This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
File: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (raw, json)
Hash identifier: kNcxoziUs2V/DZt4kc9ONX8Yibj7lteIZFVSevEydOw=
Subject key identifier: 1A:48:74:82:1E:6D:0F:E8:4D:DF:B0:DE:0D:75:F4:55:22:8B:0C:0E
Certificate issuer: /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial: 2EEB5394EF37DCBFE947CCD8146C74F3F5821F89
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
Signing time: Fri 02 Jan 2026 13:00:49 +0000
ROA not before: Fri 02 Jan 2026 12:55:49 +0000
ROA not after: Fri 01 Jan 2027 13:00:49 +0000
asID: 53048
IP address blocks: 132.255.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 19:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:eb:53:94:ef:37:dc:bf:e9:47:cc:d8:14:6c:74:f3:f5:82:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
Validity
Not Before: Jan 2 12:55:49 2026 GMT
Not After : Jan 1 13:00:49 2027 GMT
Subject: CN=1A4874821E6D0FE84DDFB0DE0D75F455228B0C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:71:13:7b:29:3e:59:fe:1b:ee:c9:36:87:
1f:27:49:fb:58:a3:76:7c:df:66:7b:ea:33:a5:ae:
b1:be:bb:9f:b8:4c:03:a5:e2:c1:2f:8c:ad:6b:5f:
a5:40:b6:be:f7:20:ec:88:37:d6:d0:3e:19:bc:0c:
38:fd:75:f1:e3:51:ea:93:f0:26:88:a0:4e:db:78:
60:0c:01:19:d8:95:1b:b8:17:ef:dc:5f:09:ff:e9:
30:b4:a0:a7:3a:50:ad:23:97:27:0d:68:e2:68:c2:
41:d6:90:66:5c:5d:7a:b9:ac:df:69:af:d1:17:e2:
98:01:43:dd:af:42:38:78:db:c6:93:8e:64:2a:93:
ca:8c:c6:e9:1c:a7:75:f1:e7:7e:a0:71:49:0a:3b:
b8:86:d6:be:8a:b2:01:4f:81:6f:9d:69:55:f1:fc:
c0:83:7a:48:89:37:df:3b:75:30:29:16:59:77:41:
f0:2e:ce:9e:49:fb:90:9c:22:cf:64:b6:fd:19:18:
77:db:b7:24:48:b3:21:1e:a5:74:a4:30:37:67:b5:
ef:25:10:39:fe:17:dd:9d:d2:e9:67:e5:d4:73:38:
9f:fa:af:6b:d2:d0:68:67:fb:c6:74:d2:10:76:46:
c3:23:e3:61:9a:48:4c:9f:59:73:7e:fd:35:4e:36:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:74:82:1E:6D:0F:E8:4D:DF:B0:DE:0D:75:F4:55:22:8B:0C:0E
X509v3 Authority Key Identifier:
keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:e3:ee:83:d2:cc:22:17:0d:3f:46:56:36:77:a1:4a:98:78:
88:c2:5f:23:5d:51:5c:b5:27:bc:10:af:2f:90:97:12:8b:f0:
90:fb:14:b8:de:8a:71:6e:c4:b3:f2:43:51:be:e2:72:f9:01:
df:d0:8d:62:94:d0:f2:7d:9d:16:d7:ab:29:4f:76:7a:bd:29:
ae:02:ab:c6:2d:1a:d3:ef:66:df:28:17:e9:0b:f9:57:b0:f1:
af:ee:a4:ce:87:09:f4:51:60:4a:71:27:3e:d5:95:be:db:cd:
c3:70:ec:8c:a7:0b:d9:7a:9d:f7:fd:37:2f:af:9a:e9:62:00:
3f:6c:b9:25:ea:ec:db:27:b7:af:9d:2a:2f:8b:19:bb:fc:f1:
85:71:c9:67:48:f0:e0:25:c3:ff:49:bc:fd:e6:d7:ba:47:ab:
ac:65:53:88:dd:65:b9:06:bf:89:a4:89:2a:ad:98:b9:79:1d:
d7:f3:f9:d5:fc:17:14:86:d5:e2:c2:d2:a3:0b:2f:24:ca:41:
ec:19:fe:1e:e9:4f:a9:b1:af:8b:a0:12:08:35:ae:f8:1b:6f:
7c:60:19:45:b2:12:b6:22:1d:42:8f:bf:22:59:3a:8b:86:04:
6a:05:29:0f:8a:8e:fb:7b:86:4e:25:d1:d6:ff:12:0d:e5:e0:
92:70:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:47:47 2026 by rpki-client