This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa File: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (raw, json) Hash identifier: kipjBJ09zZtwvC7nmczGaoX100huYmXa/+NwcxArDt4= Subject key identifier: AF:3E:7C:07:8A:4E:F3:35:CF:04:34:04:89:5B:91:83:A7:EE:D2:7F Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 4E4CBB8DFBA66B555C46F5FFBE8F7178D0F1EE9D Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa Signing time: Fri 02 Jan 2026 18:58:05 +0000 ROA not before: Fri 02 Jan 2026 18:53:05 +0000 ROA not after: Fri 01 Jan 2027 18:58:05 +0000 asID: 265062 IP address blocks: 170.231.156.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 15:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4c:bb:8d:fb:a6:6b:55:5c:46:f5:ff:be:8f:71:78:d0:f1:ee:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Jan 2 18:53:05 2026 GMT Not After : Jan 1 18:58:05 2027 GMT Subject: CN=AF3E7C078A4EF335CF043404895B9183A7EED27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:4b:2f:4f:b7:df:40:b3:90:3e:ca:f9:e6: a3:42:1b:4a:9f:4e:1e:fe:f9:c4:53:a4:ef:d9:bb: f7:04:c8:35:87:a4:6a:c0:dc:a5:cb:f1:2b:3f:40: 4c:85:7a:f9:ec:00:6c:d2:1c:69:c3:fc:4d:f1:09: 9b:f8:0a:ef:5c:e8:21:47:9a:ae:9c:0d:c6:12:2f: 8c:26:cc:b2:4e:a8:63:e0:af:eb:a6:bf:55:b9:99: d4:8b:45:fc:34:32:59:76:fe:33:53:6b:ce:f4:04: 5c:19:df:d3:96:75:46:8d:1c:f0:b5:01:5c:f2:4a: 5a:98:ad:61:38:13:be:32:6b:cc:a0:13:03:9d:44: fe:58:6c:f5:df:33:51:5e:d4:4f:74:c4:01:09:3f: 53:9a:cb:59:bf:ba:f2:d2:ca:b0:4b:dc:00:51:5c: a5:64:4e:89:56:2a:e1:08:92:e3:35:28:92:ac:ac: a7:92:33:85:6d:18:40:41:70:68:fc:e6:72:9e:25: 5d:28:59:66:ea:7f:0e:e5:44:78:d3:a0:bf:71:35: d7:72:de:4a:4e:2e:3f:48:32:75:06:da:d6:2d:66: 64:a6:cb:84:95:07:ad:fb:ec:09:e7:d7:3b:a0:ea: 4c:11:7c:2d:16:ca:bf:3a:78:10:52:bf:11:b9:98: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3E:7C:07:8A:4E:F3:35:CF:04:34:04:89:5B:91:83:A7:EE:D2:7F X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.156.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:34:e9:dd:03:f4:77:ee:9b:c5:08:b9:97:76:7c:f2:10:6f: 3f:58:2c:84:ad:8b:0b:e3:2c:ed:b7:2e:ad:0b:97:f6:c1:52: dd:7e:f1:21:89:a1:2d:35:a9:8d:89:09:48:95:fa:bf:23:fd: 8e:c8:b4:6c:4d:3b:92:b2:5a:ed:e9:9b:57:de:98:00:c8:c0: 76:01:f9:ab:2a:14:b7:bf:4d:fb:77:7c:cf:c9:0f:88:dc:3e: 91:93:bd:3b:c4:27:b7:57:14:4a:f8:54:37:ee:36:7a:86:f0: 6d:55:4a:74:a5:a2:38:ec:fe:73:2b:5b:b0:2e:4d:09:e2:4d: 5b:7a:f8:ca:13:62:f1:af:ca:eb:ff:15:ea:e6:f1:c1:d7:9f: b9:b5:cd:c3:28:86:4c:33:f0:9b:d9:48:85:bd:4c:f1:33:5e: e1:28:69:eb:95:91:b7:a1:2d:0f:e4:a8:52:08:b5:03:96:a0: 9c:92:8b:0e:d3:56:2d:65:06:06:17:0b:a7:22:0e:f9:a0:f1: 1f:4e:39:db:4c:31:df:49:7d:55:0e:8c:07:ce:72:a7:16:2f: a4:03:bc:e1:70:73:14:43:75:57:45:a1:ae:b7:79:ca:c5:15: ae:15:1e:e6:15:2b:f6:af:bb:33:02:22:b2:1c:03:5e:2d:83: 28:3f:50:4f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUTky7jfuma1VcRvX/vo9xeNDx7p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNjAxMDIxODUzMDVaFw0yNzAxMDExODU4MDVaMDMxMTAvBgNV BAMTKEFGM0U3QzA3OEE0RUYzMzVDRjA0MzQwNDg5NUI5MTgzQTdFRUQyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd9EsvT7ffQLOQPsr55qNCG0qf Th7++cRTpO/Zu/cEyDWHpGrA3KXL8Ss/QEyFevnsAGzSHGnD/E3xCZv4Cu9c6CFH mq6cDcYSL4wmzLJOqGPgr+umv1W5mdSLRfw0Mll2/jNTa870BFwZ39OWdUaNHPC1 AVzySlqYrWE4E74ya8ygEwOdRP5YbPXfM1Fe1E90xAEJP1Oay1m/uvLSyrBL3ABR XKVkTolWKuEIkuM1KJKsrKeSM4VtGEBBcGj85nKeJV0oWWbqfw7lRHjToL9xNddy 3kpOLj9IMnUG2tYtZmSmy4SVB6377Ann1zug6kwRfC0Wyr86eBBSvxG5mHqjAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUrz58B4pO8zXPBDQEiVuRg6fu0n8wHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKQWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAv MzEzNzMwMmUzMjMzMzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNTMwMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrnnDANBgkqhkiG9w0BAQsFAAOCAQEAfjTp 3QP0d+6bxQi5l3Z88hBvP1gshK2LC+Ms7bcurQuX9sFS3X7xIYmhLTWpjYkJSJX6 vyP9jsi0bE07krJa7embV96YAMjAdgH5qyoUt79N+3d8z8kPiNw+kZO9O8Qnt1cU SvhUN+42eobwbVVKdKWiOOz+cytbsC5NCeJNW3r4yhNi8a/K6/8V6ubxwdefubXN wyiGTDPwm9lIhb1M8TNe4Shp65WRt6EtD+SoUgi1A5agnJKLDtNWLWUGBhcLpyIO +aDxH04520wx30l9VQ6MB85ypxYvpAO84XBzFEN1V0Whrrd5ysUVrhUe5hUr9q+7 MwIishwDXi2DKD9QTw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:32:33 2026 by rpki-client