This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa File: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (raw, json) Hash identifier: WaBN8vhpaukaQaVmisq6f2jBRD6Zvq4V2qKtYIXL5Q4= Subject key identifier: 2C:28:D1:92:01:9D:0E:51:67:22:1F:36:B7:F3:86:44:77:D7:67:80 Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 23EC62C7B728E0FA4B718173563D497368CA2F Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:00:59 +0000 ROA not before: Thu 22 Jan 2026 11:55:59 +0000 ROA not after: Thu 21 Jan 2027 12:00:59 +0000 asID: 263891 IP address blocks: 170.78.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ec:62:c7:b7:28:e0:fa:4b:71:81:73:56:3d:49:73:68:ca:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:55:59 2026 GMT Not After : Jan 21 12:00:59 2027 GMT Subject: CN=2C28D192019D0E5167221F36B7F3864477D76780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:07:51:63:57:d2:55:95:70:d8:c3:64:8f: 30:d8:95:60:71:4e:7b:a6:2d:21:ba:d2:18:f1:7c: 6b:7a:a2:b3:9d:16:f9:c1:6d:d7:06:8b:52:57:e5: 49:e2:be:f2:01:da:7b:06:ca:10:c2:01:47:7f:a5: 2e:a8:b3:df:6d:95:f8:99:c6:94:62:fe:95:45:ea: 43:9e:03:d6:7a:7a:51:85:b3:b8:9a:70:60:88:df: 8e:c7:a1:ca:2c:76:60:00:33:8d:8a:e0:b7:cd:6f: a4:92:b9:57:df:e5:5a:0d:ff:ea:0e:7c:03:ad:80: 12:53:da:a4:32:99:d7:d8:a2:10:81:f3:39:37:9b: 9f:06:36:22:ef:ca:e9:11:95:9f:df:7b:63:b8:c0: 37:38:60:7a:00:21:ea:bb:42:2e:ae:3c:1f:ee:00: 73:d6:20:78:35:75:85:3b:8b:b5:22:cf:39:d4:f1: 13:cf:27:5d:b8:62:dc:5b:de:c7:b0:89:7a:0c:19: cd:dd:6c:0e:65:fc:d1:af:21:0e:45:1f:1a:f2:28: 64:cc:1c:c3:45:9b:7e:53:1f:a7:e9:b0:7c:ec:20: 9c:83:a6:50:a1:47:00:e4:1a:39:19:c5:00:5a:bc: d4:01:21:7f:2f:8c:f6:86:9d:bc:cf:9d:c9:32:14: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:28:D1:92:01:9D:0E:51:67:22:1F:36:B7:F3:86:44:77:D7:67:80 X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.162.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:1e:f3:da:c0:89:53:9a:3c:5d:22:e5:e2:13:98:99:4a:04: a6:13:11:45:c5:83:fd:0e:51:14:d1:dd:ef:48:3c:ac:d7:96: 07:74:fb:2b:81:74:d5:1f:e6:2a:20:b2:88:a0:fc:0a:ab:e5: 4f:56:7e:69:f6:e9:0d:5e:3d:b0:97:15:9f:52:66:d0:2b:2f: cc:02:87:14:6d:6d:44:a5:b8:ad:7f:e7:b1:c2:0d:31:8f:96: 60:2a:df:48:5f:8b:8c:56:f2:15:a3:c6:f7:6b:6b:3f:76:b4: 9d:93:2d:fa:cb:2a:30:5b:cd:a0:08:68:93:e2:da:48:9a:28: b5:3a:69:8c:7d:b2:5b:03:e9:72:01:a7:c2:aa:d6:b4:ff:ca: 0d:0f:95:da:19:0f:6e:a7:68:50:b7:46:5f:ec:10:08:c5:54: ba:60:d9:82:ec:6f:89:27:46:61:67:d8:52:d2:d7:67:f2:76: 48:45:75:98:9b:3b:f9:f2:f0:b1:c9:bc:44:ba:81:1a:e6:39: f5:d3:c6:71:14:33:43:73:88:16:5c:8f:08:24:de:f7:8e:68: 33:22:ab:fd:07:3e:7f:25:1e:79:0a:a2:49:eb:d8:f9:9e:4a: b3:9e:54:5c:b3:24:3b:d7:a8:f7:97:e1:ed:dc:d6:49:0a:a4: e6:a1:6e:be -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgITI+xix7co4PpLcYFzVj1Jc2jKLzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFC MDJGMzkwMB4XDTI2MDEyMjExNTU1OVoXDTI3MDEyMTEyMDA1OVowMzExMC8GA1UE AxMoMkMyOEQxOTIwMTlEMEU1MTY3MjIxRjM2QjdGMzg2NDQ3N0Q3Njc4MDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQRB1FjV9JVlXDYw2SPMNiVYHFO e6YtIbrSGPF8a3qis50W+cFt1waLUlflSeK+8gHaewbKEMIBR3+lLqiz322V+JnG lGL+lUXqQ54D1np6UYWzuJpwYIjfjsehyix2YAAzjYrgt81vpJK5V9/lWg3/6g58 A62AElPapDKZ19iiEIHzOTebnwY2Iu/K6RGVn997Y7jANzhgegAh6rtCLq48H+4A c9YgeDV1hTuLtSLPOdTxE88nXbhi3Fvex7CJegwZzd1sDmX80a8hDkUfGvIoZMwc w0WbflMfp+mwfOwgnIOmUKFHAOQaORnFAFq81AEhfy+M9oadvM+dyTIU9zsCAwEA AaOCAlEwggJNMB0GA1UdDgQWBBQsKNGSAZ0OUWciHza384ZEd9dngDAfBgNVHSME GDAWgBQh6U4ejewbgqmy/ROBFUlvGwLzkDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9CUWdBZDJlNko0Zm11V0ZoWDdtVVl3d2hzMWNHeDVYM1FvV0Zhd0JFZVU0 Wi8wLzIxRTk0RTFFOERFQzFCODJBOUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMjFFOTRFMUU4REVDMUI4MkE5 QjJGRDEzODExNTQ5NkYxQjAyRjM5MC5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVVNFovMC8z MTM3MzAyZTM3MzgyZTMxMzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz MzM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAapOojANBgkqhkiG9w0BAQsFAAOCAQEATx7z2sCJ U5o8XSLl4hOYmUoEphMRRcWD/Q5RFNHd70g8rNeWB3T7K4F01R/mKiCyiKD8Cqvl T1Z+afbpDV49sJcVn1Jm0CsvzAKHFG1tRKW4rX/nscINMY+WYCrfSF+LjFbyFaPG 92trP3a0nZMt+ssqMFvNoAhok+LaSJootTppjH2yWwPpcgGnwqrWtP/KDQ+V2hkP bqdoULdGX+wQCMVUumDZguxviSdGYWfYUtLXZ/J2SEV1mJs7+fLwscm8RLqBGuY5 9dPGcRQzQ3OIFlyPCCTe945oMyKr/Qc+fyUeeQqiSevY+Z5Ks55UXLMkO9eo95fh 7dzWSQqk5qFuvg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:39:53 2026 by rpki-client