This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32322d3234203d3e20323638323937.roa File: 34352e3233372e3234382e302f32322d3234203d3e20323638323937.roa (raw, json) Hash identifier: lDbqCk6Au6PnBTafBvDVDa/dyjxp+F+ZQmO2tsPIdSM= Subject key identifier: 6F:A1:5C:45:46:66:14:68:D3:A0:DD:86:E4:79:7E:7A:2A:E8:87:F0 Certificate issuer: /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22 Certificate serial: 6A611EF9F0668D51D67B9653C2E39736169CAF71 Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer Subject info access: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32322d3234203d3e20323638323937.roa Signing time: Mon 12 Jan 2026 12:46:00 +0000 ROA not before: Mon 12 Jan 2026 12:41:00 +0000 ROA not after: Mon 11 Jan 2027 12:46:00 +0000 asID: 268297 IP address blocks: 45.237.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 12:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:61:1e:f9:f0:66:8d:51:d6:7b:96:53:c2:e3:97:36:16:9c:af:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22 Validity Not Before: Jan 12 12:41:00 2026 GMT Not After : Jan 11 12:46:00 2027 GMT Subject: CN=6FA15C4546661468D3A0DD86E4797E7A2AE887F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:8e:1a:8f:13:c4:18:92:b0:7d:7b:11:ce: b0:5d:c3:aa:87:37:e4:83:58:71:94:2a:bb:ab:88: 2b:12:92:cc:25:e0:9b:ce:28:14:0c:a0:bb:da:ed: e3:23:70:0f:a0:ba:6d:4c:5b:12:31:43:c3:d1:d8: e8:bf:fd:be:2e:b0:2c:21:86:21:b2:43:1f:61:66: e1:1b:12:86:e0:f3:e7:c5:ff:44:14:cf:a7:fb:3b: e6:10:21:d8:e6:fe:8b:1c:a2:c1:fe:3c:87:a0:03: 77:1b:1e:2f:19:e9:78:f1:ab:46:7b:b3:d9:4d:b8: b9:52:08:e5:6d:5a:96:f9:91:9a:ce:32:5d:9c:f2: 7a:21:8d:0e:2c:d8:e7:4d:98:2f:af:c3:e8:56:0c: 8c:cf:b6:eb:e9:b8:5a:e2:86:94:36:55:58:ff:9f: c6:0c:f9:4e:cb:f2:0d:06:d4:a6:c2:fd:df:4e:67: 57:78:17:76:90:cf:59:05:91:45:17:5a:44:18:92: 8a:08:94:43:b2:f4:15:5b:50:cb:2d:22:fe:b5:b5: cd:94:8b:72:ec:f4:43:c8:1b:7f:46:f6:33:63:fb: c8:b6:3d:3d:dc:de:c5:67:f8:3d:b4:cd:00:7d:01: 30:37:1b:f7:a9:b4:41:20:dc:0b:73:e7:52:51:50: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A1:5C:45:46:66:14:68:D3:A0:DD:86:E4:79:7E:7A:2A:E8:87:F0 X509v3 Authority Key Identifier: keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32322d3234203d3e20323638323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.248.0/22 Signature Algorithm: sha256WithRSAEncryption c1:b5:95:cb:63:15:01:d3:69:9b:65:8b:c7:5a:da:22:9d:28: bb:42:13:52:85:d7:52:7b:71:a2:3e:fa:9f:9e:1e:35:4b:69: 5a:69:24:eb:41:ab:fa:4d:af:aa:6d:c7:d8:62:ab:ed:b2:ef: 37:b2:5a:37:83:7b:fb:77:fe:d1:85:3d:eb:60:b0:b8:52:e0: bc:02:99:cb:5f:1b:ea:81:30:38:a9:e4:20:f1:7e:a0:89:59: d0:26:f3:6b:7b:13:cb:41:73:1a:77:90:d3:7e:ce:bb:b0:91: 5d:49:5b:7c:44:5f:50:dd:64:91:78:f9:d7:3c:1d:5b:2e:d6: 1f:0f:44:e9:4c:02:fd:c9:99:ec:39:07:bc:97:87:20:31:55: 01:e1:2e:74:86:e1:f7:79:22:7b:86:d1:75:dc:90:03:04:c9: 62:c3:c7:9f:19:e2:cb:28:07:d0:3c:57:39:66:c9:a5:c2:55: 85:9f:38:52:7c:2c:05:29:08:e2:8d:9c:46:27:39:52:a5:6c: 44:4a:4f:58:9d:5a:d7:a6:49:1c:49:f1:af:bc:87:3f:36:03: 90:c3:d7:f8:b4:fd:c5:71:9b:f3:8a:0e:3b:d7:76:77:53:de: 2e:b9:61:81:aa:81:f5:1b:cf:9f:94:54:d4:b8:e2:74:6f:c0: bc:52:c8:d6 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUamEe+fBmjVHWe5ZTwuOXNhacr3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDRDFGNzFDMkE4RTMzRDg4N0MwOTlFQkIwNDZBN0VC MTBDNkMyMjAeFw0yNjAxMTIxMjQxMDBaFw0yNzAxMTExMjQ2MDBaMDMxMTAvBgNV BAMTKDZGQTE1QzQ1NDY2NjE0NjhEM0EwREQ4NkU0Nzk3RTdBMkFFODg3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfo4ajxPEGJKwfXsRzrBdw6qH N+SDWHGUKruriCsSkswl4JvOKBQMoLva7eMjcA+gum1MWxIxQ8PR2Oi//b4usCwh hiGyQx9hZuEbEobg8+fF/0QUz6f7O+YQIdjm/oscosH+PIegA3cbHi8Z6Xjxq0Z7 s9lNuLlSCOVtWpb5kZrOMl2c8nohjQ4s2OdNmC+vw+hWDIzPtuvpuFrihpQ2VVj/ n8YM+U7L8g0G1KbC/d9OZ1d4F3aQz1kFkUUXWkQYkooIlEOy9BVbUMstIv61tc2U i3Ls9EPIG39G9jNj+8i2PT3c3sVn+D20zQB9ATA3G/eptEEg3Atz51JRUBpJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUb6FcRUZmFGjToN2G5Hl+eiroh/AwHwYDVR0j BBgwFoAUOM0fccKo4z2IfAmeuwRqfrEMbCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDN0dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2 dFYvMS8zOENEMUY3MUMyQThFMzNEODg3QzA5OUVCQjA0NkE3RUIxMEM2QzIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0QxRjcxQzJBOEUzM0Q4 ODdDMDk5RUJCMDQ2QTdFQjEwQzZDMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0QzdHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzEv MzQzNTJlMzIzMzM3MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMjM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt7fgwDQYJKoZIhvcNAQELBQADggEBAMG1lctj FQHTaZtli8da2iKdKLtCE1KF11J7caI++p+eHjVLaVppJOtBq/pNr6ptx9hiq+2y 7zeyWjeDe/t3/tGFPetgsLhS4LwCmctfG+qBMDip5CDxfqCJWdAm82t7E8tBcxp3 kNN+zruwkV1JW3xEX1DdZJF4+dc8HVsu1h8PROlMAv3Jmew5B7yXhyAxVQHhLnSG 4fd5InuG0XXckAMEyWLDx58Z4ssoB9A8VzlmyaXCVYWfOFJ8LAUpCOKNnEYnOVKl bERKT1idWtemSRxJ8a+8hz82A5DD1/i0/cVxm/OKDjvXdndT3i65YYGqgfUbz5+U VNS44nRvwLxSyNY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:15:07 2026 by rpki-client