This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa
File: 3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier: VqNwbGiqzgtUocICiHeTzkBl5XtNc6lrGmBXImTohXA=
Subject key identifier: C0:1A:7B:3E:44:7F:0F:96:25:3A:84:DE:D3:9B:0C:24:61:21:B9:54
Certificate issuer: /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial: 1A8C801371467F11A8FBEE51D593F13860A44D16
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa
Signing time: Tue 13 Jan 2026 20:21:08 +0000
ROA not before: Tue 13 Jan 2026 20:16:08 +0000
ROA not after: Tue 12 Jan 2027 20:21:08 +0000
asID: 271484
IP address blocks: 181.233.19.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:8c:80:13:71:46:7f:11:a8:fb:ee:51:d5:93:f1:38:60:a4:4d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Validity
Not Before: Jan 13 20:16:08 2026 GMT
Not After : Jan 12 20:21:08 2027 GMT
Subject: CN=C01A7B3E447F0F96253A84DED39B0C246121B954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:18:bf:22:c0:9f:96:02:2e:13:1f:5b:cb:
53:15:2a:08:b4:67:4b:3c:33:14:45:ff:1e:ff:fc:
bc:0f:98:b5:e8:b4:68:bd:3f:bf:e2:dd:97:b3:00:
e6:77:22:73:2a:16:08:ea:06:02:c2:36:dd:38:af:
f1:8f:bc:98:75:10:84:80:7e:9d:e1:6d:8b:81:4f:
16:75:5e:07:b5:43:c0:3f:d9:95:15:a0:d8:68:7a:
76:75:f0:b4:b2:23:e5:b4:3f:e4:9e:87:df:2a:81:
41:28:b5:17:a4:c5:5c:f5:d2:7c:33:24:35:0f:c1:
4d:12:48:87:19:2b:e1:38:29:4a:82:5d:d8:a0:57:
13:62:69:06:8a:f9:cd:7a:e5:2f:1f:d8:be:58:a4:
ed:e4:82:91:0f:93:48:f5:ec:28:cf:12:08:0f:20:
03:33:b2:5d:80:30:fa:6d:4c:03:77:16:29:3f:db:
4b:1f:dc:63:1e:28:46:fc:0f:56:14:7e:b7:79:71:
6a:be:f4:78:48:62:a1:b5:aa:31:3f:3f:06:9f:5c:
c2:bf:2a:00:7f:67:11:4a:29:bb:08:d5:76:a7:8f:
5e:b2:63:d4:b2:0b:18:d7:ab:14:11:6f:77:cc:98:
b9:49:bf:44:fd:0d:9f:18:f6:3f:d8:e6:78:49:96:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1A:7B:3E:44:7F:0F:96:25:3A:84:DE:D3:9B:0C:24:61:21:B9:54
X509v3 Authority Key Identifier:
keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e3:cd:2e:e4:c9:c2:be:26:5a:2c:c9:ef:d4:2f:21:64:12:
6e:13:d2:c2:e2:85:d2:e2:9f:ce:f8:79:39:82:60:41:66:50:
69:19:17:2e:68:b5:dd:e7:26:9e:9f:c0:56:14:ae:f9:a4:9a:
59:0a:64:ac:d5:7f:9e:f5:a0:8d:0a:7a:68:6d:bc:49:e8:2d:
bd:d4:5e:55:c1:f1:b8:6e:0d:6f:a2:55:27:30:ab:d3:63:15:
c0:05:82:1f:11:c9:c7:50:30:68:ab:b2:6a:15:17:86:08:2b:
0b:16:63:71:12:d2:06:7c:f8:a9:d5:f3:3e:a2:05:d3:26:ec:
72:b4:ee:46:2e:0c:e4:3c:5e:71:64:4d:69:8f:b8:9c:80:5e:
d1:aa:2e:c3:00:32:7f:46:bb:9a:77:34:e4:6d:af:63:4d:34:
fc:b6:31:40:15:9e:82:06:5e:72:c9:f4:d1:7d:1f:b6:33:d8:
4f:23:1b:ee:1a:be:ff:a3:ed:b5:9f:c1:59:5a:9c:0a:26:e5:
06:d4:d3:78:e1:cd:91:2c:ee:0c:4a:7f:23:09:9b:48:1e:e3:
19:f7:55:d1:27:d5:54:d5:cf:e3:c2:ed:ad:b8:6a:bf:7b:6f:
60:cc:53:5c:4e:ba:09:a9:f8:1d:0f:73:4b:ca:eb:7e:2c:26:
4d:eb:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:27 2026 by rpki-client