This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3134332e3230382e302e302f32322d3234203d3e20323638393535.roa File: 3134332e3230382e302e302f32322d3234203d3e20323638393535.roa (raw, json) Hash identifier: JXZTt6dvf8i1aIrxEgABoFIkDqjU/so8kwfCx3PgFck= Subject key identifier: 59:C8:76:2B:53:09:E9:C4:15:5D:B1:F2:5A:44:2D:EE:4C:3B:BA:94 Certificate issuer: /CN=9585286624B3FE02B7690BEE57E89C3FA5D4770E Certificate serial: 1F9D80F3AD39C920850B738ACCE599510E1B1145 Authority key identifier: 95:85:28:66:24:B3:FE:02:B7:69:0B:EE:57:E8:9C:3F:A5:D4:77:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer Subject info access: rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3134332e3230382e302e302f32322d3234203d3e20323638393535.roa Signing time: Tue 20 Jan 2026 21:31:13 +0000 ROA not before: Tue 20 Jan 2026 21:26:13 +0000 ROA not after: Tue 19 Jan 2027 21:31:13 +0000 asID: 268955 IP address blocks: 143.208.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.crl rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9d:80:f3:ad:39:c9:20:85:0b:73:8a:cc:e5:99:51:0e:1b:11:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9585286624B3FE02B7690BEE57E89C3FA5D4770E Validity Not Before: Jan 20 21:26:13 2026 GMT Not After : Jan 19 21:31:13 2027 GMT Subject: CN=59C8762B5309E9C4155DB1F25A442DEE4C3BBA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:9e:ce:61:fa:79:7e:b1:40:36:85:7e:de: f4:a4:d0:4c:1b:a5:d7:36:84:3c:65:af:41:d9:ff: 5d:b8:99:a1:33:5e:1a:16:1d:a1:14:27:f8:f5:1a: 80:86:83:ed:ba:96:41:0b:d3:6f:d0:d2:f4:1a:12: ea:2a:05:dd:a4:5e:7e:17:9a:dd:2d:93:57:a5:8d: e5:78:de:80:75:d2:fa:34:34:21:87:95:c9:a3:54: 59:eb:4a:12:81:f4:3e:63:3e:de:cd:53:2b:95:8e: 9f:c3:ec:57:51:db:f8:da:58:a5:66:bf:0b:ed:70: 1a:4c:3a:fc:68:76:31:9a:b3:3a:1a:4a:71:8e:32: 70:a8:14:bc:61:60:4c:ff:ee:39:0d:21:a0:0f:76: 95:b9:38:5d:dd:e9:4f:40:cc:38:4d:5d:00:b8:d1: fd:ce:e7:c4:17:4c:04:ec:d4:7c:86:8c:1b:1e:ed: 1c:65:e1:24:61:65:bc:97:34:6c:75:81:79:60:f7: 55:4f:94:0e:78:2b:61:2e:29:47:14:eb:d8:1d:48: a4:bb:e7:09:5b:71:ac:85:dd:63:56:99:06:02:10: f8:50:e9:65:74:01:db:f7:d4:95:53:94:28:ba:ff: 7a:7d:98:33:9e:4f:98:21:11:98:1e:25:af:9a:77: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C8:76:2B:53:09:E9:C4:15:5D:B1:F2:5A:44:2D:EE:4C:3B:BA:94 X509v3 Authority Key Identifier: keyid:95:85:28:66:24:B3:FE:02:B7:69:0B:EE:57:E8:9C:3F:A5:D4:77:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3134332e3230382e302e302f32322d3234203d3e20323638393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.0.0/22 Signature Algorithm: sha256WithRSAEncryption 06:d5:e1:86:11:37:76:74:47:fd:2a:d3:6d:5b:f6:4a:ac:28: 20:d6:5d:14:78:6d:75:fa:25:8e:a1:af:e0:55:bd:d9:d6:b9: 27:20:d4:e0:58:79:36:9d:d7:26:5e:55:48:da:6d:6a:44:c5: c3:ff:f2:6e:aa:7a:c2:c0:ca:cc:75:1f:29:b7:0c:66:99:a3: f3:21:77:ef:cf:a6:07:8a:58:77:00:d4:ae:8f:63:8a:2f:55: fa:53:21:ed:00:80:ad:17:42:c1:19:c2:ca:ea:74:53:87:35: a8:51:46:c1:91:76:22:65:d4:c6:0d:bf:00:39:bb:3e:e8:56: e4:72:12:49:7b:8a:7a:1b:06:ae:b9:1e:1a:99:83:b1:25:f7: ab:62:d0:1a:94:7e:40:74:2e:92:ae:e9:e2:a4:b1:d5:f6:ab: 18:20:11:c4:c7:d6:cc:ba:96:47:be:35:d0:52:14:d4:4c:e6: 22:a1:af:1d:c5:38:43:61:a4:9d:2d:db:83:8e:52:3c:5c:c5: d9:37:b7:f3:64:97:f8:be:18:6a:9b:93:42:46:6e:9e:b7:60: 62:f3:36:0e:e5:dd:08:68:a4:3a:85:42:20:23:a2:8a:98:5e: ae:e5:da:a0:36:80:2a:ee:20:0b:00:8a:69:ed:58:23:25:87: 3d:68:1d:49 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUH52A8605ySCFC3OKzOWZUQ4bEUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4NTI4NjYyNEIzRkUwMkI3NjkwQkVFNTdFODlDM0ZB NUQ0NzcwRTAeFw0yNjAxMjAyMTI2MTNaFw0yNzAxMTkyMTMxMTNaMDMxMTAvBgNV BAMTKDU5Qzg3NjJCNTMwOUU5QzQxNTVEQjFGMjVBNDQyREVFNEMzQkJBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Rp7OYfp5frFANoV+3vSk0Ewb pdc2hDxlr0HZ/124maEzXhoWHaEUJ/j1GoCGg+26lkEL02/Q0vQaEuoqBd2kXn4X mt0tk1eljeV43oB10vo0NCGHlcmjVFnrShKB9D5jPt7NUyuVjp/D7FdR2/jaWKVm vwvtcBpMOvxodjGaszoaSnGOMnCoFLxhYEz/7jkNIaAPdpW5OF3d6U9AzDhNXQC4 0f3O58QXTATs1HyGjBse7Rxl4SRhZbyXNGx1gXlg91VPlA54K2EuKUcU69gdSKS7 5wlbcayF3WNWmQYCEPhQ6WV0Adv31JVTlCi6/3p9mDOeT5ghEZgeJa+adxzpAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUWch2K1MJ6cQVXbHyWkQt7kw7upQwHwYDVR0j BBgwFoAUlYUoZiSz/gK3aQvuV+icP6XUdw4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9QRnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBL LzAvOTU4NTI4NjYyNEIzRkUwMkI3NjkwQkVFNTdFODlDM0ZBNUQ0NzcwRS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85NTg1Mjg2NjI0QjNGRTAyQjc2 OTBCRUU1N0U4OUMzRkE1RDQ3NzBFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q RnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBLLzAvMzEz NDMzMmUzMjMwMzgyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4Mzkz NTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCj9AAMA0GCSqGSIb3DQEBCwUAA4IBAQAG1eGGETd2dEf9 KtNtW/ZKrCgg1l0UeG11+iWOoa/gVb3Z1rknINTgWHk2ndcmXlVI2m1qRMXD//Ju qnrCwMrMdR8ptwxmmaPzIXfvz6YHilh3ANSuj2OKL1X6UyHtAICtF0LBGcLK6nRT hzWoUUbBkXYiZdTGDb8AObs+6FbkchJJe4p6GwauuR4amYOxJferYtAalH5AdC6S runipLHV9qsYIBHEx9bMupZHvjXQUhTUTOYioa8dxThDYaSdLduDjlI8XMXZN7fz ZJf4vhhqm5NCRm6et2Bi8zYO5d0IaKQ6hUIgI6KKmF6u5dqgNoAq7iALAIpp7Vgj JYc9aB1J -----END CERTIFICATE-----Generated at Mon Jan 26 06:01:08 2026 by rpki-client