This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa
File: 3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa (raw, json)
Hash identifier: qlcyB7/XRBRtPh4jauaGm3CMcWAxyzA/DC3hsN5yByU=
Subject key identifier: 33:54:8A:DF:84:B4:91:90:5D:58:D7:CA:BC:E8:C7:F5:43:6E:03:D3
Certificate issuer: /CN=843E46AA209E75F9302824E3938E138395B4B3A9
Certificate serial: 716A4D61A2F2BBFC30E010A525331002C5BF59E6
Authority key identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa
Signing time: Mon 05 Jan 2026 22:15:23 +0000
ROA not before: Mon 05 Jan 2026 22:10:23 +0000
ROA not after: Mon 04 Jan 2027 22:15:23 +0000
asID: 264912
IP address blocks: 168.228.64.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl
rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 23:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6a:4d:61:a2:f2:bb:fc:30:e0:10:a5:25:33:10:02:c5:bf:59:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843E46AA209E75F9302824E3938E138395B4B3A9
Validity
Not Before: Jan 5 22:10:23 2026 GMT
Not After : Jan 4 22:15:23 2027 GMT
Subject: CN=33548ADF84B491905D58D7CABCE8C7F5436E03D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:49:bc:82:69:8c:56:00:b1:f7:a4:22:4c:
c7:54:d6:df:4c:3e:ab:ef:a9:04:74:f3:d5:8e:64:
01:1e:2e:30:e9:59:a4:29:e2:5a:5a:4b:af:0e:4a:
09:42:2a:b2:ae:03:bd:37:27:9f:ab:aa:19:c4:6e:
48:a0:3c:06:df:a2:07:4d:2f:c2:ff:89:ea:c5:00:
f5:e7:e9:16:72:aa:ac:2e:d8:12:96:40:dc:2d:a3:
1f:70:ed:87:41:cd:33:3a:87:32:04:49:eb:8a:7c:
d2:75:0b:3a:72:88:86:d8:e6:26:3f:be:83:ec:b5:
8c:64:a3:ac:92:dc:ed:be:4a:07:d0:03:6c:41:9e:
f6:92:d3:19:a5:9a:7f:61:ad:23:fb:19:d9:5b:c0:
ea:47:9b:c2:f3:80:64:4a:36:32:3d:5c:d6:4e:dc:
65:89:fd:4e:ee:07:96:91:23:5e:a0:e8:4c:76:31:
f9:51:dd:1e:50:1e:c4:29:a9:bc:34:74:dc:4f:fa:
e5:c3:6e:be:20:b7:b9:20:57:c8:dd:65:f6:c1:96:
ef:b5:5c:6f:f2:c1:9e:48:4a:77:f9:29:aa:b7:d3:
d7:4b:53:13:31:9a:5a:98:15:fe:d2:1c:8f:76:9c:
ce:91:ba:24:22:29:50:c3:37:db:35:f9:65:68:66:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:8A:DF:84:B4:91:90:5D:58:D7:CA:BC:E8:C7:F5:43:6E:03:D3
X509v3 Authority Key Identifier:
keyid:84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:aa:ff:c5:20:6c:3a:93:43:2b:b0:2d:cd:f9:0e:4e:20:ee:
ca:80:3f:ce:69:33:c9:05:2b:f7:92:34:df:e2:80:26:13:ce:
a0:30:87:82:09:63:7c:4f:60:39:54:4c:1c:36:89:ea:4d:4f:
11:6c:5b:3f:73:e0:86:3b:bc:9c:7a:97:47:7d:eb:35:67:72:
9c:fc:7e:ed:49:8d:33:be:02:0d:2a:90:07:a9:58:78:09:db:
a2:a4:28:4a:2f:f6:24:5e:3e:a3:23:fd:88:c8:b2:f1:91:13:
81:f7:54:9b:d1:50:2e:f1:ef:98:da:0f:e3:5c:56:4b:d6:46:
bb:c5:62:54:30:25:f7:19:42:00:db:3a:84:75:84:52:4b:80:
65:c4:ba:4d:9d:8c:da:fe:ed:21:66:75:40:b5:0a:b1:a9:ee:
5e:03:9a:8c:ab:ee:37:7a:53:b6:e5:21:43:e0:00:88:89:12:
70:23:91:67:f7:db:d2:02:8b:39:8f:52:78:a1:ad:c0:70:3d:
63:a4:5a:72:e9:b6:ad:4e:5e:42:f8:04:40:b7:48:96:28:d4:
e6:c3:05:70:1b:6f:2e:e3:1f:92:a1:32:a4:ec:0f:55:0a:bf:
e6:d7:a6:37:55:ef:8b:7d:38:60:78:84:ec:29:0e:38:2e:d3:
db:63:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:42:35 2026 by rpki-client