This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa File: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (raw, json) Hash identifier: T4RGgh2bTxHiP4a0RFVpiCwLvMkzMCDUwhsMn4KWnIo= Subject key identifier: D5:F0:51:45:A4:0D:DE:D1:C9:FB:0F:A8:A4:F0:5A:3D:63:40:E1:38 Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 20C4C9633455DF4561DA3AB5396BA424AAD30BED Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:00:59 +0000 ROA not before: Thu 22 Jan 2026 11:55:59 +0000 ROA not after: Thu 21 Jan 2027 12:00:59 +0000 asID: 263891 IP address blocks: 170.78.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c4:c9:63:34:55:df:45:61:da:3a:b5:39:6b:a4:24:aa:d3:0b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:55:59 2026 GMT Not After : Jan 21 12:00:59 2027 GMT Subject: CN=D5F05145A40DDED1C9FB0FA8A4F05A3D6340E138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:23:51:cd:41:99:79:39:78:a7:02:c4:57: 5b:b7:2a:e2:e1:d0:c2:b6:bb:25:8d:bb:2c:aa:e2: 2a:2d:f6:ce:a6:68:bf:60:2e:4e:4e:92:bb:6a:4d: 31:eb:7e:ea:59:68:47:4a:dd:5c:0e:63:b6:a7:ab: fa:45:2f:6c:da:ac:3d:0b:e9:fe:55:bc:b3:22:6b: 6f:96:a2:f1:28:c7:27:f0:33:b0:67:3f:24:50:ff: 0f:97:be:a1:9c:9e:df:c5:f9:8a:e4:d2:de:93:83: 6a:63:7b:12:6f:03:1c:e7:d5:83:29:2e:56:50:7c: 69:51:93:24:6f:b4:c9:8f:73:9a:be:b6:ed:52:f0: 5f:c9:7d:1e:b1:d3:e0:46:84:21:69:3c:2d:63:b5: bb:13:4a:d3:02:70:3e:68:d9:4e:df:0b:5b:db:4a: 59:36:0d:62:4c:7f:ab:40:16:61:62:90:00:7a:39: 3b:2e:7c:d5:c8:ab:14:50:7c:69:f7:b3:1d:ee:55: 3d:54:98:1a:b4:11:f7:ec:41:fc:87:cc:b0:5c:4d: 57:71:30:a1:9e:d6:4f:0b:86:17:d6:40:e7:65:90: 6a:b1:ab:39:50:6d:0f:6e:c1:67:d1:1d:de:5b:5c: 6e:e5:d6:2d:9c:8e:c6:5d:fa:9e:ca:e2:52:d2:1d: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F0:51:45:A4:0D:DE:D1:C9:FB:0F:A8:A4:F0:5A:3D:63:40:E1:38 X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.163.0/24 Signature Algorithm: sha256WithRSAEncryption 84:ab:c6:ca:74:19:bb:39:75:e0:b8:24:84:e6:a0:73:5f:3a: b1:ba:68:2d:90:b4:83:6a:9c:26:51:98:7c:be:91:79:1f:98: 78:28:6e:ff:e4:b0:57:7c:48:66:19:46:5b:7e:1e:08:8a:10: 00:3c:a1:12:d7:72:b0:ec:5e:48:e0:e9:2d:ea:88:43:1e:a1: 13:be:5c:02:77:47:2f:f9:3b:90:b7:e9:bc:10:0d:03:7d:52: 98:8b:17:05:db:51:31:03:9f:8a:30:35:2e:a9:0c:6a:bb:7d: f2:a8:68:0d:6d:e7:96:c7:eb:5c:fb:d2:c5:c6:ee:57:8f:45: 35:97:07:55:13:de:c4:5c:04:9f:63:e4:52:21:58:9d:dc:75: 60:e3:98:99:9a:66:2c:84:51:4a:a7:d0:e6:10:4a:58:4b:63: 6c:95:92:eb:7f:49:cd:5f:72:4c:4c:37:07:f2:2a:fb:f7:9f: cb:d3:d8:af:58:3b:ab:af:e6:bb:84:fa:48:f3:ba:02:be:32: bb:b4:c0:84:d1:60:75:95:85:b2:d1:f4:ef:6e:b3:25:79:0f: 92:f2:ad:78:0c:68:18:96:50:8e:47:e5:5b:5f:77:73:b5:e3: 8e:c6:aa:e8:be:e1:e8:d6:d2:86:6a:6b:ec:56:ad:36:e6:33: c8:af:83:00 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUIMTJYzRV30Vh2jq1OWukJKrTC+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU1NTlaFw0yNzAxMjExMjAwNTlaMDMxMTAvBgNV BAMTKEQ1RjA1MTQ1QTQwRERFRDFDOUZCMEZBOEE0RjA1QTNENjM0MEUxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCCNRzUGZeTl4pwLEV1u3KuLh 0MK2uyWNuyyq4iot9s6maL9gLk5OkrtqTTHrfupZaEdK3VwOY7anq/pFL2zarD0L 6f5VvLMia2+WovEoxyfwM7BnPyRQ/w+XvqGcnt/F+Yrk0t6Tg2pjexJvAxzn1YMp LlZQfGlRkyRvtMmPc5q+tu1S8F/JfR6x0+BGhCFpPC1jtbsTStMCcD5o2U7fC1vb Slk2DWJMf6tAFmFikAB6OTsufNXIqxRQfGn3sx3uVT1UmBq0EffsQfyHzLBcTVdx MKGe1k8LhhfWQOdlkGqxqzlQbQ9uwWfRHd5bXG7l1i2cjsZd+p7K4lLSHU1FAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU1fBRRaQN3tHJ+w+opPBaPWNA4TgwHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzEzNzMwMmUzNzM4MmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzODM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACqTqMwDQYJKoZIhvcNAQELBQADggEBAISrxsp0 Gbs5deC4JITmoHNfOrG6aC2QtINqnCZRmHy+kXkfmHgobv/ksFd8SGYZRlt+HgiK EAA8oRLXcrDsXkjg6S3qiEMeoRO+XAJ3Ry/5O5C36bwQDQN9UpiLFwXbUTEDn4ow NS6pDGq7ffKoaA1t55bH61z70sXG7lePRTWXB1UT3sRcBJ9j5FIhWJ3cdWDjmJma ZiyEUUqn0OYQSlhLY2yVkut/Sc1fckxMNwfyKvv3n8vT2K9YO6uv5ruE+kjzugK+ Mru0wITRYHWVhbLR9O9usyV5D5LyrXgMaBiWUI5H5Vtfd3O1447Gqui+4ejW0oZq a+xWrTbmM8ivgwA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:05:27 2026 by rpki-client