This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32332d3233203d3e20323633343833.roa File: 3136382e302e3136362e302f32332d3233203d3e20323633343833.roa (raw, json) Hash identifier: jMkRqtoEFReHbIVj0glijLpMJ6PwiTGu44jvbzjPxeI= Subject key identifier: F8:D4:5A:77:28:82:E9:41:9C:96:C5:DA:16:3F:53:CD:7A:F4:02:F4 Certificate issuer: /CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87 Certificate serial: 594655BA76D959C19A5F2013B9687B95159FAD29 Authority key identifier: 5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32332d3233203d3e20323633343833.roa Signing time: Mon 19 Jan 2026 18:11:33 +0000 ROA not before: Mon 19 Jan 2026 18:06:33 +0000 ROA not after: Mon 18 Jan 2027 18:11:33 +0000 asID: 263483 IP address blocks: 168.0.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 22:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:46:55:ba:76:d9:59:c1:9a:5f:20:13:b9:68:7b:95:15:9f:ad:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87 Validity Not Before: Jan 19 18:06:33 2026 GMT Not After : Jan 18 18:11:33 2027 GMT Subject: CN=F8D45A772882E9419C96C5DA163F53CD7AF402F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:5a:fc:a8:8c:07:95:57:d8:10:87:1b:2c: 52:96:83:42:17:39:fb:73:93:1f:fa:3e:1c:3d:62: 3e:1f:8e:0a:64:0f:58:49:a8:01:c6:79:e8:f0:49: 90:a0:81:7f:b8:18:fd:95:01:4b:0c:02:c7:ac:95: d6:f7:0a:de:9a:a7:cc:87:63:4a:0e:b8:e0:cb:55: 41:e0:cf:5d:37:d4:47:e0:21:04:75:b8:16:73:be: 17:a6:4d:63:cf:56:ca:e0:03:08:14:73:c7:3c:d0: 9d:63:e0:52:3b:7c:7a:79:ea:95:cb:65:82:6b:09: 66:e9:a1:d3:13:ca:af:e3:c5:e2:03:68:b7:9d:f4: 53:08:76:f5:7a:35:79:23:71:11:9f:2b:c3:b6:a1: 77:56:db:c3:1c:e9:f3:05:62:a3:9e:13:2e:5b:05: 00:46:67:0b:b0:7b:69:8c:33:b0:22:b5:9a:63:34: 8c:3c:b7:48:ce:2b:89:41:55:dc:e8:cd:a9:97:49: 38:87:c2:0d:2f:4a:f0:df:9a:5e:93:ab:92:81:ac: 1c:85:69:96:67:73:e8:75:8a:55:05:04:b4:a2:dc: b8:73:aa:09:c0:47:a0:60:fb:b5:bd:2f:a7:c7:e0: 34:07:3b:bf:85:ec:c8:6f:57:75:5b:04:f5:2d:94: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D4:5A:77:28:82:E9:41:9C:96:C5:DA:16:3F:53:CD:7A:F4:02:F4 X509v3 Authority Key Identifier: keyid:5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32332d3233203d3e20323633343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.166.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:22:f6:b7:74:04:67:8a:59:4b:66:28:3f:25:d7:b1:76:8c: 4a:6d:d1:e2:9f:b3:0e:4a:8c:2f:16:7b:cd:50:af:d1:3b:f1: bb:3a:2b:ed:90:98:4d:89:87:b9:fe:d1:c9:04:16:cf:84:c3: 7e:7c:6a:c6:3a:a8:c8:fb:56:1a:37:67:2a:be:9c:13:9d:b8: 8b:a4:47:65:b9:e0:a0:e1:b5:a4:de:c7:21:02:35:44:74:94: ee:64:68:79:4c:e5:31:04:46:96:6c:94:cd:5c:2b:ad:31:13: 4a:e5:31:f6:68:1e:6b:d1:2d:5c:8f:88:d4:07:ba:e8:29:8f: 93:5c:d6:f9:f5:c5:38:6d:e4:ca:b4:c3:a1:f9:fb:87:62:eb: aa:f4:46:ba:59:ce:bd:68:e9:ec:2e:be:23:a2:b4:b8:ee:cf: ae:22:8e:0c:ea:ed:73:e9:23:fd:16:25:85:0c:99:67:4f:10: 40:18:95:9b:cb:63:d8:a5:64:da:f3:b1:69:72:56:4a:66:d8: e4:f8:60:82:ee:a8:eb:19:d9:30:33:44:19:60:ca:cb:44:e9: 91:39:91:fe:7a:02:de:76:08:6c:ce:d9:f6:10:03:9e:20:29: 8e:40:7b:09:66:24:02:e5:86:7e:e3:f4:b2:62:cd:ab:f2:c8: af:20:db:c7 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWUZVunbZWcGaXyATuWh7lRWfrSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzRjNGNkUwNjc2OERFMEI2RURCNDdEMjA4RDIxNEJB RTMyMkE4NzAeFw0yNjAxMTkxODA2MzNaFw0yNzAxMTgxODExMzNaMDMxMTAvBgNV BAMTKEY4RDQ1QTc3Mjg4MkU5NDE5Qzk2QzVEQTE2M0Y1M0NEN0FGNDAyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8Fr8qIwHlVfYEIcbLFKWg0IX Oftzkx/6Phw9Yj4fjgpkD1hJqAHGeejwSZCggX+4GP2VAUsMAsesldb3Ct6ap8yH Y0oOuODLVUHgz1031EfgIQR1uBZzvhemTWPPVsrgAwgUc8c80J1j4FI7fHp56pXL ZYJrCWbpodMTyq/jxeIDaLed9FMIdvV6NXkjcRGfK8O2oXdW28Mc6fMFYqOeEy5b BQBGZwuwe2mMM7AitZpjNIw8t0jOK4lBVdzozamXSTiHwg0vSvDfml6Tq5KBrByF aZZnc+h1ilUFBLSi3LhzqgnAR6Bg+7W9L6fH4DQHO7+F7MhvV3VbBPUtlAb/AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU+NRadyiC6UGclsXaFj9TzXr0AvQwHwYDVR0j BBgwFoAUXz8/bgZ2jeC27bR9II0hS64yKocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB VXAvMC81RjNGM0Y2RTA2NzY4REUwQjZFREI0N0QyMDhEMjE0QkFFMzIyQTg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGM0YzRjZFMDY3NjhERTBC NkVEQjQ3RDIwOEQyMTRCQUUzMjJBODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q0eE5YdTljWmJKOUFXeWZ0WFV6WFRkc21ENEdzbkMyNTJrOVpBTWRlQVVwLzAv MzEzNjM4MmUzMDJlMzEzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz MzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBqACmMA0GCSqGSIb3DQEBCwUAA4IBAQBvIva3dARn illLZig/JdexdoxKbdHin7MOSowvFnvNUK/RO/G7OivtkJhNiYe5/tHJBBbPhMN+ fGrGOqjI+1YaN2cqvpwTnbiLpEdlueCg4bWk3schAjVEdJTuZGh5TOUxBEaWbJTN XCutMRNK5TH2aB5r0S1cj4jUB7roKY+TXNb59cU4beTKtMOh+fuHYuuq9Ea6Wc69 aOnsLr4jorS47s+uIo4M6u1z6SP9FiWFDJlnTxBAGJWby2PYpWTa87FpclZKZtjk +GCC7qjrGdkwM0QZYMrLROmROZH+egLedghsztn2EAOeICmOQHsJZiQC5YZ+4/Sy Ys2r8sivINvH -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:30 2026 by rpki-client