This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3136382e39302e3135322e302f32322d3232203d3e20323637303033.roa File: 3136382e39302e3135322e302f32322d3232203d3e20323637303033.roa (raw, json) Hash identifier: CmvgFKcho2GWxttVTEw+Dr+gE3vy8LhuqSLRr+MASHM= Subject key identifier: D8:70:4C:34:74:18:E8:4E:C2:03:97:CC:54:52:A4:56:6E:1C:E0:D5 Certificate issuer: /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B Certificate serial: 3EF1C5026A7243C4F5F040EA64532C51FC2F5130 Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3136382e39302e3135322e302f32322d3232203d3e20323637303033.roa Signing time: Tue 20 Jan 2026 14:22:15 +0000 ROA not before: Tue 20 Jan 2026 14:17:15 +0000 ROA not after: Tue 19 Jan 2027 14:22:15 +0000 asID: 267003 IP address blocks: 168.90.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 06:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f1:c5:02:6a:72:43:c4:f5:f0:40:ea:64:53:2c:51:fc:2f:51:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B Validity Not Before: Jan 20 14:17:15 2026 GMT Not After : Jan 19 14:22:15 2027 GMT Subject: CN=D8704C347418E84EC20397CC5452A4566E1CE0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:1a:7c:03:be:4a:9c:66:ec:7e:a2:45:25: 32:e1:dd:84:a5:c2:5f:08:df:f2:1d:d3:49:99:0c: f0:fc:8f:da:e8:3f:08:53:2a:67:3e:a4:61:7f:cb: e6:85:1e:a9:8c:80:eb:7b:31:fa:64:14:40:1a:9e: e5:0b:92:57:9b:d5:26:a1:3e:7a:0d:34:cc:11:a8: 5f:9b:87:1b:4b:bb:80:48:fb:c0:d6:99:29:23:d6: b5:46:48:ae:38:51:20:7c:b8:07:fd:3a:31:5f:b5: 56:8a:03:19:49:b8:15:bf:62:cc:8a:dd:84:c2:51: 42:03:33:86:53:dd:89:fa:8c:80:9f:d0:44:f3:57: b6:00:31:81:95:2c:6f:9b:7d:90:1a:f4:f5:52:e8: 83:d4:17:4f:0e:da:43:5c:a5:03:d9:7b:63:e6:0e: c8:41:55:48:f6:5a:2f:3e:d4:3e:35:99:70:42:ef: 23:1a:ce:60:e8:2f:bb:1d:b6:90:32:0e:2a:c9:3b: 7d:87:59:cc:d9:63:64:5a:23:a1:2a:38:83:27:a4: e0:56:53:66:07:de:4a:d4:66:65:72:60:0b:82:fc: 2b:3c:3a:66:f8:24:15:10:9f:8d:b6:6d:80:f2:76: a6:35:e5:71:5c:59:f8:a2:16:8f:1e:6a:14:b3:d6: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:70:4C:34:74:18:E8:4E:C2:03:97:CC:54:52:A4:56:6E:1C:E0:D5 X509v3 Authority Key Identifier: keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3136382e39302e3135322e302f32322d3232203d3e20323637303033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:3f:61:cd:d3:8c:e0:39:ea:20:59:9a:61:50:ce:01:ca:e1: 37:dd:22:32:a1:5c:f3:98:5c:0c:93:75:7e:fc:fb:79:69:78: f1:17:bd:82:f3:6f:1c:11:db:b6:aa:e2:12:67:04:97:75:aa: 6a:9c:26:22:a3:38:97:8a:23:46:20:cd:65:b7:f7:79:9b:9e: 0a:45:a5:6a:f6:ac:48:52:fd:3d:a4:cd:09:ef:a2:28:e3:1d: 1e:a4:5c:b5:9a:d3:5a:5a:af:b3:1a:f8:fd:98:e4:38:2f:fd: 5b:91:64:87:01:04:bb:05:59:66:50:80:a4:3f:d5:b2:bb:b9: 35:1c:8e:66:2a:2c:bf:79:b4:10:76:1b:36:60:98:9a:3b:2a: d5:a3:25:fd:21:a7:fd:e9:7b:4c:6a:22:54:d6:20:ad:96:ee: 79:07:8b:cc:3d:65:55:4c:7d:00:e3:de:56:0d:19:c5:3c:e8: 26:23:58:3e:85:5d:1c:b6:83:08:36:53:28:48:ee:3f:a1:ba: 6e:76:66:4e:4b:cb:f4:c6:1a:20:20:8d:15:b6:d0:b1:d4:dc: d5:23:ae:c1:ea:da:38:6a:94:7d:94:d9:59:9c:3a:c8:e1:34: 6a:08:53:f9:40:c9:7a:e3:ee:f0:42:74:14:5f:63:a0:f3:64: 1a:7f:9e:43 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUPvHFAmpyQ8T18EDqZFMsUfwvUTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBRUE0MDRBRkRBQzdENUE5QTE3NTVGM0EyN0ZGNUNB RTEyREE3QjAeFw0yNjAxMjAxNDE3MTVaFw0yNzAxMTkxNDIyMTVaMDMxMTAvBgNV BAMTKEQ4NzA0QzM0NzQxOEU4NEVDMjAzOTdDQzU0NTJBNDU2NkUxQ0UwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLPBp8A75KnGbsfqJFJTLh3YSl wl8I3/Id00mZDPD8j9roPwhTKmc+pGF/y+aFHqmMgOt7MfpkFEAanuULkleb1Sah PnoNNMwRqF+bhxtLu4BI+8DWmSkj1rVGSK44USB8uAf9OjFftVaKAxlJuBW/YsyK 3YTCUUIDM4ZT3Yn6jICf0ETzV7YAMYGVLG+bfZAa9PVS6IPUF08O2kNcpQPZe2Pm DshBVUj2Wi8+1D41mXBC7yMazmDoL7sdtpAyDirJO32HWczZY2RaI6EqOIMnpOBW U2YH3krUZmVyYAuC/Cs8Omb4JBUQn422bYDydqY15XFcWfiiFo8eahSz1gqJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU2HBMNHQY6E7CA5fMVFKkVm4c4NUwHwYDVR0j BBgwFoAU6a6kBK/ax9WpoXVfOif/XK4S2nswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2 VHYvMC9FOUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVBNDA0QUZEQUM3RDVB OUExNzU1RjNBMjdGRjVDQUUxMkRBN0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NTQnRFV20ya0ViRXNFaXlaWGZURjJiYzE0aVR6Q3ptTThTVGloMWpKdlR2LzAv MzEzNjM4MmUzOTMwMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzczMDMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKoWpgwDQYJKoZIhvcNAQELBQADggEBAJs/Yc3T jOA56iBZmmFQzgHK4TfdIjKhXPOYXAyTdX78+3lpePEXvYLzbxwR27aq4hJnBJd1 qmqcJiKjOJeKI0YgzWW393mbngpFpWr2rEhS/T2kzQnvoijjHR6kXLWa01par7Ma +P2Y5Dgv/VuRZIcBBLsFWWZQgKQ/1bK7uTUcjmYqLL95tBB2GzZgmJo7KtWjJf0h p/3pe0xqIlTWIK2W7nkHi8w9ZVVMfQDj3lYNGcU86CYjWD6FXRy2gwg2UyhI7j+h um52Zk5Ly/TGGiAgjRW20LHU3NUjrsHq2jhqlH2U2VmcOsjhNGoIU/lAyXrj7vBC dBRfY6DzZBp/nkM= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:09 2026 by rpki-client