This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa File: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (raw, json) Hash identifier: i0sEhWYHgSiXp5V1EkcxdgpEzXORyMRTfk54jKWdVl8= Subject key identifier: 2E:5C:2C:47:3A:94:54:C6:38:7A:05:C3:9A:AD:89:FF:15:39:BA:F6 Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 1B62DAC21736F3470E210F92D5365039C58C360F Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:00:59 +0000 ROA not before: Thu 22 Jan 2026 11:55:59 +0000 ROA not after: Thu 21 Jan 2027 12:00:59 +0000 asID: 263891 IP address blocks: 138.204.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:62:da:c2:17:36:f3:47:0e:21:0f:92:d5:36:50:39:c5:8c:36:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:55:59 2026 GMT Not After : Jan 21 12:00:59 2027 GMT Subject: CN=2E5C2C473A9454C6387A05C39AAD89FF1539BAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:b5:d5:5a:6d:2f:e9:51:a4:09:fe:22:2f: 77:6f:5d:2c:b3:5f:2a:0f:b8:73:ec:2b:d0:90:a7: 71:ad:2c:bf:ba:fa:21:8d:57:40:a8:7a:a5:16:96: cf:31:a0:b1:89:e2:e1:56:93:ca:09:9a:4f:5d:d1: 5a:c3:77:ba:e3:24:db:a9:f2:31:fd:7d:43:13:94: a4:7d:a8:55:db:43:33:6b:03:3e:ea:61:40:47:6d: d6:f1:03:7c:84:b2:df:74:d5:4b:d0:64:4c:f6:86: 3a:41:94:d5:1f:c3:b8:2b:ea:e2:9b:55:4f:a7:38: cb:e6:0f:e7:80:83:fa:17:c3:50:5f:53:b5:3a:52: 4c:4d:48:c3:6f:ac:e5:a5:38:db:f9:26:65:e3:b0: c4:f2:d0:4a:38:ba:4c:91:48:eb:6a:57:e7:a4:ed: 93:a9:ac:6c:5a:ac:43:d2:fe:11:14:7b:f1:e3:40: 39:73:94:99:16:44:7b:5d:17:e7:c9:eb:01:0e:c3: a6:ba:30:f7:d5:87:d0:af:a5:39:bb:e8:0c:6d:90: c1:cd:6c:a1:a3:52:82:a0:0a:35:20:ab:a3:68:6a: c1:85:1a:f7:43:9c:3c:cc:04:df:8e:48:2e:a7:b7: 7b:d1:7e:32:54:ce:a1:1c:32:dd:e3:c3:e7:ba:8d: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:2C:47:3A:94:54:C6:38:7A:05:C3:9A:AD:89:FF:15:39:BA:F6 X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.49.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:25:7a:05:73:a3:0f:5a:04:9e:13:30:5d:5e:76:ae:a4:f0: 3a:3c:ba:fb:8b:84:18:15:82:e1:e3:3b:bb:51:64:c4:c8:9d: 12:03:19:89:59:43:10:e0:55:18:7b:91:79:ef:4d:f4:ae:59: 32:4c:71:44:fe:f1:53:f1:a9:58:fa:84:7d:39:99:8e:2f:35: 06:90:1b:b7:0e:31:9a:60:ff:1b:4f:9d:62:62:f5:51:c5:3c: 41:d1:89:97:e9:4f:9f:1c:01:78:3a:c1:57:1c:12:89:c1:38: a5:96:28:ac:2c:67:61:52:48:18:a7:5c:c7:60:f3:a6:e9:aa: 5c:af:28:2a:8a:fc:f4:4a:84:5f:7e:97:33:58:14:6a:12:8f: 6f:6a:3d:d9:6d:ba:fa:ff:c2:37:6f:6e:8a:bb:04:f2:e9:8d: 8e:47:84:3c:4b:55:94:40:80:a5:ad:83:e5:b9:22:bb:13:68: 62:01:c7:55:4d:cf:b3:37:25:89:8b:30:ec:30:2c:ca:29:c5: 12:43:c0:56:e3:a7:c9:b3:a1:3d:c4:83:dc:e6:d5:bb:92:e6: 19:b9:3a:b8:23:1c:b3:a8:5c:6b:aa:bf:5c:ca:46:78:fa:ac: 61:71:54:d8:94:17:29:8c:e6:21:70:c8:e0:e7:55:cc:52:53: 46:52:59:d9 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUG2Lawhc280cOIQ+S1TZQOcWMNg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU1NTlaFw0yNzAxMjExMjAwNTlaMDMxMTAvBgNV BAMTKDJFNUMyQzQ3M0E5NDU0QzYzODdBMDVDMzlBQUQ4OUZGMTUzOUJBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mLXVWm0v6VGkCf4iL3dvXSyz XyoPuHPsK9CQp3GtLL+6+iGNV0CoeqUWls8xoLGJ4uFWk8oJmk9d0VrDd7rjJNup 8jH9fUMTlKR9qFXbQzNrAz7qYUBHbdbxA3yEst901UvQZEz2hjpBlNUfw7gr6uKb VU+nOMvmD+eAg/oXw1BfU7U6UkxNSMNvrOWlONv5JmXjsMTy0Eo4ukyRSOtqV+ek 7ZOprGxarEPS/hEUe/HjQDlzlJkWRHtdF+fJ6wEOw6a6MPfVh9CvpTm76AxtkMHN bKGjUoKgCjUgq6NoasGFGvdDnDzMBN+OSC6nt3vRfjJUzqEcMt3jw+e6jXgJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQULlwsRzqUVMY4egXDmq2J/xU5uvYwHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzEzMzM4MmUzMjMwMzQyZTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzODM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKzDEwDQYJKoZIhvcNAQELBQADggEBAH4legVz ow9aBJ4TMF1edq6k8Do8uvuLhBgVguHjO7tRZMTInRIDGYlZQxDgVRh7kXnvTfSu WTJMcUT+8VPxqVj6hH05mY4vNQaQG7cOMZpg/xtPnWJi9VHFPEHRiZfpT58cAXg6 wVccEonBOKWWKKwsZ2FSSBinXMdg86bpqlyvKCqK/PRKhF9+lzNYFGoSj29qPdlt uvr/wjdvboq7BPLpjY5HhDxLVZRAgKWtg+W5IrsTaGIBx1VNz7M3JYmLMOwwLMop xRJDwFbjp8mzoT3Eg9zm1buS5hm5OrgjHLOoXGuqv1zKRnj6rGFxVNiUFymM5iFw yODnVcxSU0ZSWdk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:51:09 2026 by rpki-client