This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32342d3234203d3e203631383233.roa File: 3230312e3232322e32342e302f32342d3234203d3e203631383233.roa (raw, json) Hash identifier: MFj2Y8vN35UbFz/c4cSx/WpIcJn650ZPq1l2J6Fv7LU= Subject key identifier: 4A:2B:7E:23:DB:F6:AD:9E:8A:AD:B5:C7:AA:8E:2A:0A:B8:67:72:C7 Certificate issuer: /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D Certificate serial: 430A37D372A619A267974AAEDB7A3512A17CB462 Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer Subject info access: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32342d3234203d3e203631383233.roa Signing time: Fri 09 Jan 2026 19:17:36 +0000 ROA not before: Fri 09 Jan 2026 19:12:36 +0000 ROA not after: Fri 08 Jan 2027 19:17:36 +0000 asID: 61823 IP address blocks: 201.222.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 09:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0a:37:d3:72:a6:19:a2:67:97:4a:ae:db:7a:35:12:a1:7c:b4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D Validity Not Before: Jan 9 19:12:36 2026 GMT Not After : Jan 8 19:17:36 2027 GMT Subject: CN=4A2B7E23DBF6AD9E8AADB5C7AA8E2A0AB86772C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:ed:df:1f:ee:b5:56:fc:65:7d:85:cc:65: 80:3b:4f:58:6c:63:99:2f:de:f7:ce:f7:6d:c8:78: b9:4e:7f:8f:db:2f:0e:e4:90:b5:75:4d:71:19:cd: c4:dd:ef:eb:37:bd:6b:11:69:99:70:87:4a:84:54: e0:e9:c0:d8:21:e8:6a:10:1a:e3:5b:22:66:b1:b3: 69:50:2a:85:2a:b9:44:3f:df:10:5c:18:81:7e:25: 75:bf:9e:e8:3e:18:ec:c5:3c:fd:5f:38:87:a4:c8: 67:cb:69:ee:39:34:88:e8:91:f2:24:db:eb:1d:91: 83:0c:5a:f9:ad:5d:d6:b8:66:11:0b:44:82:b8:56: b5:5c:5f:64:2f:4b:62:f6:ee:30:48:3c:41:ae:5d: 25:34:3a:61:be:fd:c5:4d:3d:3f:8e:eb:0c:70:69: ba:60:52:24:53:e6:23:be:18:d2:71:1e:64:25:15: de:18:23:ce:3c:f6:b1:c6:37:6f:6e:71:91:d3:42: b4:8d:df:73:7c:1c:35:b3:d7:e4:38:72:68:57:0b: 31:4e:e0:58:98:46:b6:4f:c3:f7:82:ca:9e:1e:4b: 91:0c:7a:f3:d3:00:3c:a0:0a:42:ff:83:9c:d9:73: 59:c7:37:1d:1c:75:77:19:92:a6:1c:ac:92:bb:30: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2B:7E:23:DB:F6:AD:9E:8A:AD:B5:C7:AA:8E:2A:0A:B8:67:72:C7 X509v3 Authority Key Identifier: keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32342d3234203d3e203631383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.222.24.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ef:75:ba:21:8e:88:55:90:28:0a:87:10:65:6e:d1:5a:38: d7:a8:68:92:ee:60:d3:72:83:40:6b:74:38:36:b1:45:a3:de: f9:ff:2d:33:e5:62:85:bd:95:83:49:41:d0:58:b3:2e:4d:7a: e8:c4:7b:e0:f2:fa:d0:7b:d2:c2:47:64:4f:f9:40:7b:f4:c2: f3:96:cf:9d:f0:6c:ff:dd:1d:d8:0f:b8:87:d8:73:d4:75:46: 12:3d:20:6b:2f:7a:bd:ea:2c:07:52:76:1e:9a:f9:74:5d:f6: 14:bc:20:3d:27:9a:8e:da:32:28:1c:aa:ab:28:7b:a7:69:4c: d0:10:3d:2d:66:e6:7d:05:74:8b:0f:cc:54:24:b1:eb:78:f2: 9e:89:38:b1:da:cb:26:b3:c6:00:3f:de:fe:45:01:34:9b:26: a5:7c:e6:34:d8:f0:7d:30:6d:64:0d:7d:8e:91:96:5b:6f:70: 1e:ac:23:25:0b:4c:de:93:94:0b:fa:99:64:e5:fa:ac:91:ed: 02:66:9a:fc:34:8c:7a:d2:a1:81:27:bc:e2:2b:0e:99:0e:66: 30:a4:75:12:cf:ef:b7:0a:ef:d4:90:c6:31:03:e3:6b:52:10: 12:59:9b:37:dd:3d:3c:85:41:3e:a1:a5:b5:27:92:a2:d6:e4: db:6e:b0:00 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUQwo303KmGaJnl0qu23o1EqF8tGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwMzU2RkEwRjcyMUQ5QTI0NDlBNzVGNjcyQTIzREJG OTFEQTc5RDAeFw0yNjAxMDkxOTEyMzZaFw0yNzAxMDgxOTE3MzZaMDMxMTAvBgNV BAMTKDRBMkI3RTIzREJGNkFEOUU4QUFEQjVDN0FBOEUyQTBBQjg2NzcyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYoe3fH+61VvxlfYXMZYA7T1hs Y5kv3vfO923IeLlOf4/bLw7kkLV1TXEZzcTd7+s3vWsRaZlwh0qEVODpwNgh6GoQ GuNbImaxs2lQKoUquUQ/3xBcGIF+JXW/nug+GOzFPP1fOIekyGfLae45NIjokfIk 2+sdkYMMWvmtXda4ZhELRIK4VrVcX2QvS2L27jBIPEGuXSU0OmG+/cVNPT+O6wxw abpgUiRT5iO+GNJxHmQlFd4YI8489rHGN29ucZHTQrSN33N8HDWz1+Q4cmhXCzFO 4FiYRrZPw/eCyp4eS5EMevPTADygCkL/g5zZc1nHNx0cdXcZkqYcrJK7MOC9AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUSit+I9v2rZ6KrbXHqo4qCrhncscwHwYDVR0j BBgwFoAUCQNW+g9yHZokSadfZyoj2/kdp50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEM0M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNY alovMC8wOTAzNTZGQTBGNzIxRDlBMjQ0OUE3NUY2NzJBMjNEQkY5MURBNzlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5MDM1NkZBMEY3MjFEOUEy NDQ5QTc1RjY3MkEyM0RCRjkxREE3OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hDNDNQVmllem4zdldSZFAxNmtGelJMMnRjenFISjFTUFJIOFFQV05jWGpaLzAv MzIzMDMxMmUzMjMyMzIyZTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx MzgzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyd4YMA0GCSqGSIb3DQEBCwUAA4IBAQA+73W6IY6I VZAoCocQZW7RWjjXqGiS7mDTcoNAa3Q4NrFFo975/y0z5WKFvZWDSUHQWLMuTXro xHvg8vrQe9LCR2RP+UB79MLzls+d8Gz/3R3YD7iH2HPUdUYSPSBrL3q96iwHUnYe mvl0XfYUvCA9J5qO2jIoHKqrKHunaUzQED0tZuZ9BXSLD8xUJLHrePKeiTix2ssm s8YAP97+RQE0myalfOY02PB9MG1kDX2OkZZbb3AerCMlC0zek5QL+plk5fqske0C Zpr8NIx60qGBJ7ziKw6ZDmYwpHUSz++3Cu/UkMYxA+NrUhASWZs33T08hUE+oaW1 J5Ki1uTbbrAA -----END CERTIFICATE-----Generated at Mon Jan 26 01:24:48 2026 by rpki-client