This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa File: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (raw, json) Hash identifier: Xcl7ELeDj4h99CaUU+5OOmBPBOWnkxYpDrZH5lL4u5A= Subject key identifier: C1:14:6C:2A:9A:0D:99:C8:24:59:1B:D0:7F:0D:38:DE:F6:27:4B:9D Certificate issuer: /CN=0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2 Certificate serial: 03F4EADCA08F9D0BB896C0E32F15A2F9B4E56F51 Authority key identifier: 0E:23:E7:68:EE:BE:EF:E7:65:FF:5C:C9:51:C3:6D:36:F2:7C:F2:C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa Signing time: Tue 30 Dec 2025 16:37:48 +0000 ROA not before: Tue 30 Dec 2025 16:32:48 +0000 ROA not after: Tue 29 Dec 2026 16:37:48 +0000 asID: 266343 IP address blocks: 170.239.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2.crl rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 01:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f4:ea:dc:a0:8f:9d:0b:b8:96:c0:e3:2f:15:a2:f9:b4:e5:6f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2 Validity Not Before: Dec 30 16:32:48 2025 GMT Not After : Dec 29 16:37:48 2026 GMT Subject: CN=C1146C2A9A0D99C824591BD07F0D38DEF6274B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:16:93:f9:e9:2a:7a:12:cc:ff:f9:5e:a5: cb:56:af:e1:85:9e:43:10:d9:5a:81:88:ea:46:52: 61:62:3d:59:d1:c8:70:41:a5:23:d9:08:c4:ff:26: 5e:11:18:e6:d2:46:4f:78:16:08:2b:52:8b:10:2c: 75:b3:64:b4:a0:50:55:49:49:60:19:fb:d6:f5:92: 3d:48:fb:f9:32:42:86:76:97:0c:c1:42:63:d7:c7: 4b:fd:fa:fe:4e:9e:f6:30:48:61:d0:e1:c2:42:94: 4c:16:50:3a:ca:e2:28:f8:bf:ef:b2:5f:dd:a1:ca: 47:39:78:f7:22:6d:1d:a9:d5:07:28:69:df:50:f8: 61:c9:4e:61:67:6d:b9:f0:7f:bf:cc:e1:09:f9:97: bf:ef:7b:01:73:be:c9:da:15:29:d5:ba:7b:28:73: 9a:7a:ed:c9:f7:7c:30:1d:36:dd:05:24:ed:9b:02: 2b:fc:7e:a8:28:16:ba:9d:79:0f:60:47:95:7d:60: 5c:f7:e0:6f:18:92:d0:a8:10:7b:99:4d:53:67:c4: 04:a0:a6:f6:22:23:76:dc:95:d5:ef:53:77:16:b1: c4:ef:ff:3c:f9:4c:6b:e0:0b:c7:1d:f2:de:1f:2d: fd:4d:71:a9:de:b8:0f:d1:13:f2:e5:0a:26:cd:d7: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:14:6C:2A:9A:0D:99:C8:24:59:1B:D0:7F:0D:38:DE:F6:27:4B:9D X509v3 Authority Key Identifier: keyid:0E:23:E7:68:EE:BE:EF:E7:65:FF:5C:C9:51:C3:6D:36:F2:7C:F2:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E23E768EEBEEFE765FF5CC951C36D36F27CF2C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.239.4.0/22 Signature Algorithm: sha256WithRSAEncryption e8:74:e6:f6:b8:12:1e:f1:66:9b:16:2f:01:ff:51:31:87:1e: 26:49:e8:96:ad:c2:bd:7d:f0:03:6f:2d:4d:ee:43:6b:d0:2b: d2:52:a5:85:ed:f2:37:95:01:4f:1c:4c:6c:b8:e4:93:f6:14: 4c:c7:67:11:c4:a1:f6:c1:89:26:3b:28:72:0d:a7:c3:2a:ad: b6:b3:2e:48:9d:8a:4b:31:6d:45:5f:6a:2b:e2:59:06:b4:07: cf:53:5b:7b:56:ce:73:a7:18:6a:72:ae:84:5a:cc:71:14:b3: 13:84:8b:07:28:ae:a1:5f:00:0d:0a:e5:10:02:88:5b:9c:82: db:63:42:59:51:26:a7:82:7f:32:cf:da:33:94:41:93:09:1a: df:ae:10:47:76:ae:a6:cd:96:41:56:b3:4f:5d:27:74:fe:e3: e9:69:2c:91:16:31:98:ec:54:f9:12:a7:85:c4:e9:24:89:a9: 70:54:65:cc:96:3d:77:76:58:a5:e5:1d:61:90:81:26:71:b7: f9:83:cd:c7:83:83:83:4c:8d:9c:42:60:c6:aa:28:86:0f:8d: 39:d7:43:4d:e1:74:f3:d3:91:0a:8d:1f:0b:a5:79:50:9a:dd: 31:9a:d5:0c:14:ae:da:d9:80:cb:f5:e7:09:06:79:bd:cc:6c: 39:00:4f:bd -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUA/Tq3KCPnQu4lsDjLxWi+bTlb1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyM0U3NjhFRUJFRUZFNzY1RkY1Q0M5NTFDMzZEMzZG MjdDRjJDMjAeFw0yNTEyMzAxNjMyNDhaFw0yNjEyMjkxNjM3NDhaMDMxMTAvBgNV BAMTKEMxMTQ2QzJBOUEwRDk5QzgyNDU5MUJEMDdGMEQzOERFRjYyNzRCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nxaT+ekqehLM//lepctWr+GF nkMQ2VqBiOpGUmFiPVnRyHBBpSPZCMT/Jl4RGObSRk94FggrUosQLHWzZLSgUFVJ SWAZ+9b1kj1I+/kyQoZ2lwzBQmPXx0v9+v5OnvYwSGHQ4cJClEwWUDrK4ij4v++y X92hykc5ePcibR2p1Qcoad9Q+GHJTmFnbbnwf7/M4Qn5l7/vewFzvsnaFSnVunso c5p67cn3fDAdNt0FJO2bAiv8fqgoFrqdeQ9gR5V9YFz34G8YktCoEHuZTVNnxASg pvYiI3bcldXvU3cWscTv/zz5TGvgC8cd8t4fLf1NcaneuA/RE/LlCibN19rPAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUwRRsKpoNmcgkWRvQfw043vYnS50wHwYDVR0j BBgwFoAUDiPnaO6+7+dl/1zJUcNtNvJ88sIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl U2UvMC8wRTIzRTc2OEVFQkVFRkU3NjVGRjVDQzk1MUMzNkQzNkYyN0NGMkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFMjNFNzY4RUVCRUVGRTc2 NUZGNUNDOTUxQzM2RDM2RjI3Q0YyQzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VLTU42Vm1DbkozYW1kOHJ3Ulc5ZkdaWmdCSzlkQm1xYnpkQndtbWdwZVNlLzAv MzEzNzMwMmUzMjMzMzkyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2 MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqu8EMA0GCSqGSIb3DQEBCwUAA4IBAQDodOb2uBIe 8WabFi8B/1Exhx4mSeiWrcK9ffADby1N7kNr0CvSUqWF7fI3lQFPHExsuOST9hRM x2cRxKH2wYkmOyhyDafDKq22sy5InYpLMW1FX2or4lkGtAfPU1t7Vs5zpxhqcq6E WsxxFLMThIsHKK6hXwANCuUQAohbnILbY0JZUSangn8yz9ozlEGTCRrfrhBHdq6m zZZBVrNPXSd0/uPpaSyRFjGY7FT5EqeFxOkkialwVGXMlj13dlil5R1hkIEmcbf5 g83Hg4ODTI2cQmDGqiiGD40510NN4XTz05EKjR8LpXlQmt0xmtUMFK7a2YDL9ecJ Bnm9zGw5AE+9 -----END CERTIFICATE-----Generated at Mon Jan 26 04:27:23 2026 by rpki-client