This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38372e34302e302f32322d3234203d3e203532353733.roa
File: 3137372e38372e34302e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier: rYXnhykz4zFhBfc2cFPzzG++mKFT+S5ia4XbQ62RY48=
Subject key identifier: 7C:E6:6F:35:28:0B:AB:2C:D1:C7:E3:5A:A1:34:15:86:BA:92:CF:E7
Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial: 32BC7550229AB8237608278BB7E4BB2C90C76333
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38372e34302e302f32322d3234203d3e203532353733.roa
Signing time: Wed 21 Jan 2026 13:22:54 +0000
ROA not before: Wed 21 Jan 2026 13:17:54 +0000
ROA not after: Wed 20 Jan 2027 13:22:54 +0000
asID: 52573
IP address blocks: 177.87.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bc:75:50:22:9a:b8:23:76:08:27:8b:b7:e4:bb:2c:90:c7:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Validity
Not Before: Jan 21 13:17:54 2026 GMT
Not After : Jan 20 13:22:54 2027 GMT
Subject: CN=7CE66F35280BAB2CD1C7E35AA1341586BA92CFE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:b9:0a:1f:ab:3e:92:12:9c:e4:ac:f3:ad:
7e:86:12:17:35:61:e5:57:77:29:b7:cc:5c:51:fd:
f3:52:b0:f5:c9:ac:15:27:93:5d:a7:99:6e:81:fe:
4c:e1:a1:6e:37:4e:43:40:00:36:14:66:01:66:4a:
68:c6:d4:00:1d:e4:0e:60:56:df:36:dd:94:7a:09:
65:30:29:62:63:cd:c1:ff:c0:81:8a:c0:25:50:67:
54:a8:c8:0e:2d:8a:31:ef:96:9a:3b:c1:58:6b:99:
96:7e:a1:6b:5e:bd:b8:58:d8:af:ca:7c:62:f0:77:
21:5f:75:92:19:d7:74:87:f2:90:ab:e7:05:8d:d8:
99:dc:c9:aa:73:15:f0:fa:5c:15:58:39:54:df:13:
26:05:62:f7:d9:46:bb:90:1e:23:21:f4:70:3b:0a:
a9:a7:24:71:c5:d0:ac:63:81:e3:d0:f7:77:51:f8:
16:94:c9:58:f0:a8:16:7a:7a:10:d0:b0:2a:86:f9:
3e:e3:56:3e:e4:02:b6:a5:3a:98:96:38:22:8d:fa:
9d:da:33:4a:7f:7f:ee:4f:b4:58:b8:17:07:40:d9:
03:8b:a3:7d:79:1f:a4:e3:4e:29:7f:4d:c8:44:00:
20:c6:cc:b5:51:08:73:76:50:41:55:3f:38:67:09:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E6:6F:35:28:0B:AB:2C:D1:C7:E3:5A:A1:34:15:86:BA:92:CF:E7
X509v3 Authority Key Identifier:
keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38372e34302e302f32322d3234203d3e203532353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.40.0/22
Signature Algorithm: sha256WithRSAEncryption
95:27:90:7d:42:a3:5f:ff:6c:46:3e:d8:ee:4b:41:f0:f2:63:
4d:87:bc:6b:b5:af:ce:0f:ae:62:65:74:f6:c7:f7:55:31:ac:
9b:76:1f:a7:a9:56:d3:e3:46:aa:49:31:02:91:ea:a3:d9:fb:
70:ea:cf:53:cb:4d:95:a0:8c:fe:3b:45:dd:15:53:99:f9:51:
ea:89:b5:82:ef:c5:25:f6:0c:50:c4:7e:e2:1a:0a:19:b3:c8:
33:2b:c3:27:89:ee:a2:0b:7f:7b:4e:99:13:ad:60:04:43:2d:
98:f2:da:b8:9a:11:f1:26:f9:97:d8:e6:a4:10:e4:93:9c:16:
79:c3:69:d0:75:e6:a9:26:4a:ee:a4:ea:7a:06:06:db:b4:3a:
81:48:51:80:47:a6:a0:89:33:33:1a:cb:b4:07:46:8f:7a:e0:
46:01:14:66:d1:ad:6d:34:5d:74:5a:89:77:62:1a:9b:0c:b4:
a1:69:a1:8f:b9:16:a1:7d:69:c0:76:f7:9b:f3:b2:43:af:20:
20:29:5e:ca:97:62:1c:17:8b:2f:56:6f:28:67:4b:9d:d7:e7:
a7:9e:9d:9b:66:7c:26:af:65:3e:8d:bd:8c:89:ca:56:89:46:
4f:22:58:1b:f4:d3:b6:f7:c8:5d:e2:4e:8c:05:d6:ea:f2:9e:
20:85:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:45:44 2026 by rpki-client