This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e20323632393037.roa File: 3136382e3232382e33362e302f32322d3234203d3e20323632393037.roa (raw, json) Hash identifier: maRjJOpI5/3SbU1Cx/Iiwg07ukpSHjVOrVENeXC4qcc= Subject key identifier: 33:DD:D7:BE:0D:38:E4:19:88:68:EE:77:23:3C:55:79:75:23:2A:E8 Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Certificate serial: 66795A20CE514EC2C39227847C72D9F26DC9110E Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e20323632393037.roa Signing time: Mon 19 Jan 2026 17:41:50 +0000 ROA not before: Mon 19 Jan 2026 17:36:50 +0000 ROA not after: Mon 18 Jan 2027 17:41:50 +0000 asID: 262907 IP address blocks: 168.228.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 18:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:79:5a:20:ce:51:4e:c2:c3:92:27:84:7c:72:d9:f2:6d:c9:11:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Validity Not Before: Jan 19 17:36:50 2026 GMT Not After : Jan 18 17:41:50 2027 GMT Subject: CN=33DDD7BE0D38E4198868EE77233C557975232AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:df:84:ce:fa:97:e9:0a:4b:0f:65:43:d4: 57:23:c0:a8:60:b3:29:18:a4:78:86:36:41:75:56: b6:be:0d:d1:78:70:de:01:ff:64:4e:55:06:8d:fc: 58:52:bc:03:fb:ef:3c:91:68:97:7e:85:c2:ab:83: 58:ae:b8:a9:54:68:65:e3:67:3b:9f:0a:02:54:5c: 69:53:aa:7d:a0:02:24:ff:0d:5b:4e:75:f8:1c:10: 7b:7c:bf:b6:a4:7e:11:8d:31:c6:1b:9d:8b:40:56: 47:d1:ac:84:ea:59:99:fe:f9:ef:3c:63:16:b0:4d: b8:6d:1a:bc:60:a7:82:42:ea:c2:06:61:29:c2:6f: 36:07:e6:84:4e:0a:d4:ba:c3:09:e5:1f:49:c6:c2: f8:1a:86:8d:87:30:50:18:9e:ee:70:ad:8a:58:1a: 60:91:16:07:69:b3:be:16:a1:f8:a5:67:1d:64:0c: 65:06:41:87:11:fa:ae:21:10:06:9a:f5:21:07:19: 0b:1f:f6:b8:07:30:00:6b:0f:22:30:95:c2:ae:1f: fb:7c:f6:c5:06:b5:b6:34:c4:2c:5d:63:5b:65:73: f0:da:af:26:26:f6:4e:fb:d1:3d:ab:e7:87:34:74: 63:d6:41:b7:0c:43:bd:f8:3e:a6:cb:2c:4b:09:8d: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:D7:BE:0D:38:E4:19:88:68:EE:77:23:3C:55:79:75:23:2A:E8 X509v3 Authority Key Identifier: keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e20323632393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.36.0/22 Signature Algorithm: sha256WithRSAEncryption 39:ba:70:bd:9c:32:d1:75:7a:d4:12:10:bb:5d:30:29:2f:ec: 8d:4c:72:ff:0f:ee:c5:7d:c8:7c:c1:50:ef:91:23:4c:66:90: ac:66:33:7a:ad:45:76:c6:8c:de:ab:d3:8d:c9:d6:2a:37:62: 29:ac:ec:dd:f3:0d:06:27:3e:6f:6b:72:24:4e:62:f6:74:52: a7:06:63:41:18:ae:87:ea:8c:74:6b:9f:29:25:e5:2b:cc:74: 25:9b:5b:38:78:10:81:45:c7:bb:11:55:dc:b5:a6:79:9a:2e: 4e:60:65:61:4e:3f:74:d7:1f:f0:08:57:68:85:25:33:bb:5c: dc:9f:d6:16:10:ae:0c:1a:00:d8:9e:dc:04:fb:02:1d:6a:d8: 5f:de:47:d0:db:c5:c3:2e:7a:cf:b0:59:d5:e9:cc:8b:c3:e2: 97:2c:ea:8c:3c:03:ac:ce:1a:6c:be:f5:a8:bf:37:38:65:f1: 65:4b:00:62:09:65:cc:d0:50:9e:ff:38:cb:0a:2f:94:1a:27: 72:da:6e:43:c0:aa:b0:d0:0a:48:99:7a:7e:0c:9a:b5:39:8b: 3a:86:ae:7e:77:5b:10:9c:bd:14:99:86:e6:3c:55:92:4f:38: ab:ff:97:de:9a:ac:e4:cf:86:f4:e7:23:fd:06:f7:2f:cd:0e: e4:2b:9f:d3 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUZnlaIM5RTsLDkieEfHLZ8m3JEQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5 MDkzODQ1ODAeFw0yNjAxMTkxNzM2NTBaFw0yNzAxMTgxNzQxNTBaMDMxMTAvBgNV BAMTKDMzREREN0JFMEQzOEU0MTk4ODY4RUU3NzIzM0M1NTc5NzUyMzJBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNRd+EzvqX6QpLD2VD1FcjwKhg sykYpHiGNkF1Vra+DdF4cN4B/2ROVQaN/FhSvAP77zyRaJd+hcKrg1iuuKlUaGXj ZzufCgJUXGlTqn2gAiT/DVtOdfgcEHt8v7akfhGNMcYbnYtAVkfRrITqWZn++e88 YxawTbhtGrxgp4JC6sIGYSnCbzYH5oROCtS6wwnlH0nGwvgaho2HMFAYnu5wrYpY GmCRFgdps74WofilZx1kDGUGQYcR+q4hEAaa9SEHGQsf9rgHMABrDyIwlcKuH/t8 9sUGtbY0xCxdY1tlc/DaryYm9k770T2r54c0dGPWQbcMQ734PqbLLEsJjSorAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUM93Xvg045BmIaO53IzxVeXUjKugwHwYDVR0j BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0 SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv MzEzNjM4MmUzMjMyMzgyZTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzIzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKo5CQwDQYJKoZIhvcNAQELBQADggEBADm6cL2c MtF1etQSELtdMCkv7I1Mcv8P7sV9yHzBUO+RI0xmkKxmM3qtRXbGjN6r043J1io3 Yims7N3zDQYnPm9rciROYvZ0UqcGY0EYrofqjHRrnykl5SvMdCWbWzh4EIFFx7sR Vdy1pnmaLk5gZWFOP3TXH/AIV2iFJTO7XNyf1hYQrgwaANie3AT7Ah1q2F/eR9Db xcMues+wWdXpzIvD4pcs6ow8A6zOGmy+9ai/Nzhl8WVLAGIJZczQUJ7/OMsKL5Qa J3LabkPAqrDQCkiZen4MmrU5izqGrn53WxCcvRSZhuY8VZJPOKv/l96arOTPhvTn I/0G9y/NDuQrn9M= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:41 2026 by rpki-client