This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa
File: 3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa (raw, json)
Hash identifier: ej1bquQYsS2bNscIvx/U/bIicK/70cAMW+ATxHQxljw=
Subject key identifier: F9:39:BB:CB:3E:E8:F3:A5:B8:F4:D2:34:D2:AA:EE:ED:D2:B9:AC:D6
Certificate issuer: /CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6
Certificate serial: 4031E23396E7646EC95FC2D2273DE0D54FF252D7
Authority key identifier: 9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa
Signing time: Sun 18 Jan 2026 17:34:22 +0000
ROA not before: Sun 18 Jan 2026 17:29:22 +0000
ROA not after: Sun 17 Jan 2027 17:34:22 +0000
asID: 265315
IP address blocks: 138.121.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl
rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 09:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:31:e2:33:96:e7:64:6e:c9:5f:c2:d2:27:3d:e0:d5:4f:f2:52:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6
Validity
Not Before: Jan 18 17:29:22 2026 GMT
Not After : Jan 17 17:34:22 2027 GMT
Subject: CN=F939BBCB3EE8F3A5B8F4D234D2AAEEEDD2B9ACD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:2b:21:a3:dd:24:6f:ea:5d:d9:5a:11:e5:
88:1d:a3:a9:37:ef:c1:5b:d0:eb:bf:7c:1b:af:1d:
7b:95:cb:9a:3c:59:c2:ef:0a:0c:ca:a8:22:09:67:
83:fb:81:1d:9a:00:0f:35:02:8a:8e:ec:d3:b7:28:
d9:7e:f4:3a:26:cb:a2:b3:1e:2a:c8:1e:f1:b5:e3:
2c:97:e0:66:77:bb:6d:e4:6c:c9:6e:3c:fc:b1:ed:
c1:44:05:0c:01:b4:5f:a8:37:b5:47:c2:c9:dd:a0:
74:d3:ce:1b:a7:07:4d:4e:ff:50:41:2c:b0:b7:1e:
50:8d:a6:a5:28:a3:1f:72:d3:59:24:dc:e6:35:22:
e5:65:16:31:f4:71:c7:cb:43:15:f3:d3:83:02:f9:
86:92:7e:76:42:7f:27:60:55:b7:b2:5e:b5:e9:e9:
28:72:b9:b6:9c:67:59:cb:e6:da:d8:ec:8b:42:46:
55:70:80:48:78:92:db:39:ef:3e:8b:e2:0c:7d:f8:
72:55:ac:73:9d:a1:7f:a0:1f:16:38:a2:41:92:d1:
9b:47:d3:3d:30:d9:36:af:d5:dd:99:05:1b:aa:9d:
97:c6:3a:bf:36:1e:cb:75:1d:9e:df:11:d5:4b:eb:
af:73:98:91:fe:be:57:0b:56:f7:fe:a9:3a:83:64:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:BB:CB:3E:E8:F3:A5:B8:F4:D2:34:D2:AA:EE:ED:D2:B9:AC:D6
X509v3 Authority Key Identifier:
keyid:9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c1:19:8d:8d:02:9b:e5:b9:e2:8e:62:5d:9b:ce:7b:7f:16:
35:d7:d8:f2:ab:54:a4:f9:a9:67:bb:05:8b:0a:4c:38:04:8f:
59:56:34:bf:ce:ab:b9:44:8d:38:07:2b:e3:e9:b1:4f:6a:ec:
f1:9d:18:65:24:a4:55:78:e2:79:31:13:73:f1:4f:aa:27:13:
ed:4c:7a:43:91:46:9c:70:49:6d:00:93:c1:ec:1d:63:94:40:
57:93:85:98:ec:28:67:0d:a8:e1:e9:88:73:3d:1d:70:a7:72:
2f:e9:74:44:7e:17:94:23:cc:59:39:cd:72:09:4f:27:71:f3:
7e:1a:83:10:13:c2:6f:5b:33:2b:d6:3c:2d:e7:5d:48:b0:f1:
cb:df:48:e2:27:2f:45:4f:bb:e3:fa:c6:a3:d0:42:34:ec:2f:
6a:b1:34:0f:00:75:69:4b:7b:e9:b9:6a:99:9e:73:e0:a4:69:
a6:c4:a6:e2:e4:27:58:3a:17:95:40:34:17:f7:17:89:ed:82:
8d:af:82:6d:cb:12:6d:2d:bd:f7:ee:c3:ef:09:21:c2:54:40:
2f:95:1a:ba:6a:35:2c:ce:46:50:47:92:2f:26:84:e6:b1:5c:
64:da:1e:eb:60:0b:54:34:9e:8d:3e:ae:13:99:63:ed:fc:69:
8e:b4:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:31:20 2026 by rpki-client