This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa File: 3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (raw, json) Hash identifier: r0tBAK+QejG6d300vU+MXMRiqOlNZOHdDWhzPvqgs+o= Subject key identifier: 70:69:E6:79:C7:FD:3F:AB:70:3D:2E:FB:64:CE:44:27:DA:08:60:6D Certificate issuer: /CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Certificate serial: 06D49A50217A6B8B84B18C575BF1062280E64D10 Authority key identifier: 40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa Signing time: Mon 05 Jan 2026 18:30:16 +0000 ROA not before: Mon 05 Jan 2026 18:25:16 +0000 ROA not after: Mon 04 Jan 2027 18:30:16 +0000 asID: 263086 IP address blocks: 138.99.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d4:9a:50:21:7a:6b:8b:84:b1:8c:57:5b:f1:06:22:80:e6:4d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Validity Not Before: Jan 5 18:25:16 2026 GMT Not After : Jan 4 18:30:16 2027 GMT Subject: CN=7069E679C7FD3FAB703D2EFB64CE4427DA08606D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:a2:62:60:50:10:65:03:af:85:2d:6a:8d: 69:a2:09:0a:75:3d:11:99:ab:67:49:98:40:fc:97: 98:0f:04:17:4f:cd:eb:b1:e5:b3:a0:39:16:c5:0c: 8d:7f:1a:c9:70:3a:16:e7:25:6c:5e:90:cb:82:ff: 0b:3b:a7:d7:2c:14:52:4b:92:84:c9:c3:e0:26:66: 6a:25:fe:3c:26:8e:ef:0c:8a:99:6a:8a:83:fc:7e: 4b:c1:fb:ed:f3:0c:1d:f8:7f:2e:9d:f1:8c:44:70: 94:fb:34:c3:ef:d1:72:69:1e:35:50:cb:71:8e:b3: 9a:bc:14:cd:e3:3f:4b:f0:af:5f:b1:97:d7:d0:ed: dc:a9:f9:1f:6e:dc:ac:bc:8e:47:e7:5a:ab:39:19: 8c:8a:4e:b1:c8:15:5d:9a:4f:7f:bf:fe:5c:56:c4: aa:74:5b:e3:1a:55:31:18:00:5f:2f:f6:a6:9a:c3: 74:c9:8c:b4:08:6c:fe:8e:ad:59:2f:e3:ad:e7:bd: 4c:25:b8:e4:67:4d:61:71:c4:24:63:2c:5e:2b:0e: 4b:d5:8d:49:ee:f6:42:8d:0f:bc:f3:9d:82:ef:7b: df:3e:2f:26:15:9c:92:b8:c2:f6:19:4c:be:30:64: 62:2c:04:ca:33:96:f5:c2:27:bb:09:94:98:4f:98: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:69:E6:79:C7:FD:3F:AB:70:3D:2E:FB:64:CE:44:27:DA:08:60:6D X509v3 Authority Key Identifier: keyid:40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.40.0/22 Signature Algorithm: sha256WithRSAEncryption d8:ec:34:b9:5f:d0:81:ca:2c:08:ca:2c:98:a7:31:14:40:e2: c7:f3:50:22:37:82:71:9b:50:aa:87:6a:b5:d6:59:24:46:ba: c3:d9:49:6b:69:c7:3b:df:17:4d:8a:31:86:e6:c7:c1:98:dd: c3:3b:02:fc:0f:31:ae:f8:14:09:52:f7:3e:4d:46:ae:aa:9e: ca:a7:57:f1:3c:d9:74:a5:1e:18:17:16:dc:cd:37:a3:2b:ec: 60:be:83:2e:9d:73:5b:42:5a:25:68:83:c9:f3:e5:e4:f6:07: eb:4f:c3:f9:26:9d:55:40:24:0a:44:b5:63:67:35:ca:f6:fd: c7:aa:72:2e:e8:c0:8d:82:75:5a:67:3d:da:44:21:ba:13:19: 21:16:ea:01:87:89:a7:14:4a:97:47:f7:e2:80:69:57:d3:39: 05:7f:5a:e9:c3:bd:24:b6:d5:99:d5:a3:74:5f:1c:fa:54:ab: ed:ff:70:ac:60:94:bd:a2:62:96:c2:ae:50:20:95:a1:17:63: 9f:ba:e5:7c:ec:ff:26:c3:97:c1:23:7b:98:54:79:0e:b6:e3: ae:d7:d9:41:e9:34:20:f7:8e:33:6b:77:a4:87:c5:ed:de:b6: 18:04:39:e5:89:9d:66:97:a8:24:f4:91:ca:88:12:60:53:60: 79:8f:85:f3 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUBtSaUCF6a4uEsYxXW/EGIoDmTRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBENUMzRjU1QUUwOENGMzBFNDY2ODQ0N0QxQzUxNjhB OTBFN0M3MjAeFw0yNjAxMDUxODI1MTZaFw0yNzAxMDQxODMwMTZaMDMxMTAvBgNV BAMTKDcwNjlFNjc5QzdGRDNGQUI3MDNEMkVGQjY0Q0U0NDI3REEwODYwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWn6JiYFAQZQOvhS1qjWmiCQp1 PRGZq2dJmED8l5gPBBdPzeux5bOgORbFDI1/GslwOhbnJWxekMuC/ws7p9csFFJL koTJw+AmZmol/jwmju8MiplqioP8fkvB++3zDB34fy6d8YxEcJT7NMPv0XJpHjVQ y3GOs5q8FM3jP0vwr1+xl9fQ7dyp+R9u3Ky8jkfnWqs5GYyKTrHIFV2aT3+//lxW xKp0W+MaVTEYAF8v9qaaw3TJjLQIbP6OrVkv463nvUwluORnTWFxxCRjLF4rDkvV jUnu9kKND7zznYLve98+LyYVnJK4wvYZTL4wZGIsBMozlvXCJ7sJlJhPmDSRAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUcGnmecf9P6twPS77ZM5EJ9oIYG0wHwYDVR0j BBgwFoAUQNXD9VrgjPMORmhEfRxRaKkOfHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5 bmQvMC80MEQ1QzNGNTVBRTA4Q0YzMEU0NjY4NDQ3RDFDNTE2OEE5MEU3QzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwRDVDM0Y1NUFFMDhDRjMw RTQ2Njg0NDdEMUM1MTY4QTkwRTdDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RVNko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzAv MzEzMzM4MmUzOTM5MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCimMoMA0GCSqGSIb3DQEBCwUAA4IBAQDY7DS5X9CB yiwIyiyYpzEUQOLH81AiN4Jxm1Cqh2q11lkkRrrD2Ulracc73xdNijGG5sfBmN3D OwL8DzGu+BQJUvc+TUauqp7Kp1fxPNl0pR4YFxbczTejK+xgvoMunXNbQlolaIPJ 8+Xk9gfrT8P5Jp1VQCQKRLVjZzXK9v3HqnIu6MCNgnVaZz3aRCG6ExkhFuoBh4mn FEqXR/figGlX0zkFf1rpw70kttWZ1aN0Xxz6VKvt/3CsYJS9omKWwq5QIJWhF2Of uuV87P8mw5fBI3uYVHkOtuOu19lB6TQg944za3ekh8Xt3rYYBDnliZ1ml6gk9JHK iBJgU2B5j4Xz -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:45 2026 by rpki-client