This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
File: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (raw, json)
Hash identifier: YMO1AAaKddSx4wsxtUWpW6YFZK1PI1b4AKJgiHYgwMk=
Subject key identifier: F2:15:72:17:30:73:49:60:26:A5:09:AE:FC:D0:9F:3B:96:B7:B8:56
Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0
Certificate serial: 3F116CC4FE975923C445DD93692CA9BA705862E2
Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
Signing time: Fri 23 Jan 2026 15:06:32 +0000
ROA not before: Fri 23 Jan 2026 15:01:32 +0000
ROA not after: Fri 22 Jan 2027 15:06:32 +0000
asID: 266168
IP address blocks: 160.19.244.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 06:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:11:6c:c4:fe:97:59:23:c4:45:dd:93:69:2c:a9:ba:70:58:62:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0
Validity
Not Before: Jan 23 15:01:32 2026 GMT
Not After : Jan 22 15:06:32 2027 GMT
Subject: CN=F21572173073496026A509AEFCD09F3B96B7B856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:ca:0b:bd:70:65:69:d9:27:d9:9e:49:d1:
0a:82:29:5d:43:5f:88:17:6d:14:b2:8f:5d:78:e7:
a1:2d:26:a5:5b:49:e0:a5:97:43:bc:cb:b8:35:7a:
ab:26:6f:96:d4:c1:16:81:d8:6e:cf:0f:3d:4b:19:
bc:fc:fb:14:d2:53:85:c9:df:8f:88:e3:d9:b2:d5:
79:41:60:aa:02:9a:6d:91:47:75:b1:a0:06:61:1a:
63:e4:a3:ef:f8:db:26:dc:71:59:da:1d:85:8b:e1:
db:13:b7:c7:ee:b4:5b:81:2b:3d:71:5f:c6:73:3a:
d9:83:b8:b7:92:d7:49:b5:13:c3:49:a6:d9:53:05:
88:de:03:6e:d7:28:9c:b8:6e:a8:5a:b9:1e:82:0d:
e1:27:73:12:e7:99:0c:73:47:c8:cc:09:0b:8a:01:
4c:14:78:2e:9c:50:ef:ff:c9:d7:15:90:7c:0c:cf:
ec:82:10:16:15:be:30:1a:12:a8:f9:ff:62:61:60:
d4:f0:88:e9:6f:63:67:ff:f7:1c:ea:87:e3:17:0d:
d4:6c:62:e0:60:dc:51:be:e5:13:38:ae:31:1f:e4:
d0:a9:53:67:20:c0:48:c9:b1:6c:54:2f:7c:9f:fc:
03:ca:16:6b:c7:41:38:81:5f:b1:b1:cb:88:a0:f4:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:72:17:30:73:49:60:26:A5:09:AE:FC:D0:9F:3B:96:B7:B8:56
X509v3 Authority Key Identifier:
keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ed:45:23:c5:cb:a6:00:4a:be:4f:8b:21:71:76:1e:e7:77:
e6:18:48:4f:8b:f2:ce:73:87:ae:f8:3e:59:ae:33:d3:29:74:
4f:f0:1c:4c:1f:b4:d3:a7:7f:ea:64:45:b4:8e:82:ab:5e:dd:
f7:3c:bd:e3:a3:1d:1c:30:3f:6b:09:78:a7:a9:16:36:67:cb:
36:72:e1:38:47:e4:fa:dc:8f:7b:42:46:48:7b:60:b5:b3:c5:
4a:c5:b4:f8:f4:0c:8b:2d:fd:6d:2d:16:4d:2e:85:b9:a6:51:
dd:5c:e7:40:6c:aa:22:f3:3e:ee:cb:fd:e7:54:d5:3b:f3:39:
f3:77:0a:6e:25:f6:87:f4:cc:98:be:a6:3e:dc:ed:8a:4a:d6:
cd:9f:b8:ac:ec:3c:79:ea:54:95:ff:60:8c:c5:9e:94:13:aa:
7c:61:2e:f6:2f:54:a0:0c:17:f9:15:22:8c:9c:f3:47:83:cd:
a1:26:95:1c:24:8b:31:a9:a1:af:15:b3:97:24:cb:a6:9c:c9:
ad:ac:9f:bb:97:e9:93:9e:bb:14:a0:a8:1b:db:db:f2:ca:bc:
9e:be:df:8e:f4:74:04:1e:9f:fc:2f:66:5d:93:8a:6b:3d:d0:
96:66:f6:d0:19:30:bd:22:d4:47:2c:be:87:7c:b4:57:0a:35:
4b:37:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:39 2026 by rpki-client