This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
File: 3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa (raw, json)
Hash identifier: QWbpfQPpwJb1wzz9QPVqPYEZ0j4CVJF3tmSe+fjpZEU=
Subject key identifier: A8:6D:D6:9E:C9:66:F3:18:0B:03:4B:8C:D1:2D:BB:B4:2D:AD:24:40
Certificate issuer: /CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
Certificate serial: 5F05FA734998C732C200C2CBDAB76D414BB56EF1
Authority key identifier: BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
Signing time: Sat 10 Jan 2026 03:00:02 +0000
ROA not before: Sat 10 Jan 2026 02:55:02 +0000
ROA not after: Sat 09 Jan 2027 03:00:02 +0000
asID: 27688
IP address blocks: 200.159.128.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl
rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 15:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:05:fa:73:49:98:c7:32:c2:00:c2:cb:da:b7:6d:41:4b:b5:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
Validity
Not Before: Jan 10 02:55:02 2026 GMT
Not After : Jan 9 03:00:02 2027 GMT
Subject: CN=A86DD69EC966F3180B034B8CD12DBBB42DAD2440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:8e:21:8a:90:8e:d9:0f:04:f0:0c:ab:50:
fe:59:18:51:34:c7:be:9c:00:cd:a8:50:31:0f:d2:
90:59:58:cb:97:c4:57:1b:05:a8:07:d8:1a:e7:30:
b3:3b:12:01:e2:3d:b2:76:d3:1f:1d:a8:f1:e4:2d:
16:e9:f7:2d:d0:ed:62:5e:ea:95:fa:69:c3:de:e9:
b9:d1:a1:66:a5:24:6f:22:f1:59:ab:b5:fe:53:a5:
6f:db:d5:79:8f:52:bb:0d:43:28:13:16:3f:75:0a:
62:3f:6d:1c:60:07:2e:4e:37:61:de:2a:58:3c:1a:
d9:14:a1:73:ec:97:d8:1e:7f:db:81:bc:37:c8:2f:
a1:45:95:7b:55:f9:8f:0e:99:cf:3f:5c:d0:6b:13:
87:77:5c:f7:ab:0d:a2:6d:31:d6:ea:58:88:a3:ff:
c4:a4:87:bc:24:ec:c0:ea:15:9d:c9:f3:48:0b:52:
c1:70:6b:1d:04:88:b9:5f:a7:a9:c4:2d:15:c0:80:
f1:8d:5d:63:b1:d6:48:34:67:df:7a:79:f9:ee:5b:
ef:b6:23:c6:21:e1:9b:d0:bf:f8:55:35:1e:53:65:
76:60:62:b7:39:dc:fb:aa:39:8e:25:0c:56:f5:60:
3a:4d:2d:4a:f3:b6:8a:24:c1:d6:d5:d9:d6:fa:2f:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6D:D6:9E:C9:66:F3:18:0B:03:4B:8C:D1:2D:BB:B4:2D:AD:24:40
X509v3 Authority Key Identifier:
keyid:BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.159.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:c1:2d:dc:57:a7:09:d3:a3:a8:81:78:38:ff:4f:9f:39:8c:
f0:ce:35:5c:d8:d6:32:d1:0f:d1:ef:d9:db:fd:d3:59:27:9d:
12:c4:dd:ce:63:1c:72:9b:51:2e:a7:f6:43:e8:5d:56:19:c7:
c7:68:09:d1:56:73:00:15:0b:84:a0:33:82:07:3f:a9:e3:1a:
d3:8f:ab:39:1c:13:ee:81:d2:c5:17:16:f3:18:6a:dc:9e:38:
f6:d7:7b:62:e9:b9:61:60:74:70:2a:1d:cb:e9:07:57:b0:57:
74:c7:91:94:8a:18:2c:2d:4b:da:e1:18:d9:15:ac:e1:3a:fd:
55:05:53:3f:c3:35:08:f6:2c:46:ea:b9:c8:ef:b3:6c:a3:3f:
8d:57:e3:fa:16:79:ef:23:a0:b1:05:bd:7a:ad:d4:ba:40:c5:
21:20:28:43:a6:5c:2f:14:9f:58:b0:29:98:f5:f4:88:3b:8e:
71:de:65:19:90:ce:f7:8d:e4:0e:da:9f:86:ff:28:86:0c:9b:
81:b3:0c:0b:5b:75:5a:b5:84:b2:3d:3d:33:a2:81:1e:54:cc:
50:42:8a:1c:23:86:fb:07:27:c4:b7:fb:f2:09:e9:dd:d3:00:
63:f6:d3:6c:a7:bb:8e:45:50:58:af:fa:23:de:71:ea:f0:67:
99:ba:d2:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXwX6c0mYxzLCAMLL2rdtQUu1bvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVBMDY4OUVCODk5MjRGNjE4Q0FBRDY3MEM1OUM3MEI0
RDRERTUzODAeFw0yNjAxMTAwMjU1MDJaFw0yNzAxMDkwMzAwMDJaMDMxMTAvBgNV
BAMTKEE4NkRENjlFQzk2NkYzMTgwQjAzNEI4Q0QxMkRCQkI0MkRBRDI0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpso4hipCO2Q8E8AyrUP5ZGFE0
x76cAM2oUDEP0pBZWMuXxFcbBagH2BrnMLM7EgHiPbJ20x8dqPHkLRbp9y3Q7WJe
6pX6acPe6bnRoWalJG8i8Vmrtf5TpW/b1XmPUrsNQygTFj91CmI/bRxgBy5ON2He
Klg8GtkUoXPsl9gef9uBvDfIL6FFlXtV+Y8Omc8/XNBrE4d3XPerDaJtMdbqWIij
/8Skh7wk7MDqFZ3J80gLUsFwax0EiLlfp6nELRXAgPGNXWOx1kg0Z996efnuW++2
I8Yh4ZvQv/hVNR5TZXZgYrc53PuqOY4lDFb1YDpNLUrztookwdbV2db6L/PjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqG3Wnslm8xgLA0uM0S27tC2tJEAwHwYDVR0j
BBgwFoAUvqBonriZJPYYyq1nDFnHC01N5TgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkM0TDRWeFhzcjkzVVJRMnZXVXZCODF0Vm9tbXh0WFNZNVRLM1htNjFI
SDgvMC9CRUEwNjg5RUI4OTkyNEY2MThDQUFENjcwQzU5QzcwQjRENERFNTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFQTA2ODlFQjg5OTI0RjYx
OENBQUQ2NzBDNTlDNzBCNEQ0REU1MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDNEw0VnhYc3I5M1VSUTJ2V1V2QjgxdFZvbW14dFhTWTVUSzNYbTYxSEg4LzAv
MzIzMDMwMmUzMTM1MzkyZTMxMzIzODJlMzAyZjMxMzkyZDMzMzIyMDNkM2UyMDMy
MzczNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAXIn4AwDQYJKoZIhvcNAQELBQADggEBAH3BLdxX
pwnTo6iBeDj/T585jPDONVzY1jLRD9Hv2dv901knnRLE3c5jHHKbUS6n9kPoXVYZ
x8doCdFWcwAVC4SgM4IHP6njGtOPqzkcE+6B0sUXFvMYatyeOPbXe2LpuWFgdHAq
HcvpB1ewV3THkZSKGCwtS9rhGNkVrOE6/VUFUz/DNQj2LEbqucjvs2yjP41X4/oW
ee8joLEFvXqt1LpAxSEgKEOmXC8Un1iwKZj19Ig7jnHeZRmQzveN5A7an4b/KIYM
m4GzDAtbdVq1hLI9PTOigR5UzFBCihwjhvsHJ8S3+/IJ6d3TAGP202ynu45FUFiv
+iPecerwZ5m60j4=
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:38:19 2026 by rpki-client