This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa File: 3136382e302e3136342e302f32332d3233203d3e20323633343833.roa (raw, json) Hash identifier: e9/O62ZEPkBCNGnDpzyARSyuYb1zB9mtqW31b7CHJP0= Subject key identifier: 87:85:FA:98:7C:4B:98:96:9E:9C:7A:25:F8:7F:2E:BB:95:7F:24:37 Certificate issuer: /CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87 Certificate serial: 7EBF1AD1B0FD4FC132A2308B247EA173DC357E4E Authority key identifier: 5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa Signing time: Mon 19 Jan 2026 18:11:27 +0000 ROA not before: Mon 19 Jan 2026 18:06:27 +0000 ROA not after: Mon 18 Jan 2027 18:11:27 +0000 asID: 263483 IP address blocks: 168.0.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 22:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bf:1a:d1:b0:fd:4f:c1:32:a2:30:8b:24:7e:a1:73:dc:35:7e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87 Validity Not Before: Jan 19 18:06:27 2026 GMT Not After : Jan 18 18:11:27 2027 GMT Subject: CN=8785FA987C4B98969E9C7A25F87F2EBB957F2437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:e3:ba:3c:66:d9:3b:2e:44:30:da:e3:7e: 4b:10:55:eb:95:90:43:81:ee:81:19:7c:f5:b5:8e: bd:85:0b:50:8f:5c:c8:df:32:52:e1:9b:73:c4:79: 4d:bb:72:19:75:cb:da:c1:ab:71:ec:1a:7b:08:f2: 0b:4b:d7:0a:79:d2:35:f0:8a:af:39:31:3b:14:99: f3:81:ae:d2:d0:a4:9b:4c:33:a1:e5:cb:7b:39:df: 51:6b:47:bb:df:82:a2:b2:2d:7f:43:b3:87:5a:97: 7b:ae:43:6a:f9:aa:22:8b:ad:12:c7:f3:ee:6e:98: fa:b2:ec:93:62:35:5a:f2:a7:26:54:05:7f:ce:b7: bb:7c:d7:3d:39:d5:f4:9d:b9:1f:db:c2:67:32:95: 8a:34:6e:06:17:c8:8d:49:1b:c6:ec:aa:d2:b5:bc: 50:38:7b:5b:2e:fe:1a:7d:eb:d1:34:87:87:79:f9: ce:04:be:b3:1d:5d:4e:ca:6c:63:42:49:ca:ff:f0: 51:58:ba:8b:87:d7:81:23:bc:e7:4c:f1:86:be:e6: 2a:13:1c:8a:9f:86:d3:d7:7e:c8:f3:20:a9:f8:67: 5f:c1:85:a9:19:a7:06:b7:c4:7c:4a:07:0c:5a:17: 45:81:44:b0:79:bd:04:93:a5:1b:5b:b7:61:73:70: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:85:FA:98:7C:4B:98:96:9E:9C:7A:25:F8:7F:2E:BB:95:7F:24:37 X509v3 Authority Key Identifier: keyid:5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.164.0/23 Signature Algorithm: sha256WithRSAEncryption ba:0a:33:8f:0f:37:d1:32:ee:6c:c1:66:f8:dc:7c:0e:c5:e4: 2f:5e:ab:b4:44:d8:5c:36:30:05:c8:1d:4e:c5:c2:23:41:ce: 8e:34:8a:d2:26:57:c9:c4:bb:59:f7:60:c7:3a:44:aa:fb:ab: a5:d3:9d:43:4f:48:9f:f9:43:15:f4:59:06:52:ba:55:4b:1e: 20:72:57:18:43:bb:c7:5c:3d:ff:58:99:6e:d7:9f:a9:32:06: 3c:52:ed:f2:9e:6b:8a:a8:a8:52:9d:7a:64:b0:16:07:37:37: c2:6b:f9:25:88:e1:52:f4:cd:87:54:d3:d6:74:01:48:ca:93: b8:e6:7f:bc:6b:b3:7e:d5:62:e5:b6:37:09:75:d2:15:b9:47: 75:75:a1:c6:6a:a6:44:07:3e:65:fe:d4:77:e0:67:49:ff:bc: ae:47:ed:8a:4e:f8:6c:4b:af:ea:4f:d3:a6:97:e3:2d:4f:53: 6f:e3:66:f1:7c:ac:41:bb:87:59:42:47:ce:8d:0a:14:37:b0: 51:d7:b4:c4:43:4c:fa:a0:5b:d2:0e:45:73:ef:70:4e:76:5e: 2b:16:79:85:1c:4d:d1:7a:ed:eb:6d:a2:86:a3:2f:2d:3f:8d: e1:4d:9c:ba:19:8f:16:37:7b:6f:56:f0:fd:a9:3c:e1:5c:bd: 20:a7:40:e1 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUfr8a0bD9T8EyojCLJH6hc9w1fk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzRjNGNkUwNjc2OERFMEI2RURCNDdEMjA4RDIxNEJB RTMyMkE4NzAeFw0yNjAxMTkxODA2MjdaFw0yNzAxMTgxODExMjdaMDMxMTAvBgNV BAMTKDg3ODVGQTk4N0M0Qjk4OTY5RTlDN0EyNUY4N0YyRUJCOTU3RjI0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJOO6PGbZOy5EMNrjfksQVeuV kEOB7oEZfPW1jr2FC1CPXMjfMlLhm3PEeU27chl1y9rBq3HsGnsI8gtL1wp50jXw iq85MTsUmfOBrtLQpJtMM6Hly3s531FrR7vfgqKyLX9Ds4dal3uuQ2r5qiKLrRLH 8+5umPqy7JNiNVrypyZUBX/Ot7t81z051fSduR/bwmcylYo0bgYXyI1JG8bsqtK1 vFA4e1su/hp969E0h4d5+c4EvrMdXU7KbGNCScr/8FFYuouH14EjvOdM8Ya+5ioT HIqfhtPXfsjzIKn4Z1/BhakZpwa3xHxKBwxaF0WBRLB5vQSTpRtbt2FzcFgJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUh4X6mHxLmJaenHol+H8uu5V/JDcwHwYDVR0j BBgwFoAUXz8/bgZ2jeC27bR9II0hS64yKocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB VXAvMC81RjNGM0Y2RTA2NzY4REUwQjZFREI0N0QyMDhEMjE0QkFFMzIyQTg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGM0YzRjZFMDY3NjhERTBC NkVEQjQ3RDIwOEQyMTRCQUUzMjJBODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q0eE5YdTljWmJKOUFXeWZ0WFV6WFRkc21ENEdzbkMyNTJrOVpBTWRlQVVwLzAv MzEzNjM4MmUzMDJlMzEzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz MzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBqACkMA0GCSqGSIb3DQEBCwUAA4IBAQC6CjOPDzfR Mu5swWb43HwOxeQvXqu0RNhcNjAFyB1OxcIjQc6ONIrSJlfJxLtZ92DHOkSq+6ul 051DT0if+UMV9FkGUrpVSx4gclcYQ7vHXD3/WJlu15+pMgY8Uu3ynmuKqKhSnXpk sBYHNzfCa/kliOFS9M2HVNPWdAFIypO45n+8a7N+1WLltjcJddIVuUd1daHGaqZE Bz5l/tR34GdJ/7yuR+2KTvhsS6/qT9Oml+MtT1Nv42bxfKxBu4dZQkfOjQoUN7BR 17TEQ0z6oFvSDkVz73BOdl4rFnmFHE3Reu3rbaKGoy8tP43hTZy6GY8WN3tvVvD9 qTzhXL0gp0Dh -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:31 2026 by rpki-client