This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
File: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (raw, json)
Hash identifier: Mor/AX9x3PD93JwVYU649U4lY58zvYUpWPLIEVgiRAo=
Subject key identifier: A2:A4:14:9A:08:06:2D:1D:59:64:12:B3:85:BE:39:94:7C:5A:56:A3
Certificate issuer: /CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
Certificate serial: 61D417964B18AE2A7B234E659C8649C70CABFB60
Authority key identifier: 2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
Signing time: Sun 18 Jan 2026 05:54:26 +0000
ROA not before: Sun 18 Jan 2026 05:49:26 +0000
ROA not after: Sun 17 Jan 2027 05:54:26 +0000
asID: 267492
IP address blocks: 201.182.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl
rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 16:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d4:17:96:4b:18:ae:2a:7b:23:4e:65:9c:86:49:c7:0c:ab:fb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
Validity
Not Before: Jan 18 05:49:26 2026 GMT
Not After : Jan 17 05:54:26 2027 GMT
Subject: CN=A2A4149A08062D1D596412B385BE39947C5A56A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:8b:22:d7:15:6a:c4:15:59:e5:d2:4d:fa:
1d:21:20:0b:bc:56:63:88:9e:f9:a0:80:4a:74:5f:
c3:41:24:a2:5c:30:84:00:a6:00:2f:e9:83:7b:0a:
06:7e:d3:45:1d:46:f0:73:e7:d0:86:ce:f8:a8:17:
70:00:47:a3:6f:a3:4d:76:88:b6:f1:59:49:39:53:
02:3b:05:68:12:72:a3:e1:54:ef:c2:12:69:96:9f:
43:88:05:c6:ec:54:5b:8f:83:3b:78:39:30:4e:97:
eb:76:9e:88:18:34:cd:f2:c2:de:c7:54:83:c0:79:
74:b5:89:86:60:4b:bc:72:d2:2e:92:b4:8c:ee:45:
0c:22:0d:44:7f:aa:0e:03:22:db:4b:5f:1f:1a:11:
b8:29:f9:70:30:56:4e:9a:a7:3e:c7:cd:56:3e:fc:
91:73:ee:62:51:46:08:7c:db:1b:94:f9:7c:78:57:
a1:72:a2:36:38:64:fb:8a:18:33:be:a6:13:04:10:
ea:6c:68:c3:85:ee:3d:3c:1f:bf:86:40:4f:47:c7:
bc:d5:72:d9:94:ba:bb:98:d2:49:17:42:70:ae:9e:
35:2a:45:36:51:8d:29:47:1f:d7:cf:c9:5d:93:1e:
e4:f2:b7:30:5e:1d:c7:91:a7:26:c6:46:59:03:76:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:14:9A:08:06:2D:1D:59:64:12:B3:85:BE:39:94:7C:5A:56:A3
X509v3 Authority Key Identifier:
keyid:2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:99:8c:f4:0d:09:ec:38:1d:b3:52:a9:48:ba:ca:11:51:ff:
30:c1:34:47:69:c4:c2:93:3f:b2:7c:88:64:55:70:6f:9c:82:
a3:a2:6f:4a:b0:5f:e2:dc:da:c6:9d:d9:78:c2:34:d9:8b:69:
45:42:e4:cd:04:b7:7f:1f:ea:15:66:72:ef:3a:99:fc:0e:b0:
8d:3d:8f:4c:24:bf:60:8c:a9:75:f8:fe:61:0e:39:0e:95:72:
33:3b:4a:a2:4b:fc:aa:ca:f4:0f:3e:37:e0:de:af:0a:70:bf:
b2:28:36:72:ab:a2:6b:96:ce:db:35:a4:0f:9f:af:f6:61:52:
71:c0:ea:5f:98:46:0e:fa:fe:e7:96:92:6b:cf:97:73:17:7e:
43:40:a4:c1:8f:1b:a3:47:c2:cb:ad:7d:85:06:1c:cb:02:b6:
01:39:16:a6:8c:50:cc:80:41:3d:bb:f8:90:43:0d:4b:df:bb:
4c:47:e6:10:b6:db:9d:64:5f:5d:ea:7a:c6:95:ed:2f:5c:c0:
f2:50:e7:89:b3:f7:91:fa:1c:10:d5:e7:f0:99:d6:98:02:e0:
c5:54:d8:9b:de:c1:95:e7:9b:b5:60:db:52:8e:32:57:72:89:
6a:a6:13:f9:85:29:72:74:05:59:9c:e4:34:15:32:53:74:b9:
bd:b8:a1:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYdQXlksYrip7I05lnIZJxwyr+2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1NTAxQkZBN0Q3RUZBREZFNzFFOUU1QzQ1QkM4RDM5
MjQwODg3QzAeFw0yNjAxMTgwNTQ5MjZaFw0yNzAxMTcwNTU0MjZaMDMxMTAvBgNV
BAMTKEEyQTQxNDlBMDgwNjJEMUQ1OTY0MTJCMzg1QkUzOTk0N0M1QTU2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQM4si1xVqxBVZ5dJN+h0hIAu8
VmOInvmggEp0X8NBJKJcMIQApgAv6YN7CgZ+00UdRvBz59CGzvioF3AAR6Nvo012
iLbxWUk5UwI7BWgScqPhVO/CEmmWn0OIBcbsVFuPgzt4OTBOl+t2nogYNM3ywt7H
VIPAeXS1iYZgS7xy0i6StIzuRQwiDUR/qg4DIttLXx8aEbgp+XAwVk6apz7HzVY+
/JFz7mJRRgh82xuU+Xx4V6FyojY4ZPuKGDO+phMEEOpsaMOF7j08H7+GQE9Hx7zV
ctmUuruY0kkXQnCunjUqRTZRjSlHH9fPyV2THuTytzBeHceRpybGRlkDdvh9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoqQUmggGLR1ZZBKzhb45lHxaVqMwHwYDVR0j
BBgwFoAULVUBv6fX763+cenlxFvI05JAiHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JoOUNWbnVjWTdKV3N6REdGOFduMUVieDF5eWRxMm9Qcmd6aU52M1d4
NXkvMC8yRDU1MDFCRkE3RDdFRkFERkU3MUU5RTVDNDVCQzhEMzkyNDA4ODdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTUwMUJGQTdEN0VGQURG
RTcxRTlFNUM0NUJDOEQzOTI0MDg4N0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiaDlDVm51Y1k3SldzekRHRjhXbjFFYngxeXlkcTJvUHJnemlOdjNXeDV5LzAv
MzIzMDMxMmUzMTM4MzIyZTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJtgwwDQYJKoZIhvcNAQELBQADggEBAG+ZjPQN
Cew4HbNSqUi6yhFR/zDBNEdpxMKTP7J8iGRVcG+cgqOib0qwX+Lc2sad2XjCNNmL
aUVC5M0Et38f6hVmcu86mfwOsI09j0wkv2CMqXX4/mEOOQ6VcjM7SqJL/KrK9A8+
N+Derwpwv7IoNnKromuWzts1pA+fr/ZhUnHA6l+YRg76/ueWkmvPl3MXfkNApMGP
G6NHwsutfYUGHMsCtgE5FqaMUMyAQT27+JBDDUvfu0xH5hC2251kX13qesaV7S9c
wPJQ54mz95H6HBDV5/CZ1pgC4MVU2JvewZXnm7Vg21KOMldyiWqmE/mFKXJ0BVmc
5DQVMlN0ub24ofg=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:35 2026 by rpki-client