This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa File: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (raw, json) Hash identifier: knoPnv5k7N4ARK61J+LlvRSNs41ePFvQyFL1x4gWw/4= Subject key identifier: C3:22:63:DA:E4:66:1A:40:27:AC:0C:35:AA:47:F8:3B:3A:DC:66:6D Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 1D93EA33D1F867A692D0C23CAC5722440B47A9A1 Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:01:03 +0000 ROA not before: Thu 22 Jan 2026 11:56:03 +0000 ROA not after: Thu 21 Jan 2027 12:01:03 +0000 asID: 263891 IP address blocks: 170.78.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:93:ea:33:d1:f8:67:a6:92:d0:c2:3c:ac:57:22:44:0b:47:a9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:56:03 2026 GMT Not After : Jan 21 12:01:03 2027 GMT Subject: CN=C32263DAE4661A4027AC0C35AA47F83B3ADC666D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:df:6e:27:a9:eb:cd:d1:2e:af:16:7a:2f: 2c:97:51:cf:8a:ea:24:ac:6c:62:e0:f8:d9:7d:78: c0:d2:7f:a3:dc:6f:c3:28:be:10:05:1d:69:84:be: 1a:c0:70:e7:2b:27:71:5b:aa:24:2b:56:2f:33:97: 30:c0:d4:39:fa:0f:1b:63:8c:b7:8f:1a:ec:6a:f1: b9:89:a3:20:ab:f3:0a:53:0b:93:1e:9b:28:6e:42: ea:53:c8:72:a7:5f:e6:2a:ed:88:5f:1a:c6:8b:7b: 93:80:64:24:89:a7:3d:0c:55:1a:8a:7c:d6:f3:4f: 75:94:38:30:c3:cc:fc:dc:5c:7e:fe:2a:51:4a:d8: 52:f6:df:f4:bb:6a:07:e2:bb:4a:bd:40:c2:2d:d9: cf:a5:28:00:9e:ed:b5:70:ff:eb:23:27:df:da:da: 2b:51:bc:18:63:2b:db:74:77:83:dc:17:87:39:3c: 29:66:8b:e8:a1:3f:01:e1:39:d4:98:61:8e:28:8b: 04:e0:5b:a4:ac:61:41:b2:47:62:e9:69:9e:7c:1f: 97:9a:c0:a6:65:4e:61:2f:af:24:4b:b2:ed:dc:78: 79:87:38:a2:40:af:3a:3e:97:75:ae:9d:e2:85:b9: 59:5d:8a:38:1b:80:3d:22:59:00:2c:ad:4a:44:1e: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:22:63:DA:E4:66:1A:40:27:AC:0C:35:AA:47:F8:3B:3A:DC:66:6D X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.160.0/24 Signature Algorithm: sha256WithRSAEncryption 87:2a:cb:d5:ef:d7:2a:46:dd:31:3b:df:98:90:dc:f6:8b:96: aa:2f:db:ef:ea:67:03:8b:3b:8e:01:2c:c6:46:01:f8:2d:7c: 07:c8:78:6c:08:cb:45:0e:64:41:e4:2b:2e:ed:bc:2b:cf:75: eb:ce:22:50:b7:21:40:fa:1e:f6:07:83:13:ff:5f:3e:5d:25: 1b:bb:57:9b:d5:ed:ef:d6:b8:96:f4:07:ab:b7:d9:d7:3f:76: a0:e7:ec:bf:b3:ea:53:fd:57:00:a7:f9:ba:4b:f9:d5:27:2e: 97:56:d1:55:bf:7a:f1:37:22:cc:82:df:78:2b:69:30:15:70: c1:ff:a7:71:d6:33:76:ca:d0:91:5a:81:45:50:e6:78:92:b5: ea:3b:ed:12:14:48:0e:1f:97:ed:66:1f:9b:55:f1:ce:d8:a4: 16:d7:62:5d:11:81:63:1d:7c:b2:a5:2f:16:08:cc:55:f6:33: 07:d1:e8:50:3a:9a:f2:9f:82:91:94:94:d6:32:39:b3:11:62: 69:d2:c2:7f:8c:cc:11:48:39:43:b9:b4:41:79:49:c6:4c:a2: ed:e2:b5:89:02:4f:5b:95:d2:83:e8:dd:2f:a5:a2:81:72:92: 1a:5a:b1:4a:01:ab:47:96:ca:8c:d1:5c:0d:f2:42:1e:b0:4e: e8:42:6c:fd -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHZPqM9H4Z6aS0MI8rFciRAtHqaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU2MDNaFw0yNzAxMjExMjAxMDNaMDMxMTAvBgNV BAMTKEMzMjI2M0RBRTQ2NjFBNDAyN0FDMEMzNUFBNDdGODNCM0FEQzY2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9N9uJ6nrzdEurxZ6LyyXUc+K 6iSsbGLg+Nl9eMDSf6Pcb8MovhAFHWmEvhrAcOcrJ3FbqiQrVi8zlzDA1Dn6Dxtj jLePGuxq8bmJoyCr8wpTC5MemyhuQupTyHKnX+Yq7YhfGsaLe5OAZCSJpz0MVRqK fNbzT3WUODDDzPzcXH7+KlFK2FL23/S7agfiu0q9QMIt2c+lKACe7bVw/+sjJ9/a 2itRvBhjK9t0d4PcF4c5PClmi+ihPwHhOdSYYY4oiwTgW6SsYUGyR2LpaZ58H5ea wKZlTmEvryRLsu3ceHmHOKJArzo+l3WuneKFuVldijgbgD0iWQAsrUpEHp8nAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUwyJj2uRmGkAnrAw1qkf4OzrcZm0wHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzEzNzMwMmUzNzM4MmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzODM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACqTqAwDQYJKoZIhvcNAQELBQADggEBAIcqy9Xv 1ypG3TE735iQ3PaLlqov2+/qZwOLO44BLMZGAfgtfAfIeGwIy0UOZEHkKy7tvCvP devOIlC3IUD6HvYHgxP/Xz5dJRu7V5vV7e/WuJb0B6u32dc/dqDn7L+z6lP9VwCn +bpL+dUnLpdW0VW/evE3IsyC33graTAVcMH/p3HWM3bK0JFagUVQ5niSteo77RIU SA4fl+1mH5tV8c7YpBbXYl0RgWMdfLKlLxYIzFX2MwfR6FA6mvKfgpGUlNYyObMR YmnSwn+MzBFIOUO5tEF5ScZMou3itYkCT1uV0oPo3S+looFykhpasUoBq0eWyozR XA3yQh6wTuhCbP0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:49 2026 by rpki-client