This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
File: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (raw, json)
Hash identifier: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=
Subject key identifier: E9:03:C6:0B:BC:FE:B7:DF:72:61:B4:B9:C8:7F:0D:DC:27:A3:C5:7D
Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
Certificate serial: 227C5ED91A5802515EE2FD465476C5E5ED745EF0
Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
Signing time: Fri 16 Jan 2026 15:45:36 +0000
ROA not before: Fri 16 Jan 2026 15:40:36 +0000
ROA not after: Fri 15 Jan 2027 15:45:36 +0000
asID: 266304
IP address blocks: 170.79.200.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl
rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 21:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7c:5e:d9:1a:58:02:51:5e:e2:fd:46:54:76:c5:e5:ed:74:5e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
Validity
Not Before: Jan 16 15:40:36 2026 GMT
Not After : Jan 15 15:45:36 2027 GMT
Subject: CN=E903C60BBCFEB7DF7261B4B9C87F0DDC27A3C57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:67:4a:35:60:06:a4:f7:37:34:3e:a8:3c:
26:df:73:e0:49:00:af:1d:dd:fc:b0:f1:b4:15:a7:
0e:cb:2c:27:d0:00:8d:55:6e:5c:6e:45:f4:88:fc:
dd:f9:7c:07:33:bc:40:5f:a6:49:f2:66:ad:ac:58:
82:83:19:fe:2b:01:85:ef:05:32:88:4b:90:35:1c:
89:7d:71:a7:b9:34:0c:8b:11:95:19:0a:19:1e:5c:
be:74:01:40:a8:c1:13:fc:3a:01:d6:e1:bd:c3:7a:
3b:32:28:3a:31:81:83:d4:9f:4e:21:62:05:92:c6:
fe:59:8c:38:d1:61:9f:55:d5:8d:b3:e6:cc:a6:a7:
c6:09:83:c4:27:75:92:b6:e4:01:99:4f:c0:d9:9c:
e8:3c:ff:c7:cd:32:b2:65:13:85:b4:34:62:15:e6:
23:c1:bd:78:d7:ba:04:ee:59:8b:38:a9:46:7c:82:
3f:ea:5f:07:46:7a:f2:71:ee:21:32:09:bc:fa:fd:
47:87:8c:28:a7:50:79:ad:19:19:5c:e7:a1:1b:a0:
95:3b:00:78:71:a6:90:0e:66:0c:69:d2:bc:de:6f:
43:35:ee:e9:e1:4e:f4:46:c7:70:6f:03:69:13:73:
59:40:d3:45:ea:94:32:23:40:23:b2:dd:eb:55:d8:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:C6:0B:BC:FE:B7:DF:72:61:B4:B9:C8:7F:0D:DC:27:A3:C5:7D
X509v3 Authority Key Identifier:
keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
99:12:bf:ce:c0:71:aa:52:42:a0:92:eb:ac:89:65:c1:34:50:
2b:b4:ec:41:98:6c:b8:85:57:1f:de:12:2c:ab:24:58:73:97:
57:d4:6a:73:f5:a3:11:3e:a7:84:e2:81:5f:2e:63:62:17:7b:
2e:a9:47:a8:de:60:8e:ba:6a:7c:a4:b3:57:e0:77:a2:b1:70:
6d:bd:87:f6:46:5b:0f:b7:ca:3a:ff:fc:c2:39:99:9f:aa:fc:
f2:10:0e:3d:10:eb:48:4b:02:21:4c:46:f4:3c:2c:89:e3:39:
fb:42:ff:8a:b7:a6:87:5a:04:37:ad:5d:b7:9b:df:31:f6:94:
64:75:51:45:b3:97:41:b5:81:37:c7:33:79:d7:26:d3:21:c2:
61:eb:3c:0a:ef:13:ce:80:1d:16:eb:ad:37:17:c9:0b:15:77:
7d:58:fc:46:4b:67:fb:1f:9c:74:b9:62:ea:e4:03:98:1e:52:
ce:0f:0b:7f:de:ae:49:19:b5:cd:ac:64:ec:61:6e:38:ca:5b:
c2:45:10:e0:d7:1e:c8:f0:03:37:23:bb:a9:19:db:da:7b:f6:
bd:f2:05:c0:38:3e:4f:be:38:59:78:41:2d:5b:2d:4d:9a:fb:
74:55:9f:f8:e3:66:00:fd:7f:0f:f3:f9:a0:15:19:3b:ba:4b:
af:b9:e0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:44 2026 by rpki-client