:25:f2:44: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D4:C3:5D:2A:EB:13:96:CA:D0:F5:4A:79:5A:39:9E:10:8A:0A:92 X509v3 Authority Key Identifier: keyid:AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32342d3234203d3e203631373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.130.28.0/24 Signature Algorithm: sha256WithRSAEncryption 00:60:85:30:e8:ca:20:06:df:a5:77:f2:a9:5d:da:b2:c3:ab: 89:7c:c7:07:76:83:34:18:8d:38:73:1f:e4:f1:17:c5:91:82: 5a:a1:57:cd:44:2f:a1:41:f5:88:b0:b9:e8:d3:4a:bc:97:ff: b3:c3:ff:23:24:34:44:ad:41:ea:04:91:c8:3a:0a:51:f5:18: f6:f9:a8:29:c8:7a:10:5d:a9:2e:7c:9e:de:1b:9e:c4:4a:58: 83:38:f9:37:14:94:65:07:74:a4:63:23:62:3d:7d:74:dc:d5: 11:7d:89:55:77:ab:1e:7d:1a:9c:0c:7c:45:3d:e9:1c:ec:88: 65:ba:9e:99:11:93:90:f0:d8:59:4f:b5:e4:2c:a5:44:19:48: 25:e9:63:a4:4f:a7:84:cd:54:87:69:c9:b4:fa:fb:ab:67:45: 6e:7f:b0:3b:7a:e0:02:54:72:7a:b5:bf:03:10:5a:8a:6b:02: 98:be:7c:be:e4:24:04:81:90:d7:19:1b:b7:7f:e0:78:91:3c: 22:87:a3:a3:a1:62:5c:cb:37:c6:54:75:e8:c2:e8:95:09:1e: 30:2e:21:90:27:65:ce:97:a4:60:e8:be:c3:5d:b0:26:9b:76: ad:34:ba:45:d6:ba:4a:27:71:39:f4:37:3d:a4:dd:d0:20:ea: ba:91:ef:fc -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUOtR8KJnKlUTeXn03LeFO0tH30XEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3OTE0Qzc4N0FGRENCRkNGRkZERDk0NUM1QTBFQ0ZE OERCQzZCMTAeFw0yNjAxMjMxNjM4MTZaFw0yNzAxMjIxNjQzMTZaMDMxMTAvBgNV BAMTKDlDRDRDMzVEMkFFQjEzOTZDQUQwRjU0QTc5NUEzOTlFMTA4QTBBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpwnMCa4KSQzviq7zS1/Sl2To Ua09b0/AhgVjM6+NAqfQJzIAcAPLltvZ6USSWfd9McsdWdE990Opfx1LfJRQJSfs IbbVvfskQKuM03y/0W0wqVaFGPlz8cVLFwAhcLnlwQoBivkTbRHvtcQUeWmPTtKM tFtDlFv9iOM36Ae30kfSLxwxAEUPrFFzud9JC7w1nsHWvS1gWA6TVvcMbqAvT7+R cViGlIO2RCpt/J55vjOeGcHGnIy1M88p1ZZfdTcuDCa2hP0yyAvgg7DjX4O0CO9U jx8KxeDBjEJv9KuzFrBRVqRgZAOkEtsVbUSf0GW6kXGwle4GCz3c+CXyRE3NAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUnNTDXSrrE5bK0PVKeVo5nhCKCpIwHwYDVR0j BBgwFoAUr3kUx4ev3L/P/92UXFoOz9jbxrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWU1S21kYm9EQ2NKbjY5b3F1OWtqaEhoeG52Z1hZYzZZTUh0VnBhRkd5 UFEvMC9BRjc5MTRDNzg3QUZEQ0JGQ0ZGRkREOTQ1QzVBMEVDRkQ4REJDNkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzkxNEM3ODdBRkRDQkZD RkZGREQ5NDVDNUEwRUNGRDhEQkM2QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzllNUttZGJvRENjSm42OW9xdTlramhIaHhudmdYWWM2WU1IdFZwYUZHeVBRLzAv MzIzMDMxMmUzMTMzMzAyZTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyYIcMA0GCSqGSIb3DQEBCwUAA4IBAQAAYIUw6Mog Bt+ld/KpXdqyw6uJfMcHdoM0GI04cx/k8RfFkYJaoVfNRC+hQfWIsLno00q8l/+z w/8jJDRErUHqBJHIOgpR9Rj2+agpyHoQXakufJ7eG57ESliDOPk3FJRlB3SkYyNi PX103NURfYlVd6sefRqcDHxFPekc7Ihlup6ZEZOQ8NhZT7XkLKVEGUgl6WOkT6eE zVSHacm0+vurZ0Vuf7A7euACVHJ6tb8DEFqKawKYvny+5CQEgZDXGRu3f+B4kTwi h6OjoWJcyzfGVHXowuiVCR4wLiGQJ2XOl6Rg6L7DXbAmm3atNLpF1rpKJ3E59Dc9 pN3QIOq6ke/8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:52:13 2026 by rpki-client