This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e20313938393439.roa File: 3133312e302e32302e302f32322d3332203d3e20313938393439.roa (raw, json) Hash identifier: PMsJE068FM74IQnf/Ctpvi8s+LgC9zZ0C66B34jhR4Y= Subject key identifier: 3A:2A:46:67:43:FB:C8:56:03:4A:36:35:7D:FB:4A:B6:6C:C8:0E:64 Certificate issuer: /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0 Certificate serial: 35A0FB9245C2B2FACFA0B4CE3A632ADD2482F55E Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e20313938393439.roa Signing time: Fri 23 Jan 2026 16:56:46 +0000 ROA not before: Fri 23 Jan 2026 16:51:46 +0000 ROA not after: Fri 22 Jan 2027 16:56:46 +0000 asID: 198949 IP address blocks: 131.0.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 06:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a0:fb:92:45:c2:b2:fa:cf:a0:b4:ce:3a:63:2a:dd:24:82:f5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0 Validity Not Before: Jan 23 16:51:46 2026 GMT Not After : Jan 22 16:56:46 2027 GMT Subject: CN=3A2A466743FBC856034A36357DFB4AB66CC80E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:8c:2d:28:e6:48:6a:e7:79:b0:3f:66:23: 28:a0:31:7a:b3:b1:02:53:9a:05:0b:d0:a0:85:82: 0d:13:a8:a1:ac:cc:64:e9:48:72:30:c9:f9:ef:b7: f8:59:d0:0f:9b:7b:18:ea:cf:f8:c0:e2:38:ae:f9: ff:78:83:bb:a1:2a:b8:8d:30:65:8c:8b:bc:81:d4: 05:87:84:76:39:53:af:02:ea:16:1c:9e:1d:b6:2d: c3:c2:d2:16:7d:11:fe:c3:79:6c:5f:0e:ba:55:f6: d3:a1:95:6a:ea:27:36:37:77:88:35:5c:8d:ec:d3: 31:fc:ed:e8:a1:3c:ce:3f:94:06:a8:29:b0:b4:b7: 4c:58:bf:5d:be:22:a4:76:e7:bc:92:f9:34:8e:68: 2c:ca:4b:ec:93:47:3c:09:de:33:9e:ec:ed:2a:f3: 55:6c:99:75:16:1a:08:b1:74:4c:eb:e8:30:f5:0e: 79:11:a9:ce:71:d2:2a:be:85:d6:ae:b0:f3:30:55: fe:34:43:e4:24:e0:8b:1d:20:78:bc:5b:77:0c:b1: 76:d6:5f:8e:a0:9a:01:e0:68:e8:3e:42:20:b0:18: 0c:b0:7b:e3:4f:83:ae:2d:7b:f0:4a:10:0f:b5:ed: 19:59:7f:e8:b5:81:f9:c1:29:ee:40:ba:8b:67:65: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2A:46:67:43:FB:C8:56:03:4A:36:35:7D:FB:4A:B6:6C:C8:0E:64 X509v3 Authority Key Identifier: keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.20.0/22 Signature Algorithm: sha256WithRSAEncryption b8:91:2a:1c:b9:be:53:0f:38:70:8d:b0:73:09:ec:c2:a0:54: 7b:f8:63:e6:76:f4:48:16:a2:a7:96:6f:1b:5d:94:91:66:f6: 12:4b:1e:e6:01:0d:0c:3f:24:8e:d3:37:c2:f7:8b:20:f3:77: 25:cb:41:8b:06:a7:99:ef:ed:b9:ca:51:16:d2:0f:98:b1:54: d2:00:54:5f:45:78:f6:01:b3:7f:e6:af:cb:87:cd:7b:f8:9d: e0:37:2a:78:55:e4:05:7b:8b:94:a9:b4:41:08:31:77:95:7d: 8b:44:bc:37:7a:7c:77:c8:77:e4:05:67:c4:cb:fb:2d:5d:e7: 67:79:21:29:9d:ed:fd:19:6b:17:f4:68:f5:32:c9:5a:91:54: e9:8a:f2:9d:c0:b3:ca:d5:7e:38:dd:88:2b:a5:fb:46:cf:b0: 34:d3:5d:4e:f0:e5:4f:63:50:2c:ca:3b:a3:d1:90:17:01:b0: dc:e3:4b:38:70:0b:3f:bc:c9:07:de:34:7b:d4:64:94:30:d2: 4b:49:1f:87:38:a4:fc:6a:7d:81:c9:99:c0:bf:2c:3f:16:43: 49:e1:fa:4c:1d:de:09:21:43:2b:3d:61:8d:bf:e3:0f:f3:c8: 92:03:17:87:65:1f:c0:55:92:fd:fb:f5:9e:db:fd:95:08:a1: e5:30:38:3d -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUNaD7kkXCsvrPoLTOOmMq3SSC9V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY4NUM5RkVCRjgxNTE1NUM2RDQ0Nzk4NjY5RkIzQkZC OUZENDlFMDAeFw0yNjAxMjMxNjUxNDZaFw0yNzAxMjIxNjU2NDZaMDMxMTAvBgNV BAMTKDNBMkE0NjY3NDNGQkM4NTYwMzRBMzYzNTdERkI0QUI2NkNDODBFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlYwtKOZIaud5sD9mIyigMXqz sQJTmgUL0KCFgg0TqKGszGTpSHIwyfnvt/hZ0A+bexjqz/jA4jiu+f94g7uhKriN MGWMi7yB1AWHhHY5U68C6hYcnh22LcPC0hZ9Ef7DeWxfDrpV9tOhlWrqJzY3d4g1 XI3s0zH87eihPM4/lAaoKbC0t0xYv12+IqR257yS+TSOaCzKS+yTRzwJ3jOe7O0q 81VsmXUWGgixdEzr6DD1DnkRqc5x0iq+hdausPMwVf40Q+Qk4IsdIHi8W3cMsXbW X46gmgHgaOg+QiCwGAywe+NPg64te/BKEA+17RlZf+i1gfnBKe5AuotnZejtAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUOipGZ0P7yFYDSjY1fftKtmzIDmQwHwYDVR0j BBgwFoAUn4XJ/r+BUVXG1EeYZp+zv7n9SeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQU53M0FpaXE4TG1DR1pHSnY0NDFZcHZqUjFkcGVmYVJqRWRjcllzVjd4 aEgvMC85Rjg1QzlGRUJGODE1MTU1QzZENDQ3OTg2NjlGQjNCRkI5RkQ0OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGODVDOUZFQkY4MTUxNTVD NkQ0NDc5ODY2OUZCM0JGQjlGRDQ5RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FOdzNBaWlxOExtQ0daR0p2NDQxWXB2alIxZHBlZmFSakVkY3JZc1Y3eGhILzAv MzEzMzMxMmUzMDJlMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzkzODM5 MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAoMAFDANBgkqhkiG9w0BAQsFAAOCAQEAuJEqHLm+Uw84 cI2wcwnswqBUe/hj5nb0SBaip5ZvG12UkWb2Ekse5gENDD8kjtM3wveLIPN3JctB iwanme/tucpRFtIPmLFU0gBUX0V49gGzf+avy4fNe/id4DcqeFXkBXuLlKm0QQgx d5V9i0S8N3p8d8h35AVnxMv7LV3nZ3khKZ3t/RlrF/Ro9TLJWpFU6YryncCzytV+ ON2IK6X7Rs+wNNNdTvDlT2NQLMo7o9GQFwGw3ONLOHALP7zJB940e9RklDDSS0kf hzik/Gp9gcmZwL8sPxZDSeH6TB3eCSFDKz1hjb/jD/PIkgMXh2UfwFWS/fv1ntv9 lQih5TA4PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:09:47 2026 by rpki-client