This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3130382e33322e302f32322d3234203d3e20323632393037.roa File: 3133312e3130382e33322e302f32322d3234203d3e20323632393037.roa (raw, json) Hash identifier: 3qH/SEqpwKeNt3mX5ZRq1uNOTPIexgnIUccRG/rT7hM= Subject key identifier: D0:F7:2F:D7:98:2E:C5:C7:35:B4:A2:43:B8:41:03:09:81:18:A7:8E Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Certificate serial: 5D95B68E97E39793C28D5F069A1B48F6BD868AC9 Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3130382e33322e302f32322d3234203d3e20323632393037.roa Signing time: Mon 19 Jan 2026 17:32:51 +0000 ROA not before: Mon 19 Jan 2026 17:27:51 +0000 ROA not after: Mon 18 Jan 2027 17:32:51 +0000 asID: 262907 IP address blocks: 131.108.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 18:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:b6:8e:97:e3:97:93:c2:8d:5f:06:9a:1b:48:f6:bd:86:8a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Validity Not Before: Jan 19 17:27:51 2026 GMT Not After : Jan 18 17:32:51 2027 GMT Subject: CN=D0F72FD7982EC5C735B4A243B84103098118A78E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:9f:d1:6b:f8:d3:ff:44:7c:7b:3b:73:00: 95:dc:da:c0:c6:e3:46:6c:cd:6d:3b:52:7c:75:c6: 7b:4c:3e:3c:67:f3:8b:9b:4f:fb:9e:1d:5b:ac:d8: 76:93:86:b8:87:e2:1a:14:d9:f0:18:1a:f4:41:04: a7:bf:2c:38:6e:02:53:64:57:b1:3d:7b:6b:eb:a0: 7b:8d:6b:c1:97:35:c1:00:fa:cb:f6:8b:b2:31:37: 9b:e2:93:e5:09:8b:0a:c2:af:aa:81:20:9d:dc:47: 8e:b6:c0:43:6c:4e:1b:e9:5b:22:cb:95:5f:07:d3: 29:73:9d:31:78:53:eb:f1:f0:78:55:70:56:a2:75: 9b:a9:15:bf:c1:cf:b8:d4:3a:95:41:61:9d:78:87: 8f:2c:32:37:81:5e:2a:d2:f4:44:86:32:bd:bd:19: 04:13:cd:a4:33:d4:59:70:8e:5b:2d:c9:39:a9:ab: fb:46:47:1c:90:4e:be:c8:a2:43:61:1f:e4:5d:83: e1:29:6a:c0:cd:00:2c:84:89:e2:a8:d8:30:e7:83: 02:d2:08:7e:8d:c8:8f:fd:84:de:0d:f1:14:3d:df: 38:18:c4:1a:0d:7c:21:04:b7:c9:68:20:cf:75:fd: 98:3d:a4:33:a2:e5:e7:ab:c9:74:73:4b:c1:3a:62: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F7:2F:D7:98:2E:C5:C7:35:B4:A2:43:B8:41:03:09:81:18:A7:8E X509v3 Authority Key Identifier: keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3130382e33322e302f32322d3234203d3e20323632393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.32.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:60:54:48:29:f2:5f:af:af:3b:70:e1:83:51:d7:94:2e:fe: 67:21:04:e7:c8:86:50:1c:aa:23:6c:a1:bd:18:a8:d0:71:6f: c4:80:a1:a7:bd:fd:f5:da:87:70:ef:84:b5:cc:b5:2e:70:43: 0f:37:ad:35:01:c4:d8:d4:c6:b6:c1:05:6d:a2:03:df:50:d8: 6e:4c:b3:6e:24:1f:63:39:a0:72:92:7c:ff:c4:88:ea:cf:fc: d7:ef:8a:88:05:c5:64:1d:e7:81:1c:ba:4f:22:d4:89:cd:70: 27:f9:cb:c0:14:57:b3:df:5f:c2:68:57:72:a4:7e:7a:33:84: 01:f6:2c:c2:28:cf:1a:0b:47:06:29:0c:99:bc:7e:49:2c:89: 2a:2f:e0:3b:4d:73:8b:f2:83:43:a3:3b:06:ea:8c:19:40:01: 17:d1:d4:9d:46:3e:17:24:73:c2:27:b4:cb:d1:a2:5b:38:ec: 4b:ed:32:f5:ed:fc:11:9c:80:19:5c:cb:10:e9:0a:3d:1e:aa: a2:9d:65:70:55:08:e0:19:57:3a:d6:66:47:7d:6c:7e:f8:ce: f4:a9:6d:cd:02:0b:bb:17:92:57:29:66:06:45:eb:f6:d1:42: 1a:ee:74:e1:bd:f8:c3:3a:45:3f:20:f2:98:22:d3:bb:31:36: cc:c0:d9:a6 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUXZW2jpfjl5PCjV8GmhtI9r2GiskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5 MDkzODQ1ODAeFw0yNjAxMTkxNzI3NTFaFw0yNzAxMTgxNzMyNTFaMDMxMTAvBgNV BAMTKEQwRjcyRkQ3OTgyRUM1QzczNUI0QTI0M0I4NDEwMzA5ODExOEE3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgop/Ra/jT/0R8eztzAJXc2sDG 40ZszW07Unx1xntMPjxn84ubT/ueHVus2HaThriH4hoU2fAYGvRBBKe/LDhuAlNk V7E9e2vroHuNa8GXNcEA+sv2i7IxN5vik+UJiwrCr6qBIJ3cR462wENsThvpWyLL lV8H0ylznTF4U+vx8HhVcFaidZupFb/Bz7jUOpVBYZ14h48sMjeBXirS9ESGMr29 GQQTzaQz1FlwjlstyTmpq/tGRxyQTr7IokNhH+Rdg+EpasDNACyEieKo2DDngwLS CH6NyI/9hN4N8RQ93zgYxBoNfCEEt8loIM91/Zg9pDOi5eeryXRzS8E6YmP7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU0Pcv15guxcc1tKJDuEEDCYEYp44wHwYDVR0j BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0 SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv MzEzMzMxMmUzMTMwMzgyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzIzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKDbCAwDQYJKoZIhvcNAQELBQADggEBABtgVEgp 8l+vrztw4YNR15Qu/mchBOfIhlAcqiNsob0YqNBxb8SAoae9/fXah3DvhLXMtS5w Qw83rTUBxNjUxrbBBW2iA99Q2G5Ms24kH2M5oHKSfP/EiOrP/NfviogFxWQd54Ec uk8i1InNcCf5y8AUV7PfX8JoV3KkfnozhAH2LMIozxoLRwYpDJm8fkksiSov4DtN c4vyg0OjOwbqjBlAARfR1J1GPhckc8IntMvRols47EvtMvXt/BGcgBlcyxDpCj0e qqKdZXBVCOAZVzrWZkd9bH74zvSpbc0CC7sXklcpZgZF6/bRQhrudOG9+MM6RT8g 8pgi07sxNszA2aY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:39 2026 by rpki-client