This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa
File: 3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa (raw, json)
Hash identifier: MJvvXtQG/YXZFiUJ7vqsRUS9hMvNgdCkp2YEJlGm5uo=
Subject key identifier: 44:3A:7C:24:A1:C4:53:89:20:D8:99:98:44:CB:22:74:6A:D6:89:44
Certificate issuer: /CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
Certificate serial: 12CC47B3132A7FD7D343BFE1BEE8CF85D6ED84AF
Authority key identifier: 13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa
Signing time: Thu 15 Jan 2026 13:29:42 +0000
ROA not before: Thu 15 Jan 2026 13:24:42 +0000
ROA not after: Thu 14 Jan 2027 13:29:42 +0000
asID: 264294
IP address blocks: 138.121.128.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl
rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 14:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cc:47:b3:13:2a:7f:d7:d3:43:bf:e1:be:e8:cf:85:d6:ed:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
Validity
Not Before: Jan 15 13:24:42 2026 GMT
Not After : Jan 14 13:29:42 2027 GMT
Subject: CN=443A7C24A1C4538920D8999844CB22746AD68944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:84:08:7f:8a:e1:3d:2c:db:2b:1f:47:82:
35:6d:54:db:04:a0:c8:60:0f:0a:8c:f5:84:23:4a:
10:dc:e0:ec:82:cb:18:43:5c:f9:64:9b:dd:3b:77:
d3:47:d8:50:34:e8:58:a0:d7:6d:5b:ae:8b:f9:f2:
fc:0f:04:59:04:57:6e:45:62:bd:03:0e:d2:0a:9c:
9a:e2:18:30:17:a0:b9:7b:bf:5b:f3:30:fa:5b:d0:
b8:e8:ef:b0:8d:2f:bc:95:86:09:e5:18:61:70:6e:
77:f5:97:60:e2:4d:47:2a:a1:d3:9d:b9:5d:00:47:
ae:fd:b7:ed:0d:45:ca:10:53:22:91:51:ef:dd:85:
64:90:a0:0a:e8:aa:4d:50:83:c5:60:4f:84:2b:87:
8c:e9:a9:01:b4:87:de:5f:a1:fd:d1:18:72:dd:e8:
55:6a:15:33:8d:72:d7:30:4d:0c:30:28:a3:d6:ba:
69:73:2c:1d:de:8f:bd:b8:75:70:c6:1b:0a:95:ec:
6c:b0:40:48:3c:c4:ce:0d:fa:81:de:a7:a3:0e:db:
66:a4:3f:a5:ec:62:b8:5b:a4:7b:c6:2e:ba:82:ec:
cf:d5:18:d2:5b:41:8a:61:93:4a:c8:0b:4a:bb:42:
d0:41:89:f3:75:39:43:96:a7:1f:62:0d:87:8d:cc:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:7C:24:A1:C4:53:89:20:D8:99:98:44:CB:22:74:6A:D6:89:44
X509v3 Authority Key Identifier:
keyid:13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.128.0/22
Signature Algorithm: sha256WithRSAEncryption
26:c7:ad:6b:c6:31:43:6d:33:a3:6c:a4:59:a0:83:8a:cf:01:
c5:36:83:8d:14:8f:36:cf:1d:52:d2:ca:0d:50:eb:c2:19:19:
9b:7b:cd:bb:18:3e:8d:99:00:ca:e1:4f:87:c5:59:b1:dc:83:
d2:01:b1:0c:90:50:fb:16:67:77:fb:9d:5e:2a:16:88:82:e6:
ba:69:9c:08:35:dc:83:4c:ed:d8:8b:2b:da:69:78:cb:72:aa:
2b:40:81:c8:f2:fc:5f:d4:d7:b6:25:99:e8:7f:ba:da:e3:b7:
4b:5e:25:76:f8:d8:c4:ee:40:5f:5d:09:46:36:66:20:ed:d1:
8d:8d:5d:10:b3:8f:ed:e5:51:b4:af:4b:1a:2c:91:fb:d8:b5:
a5:2b:7f:02:f9:b0:a8:84:93:e4:fa:9a:32:f5:d2:8f:31:b2:
b5:ec:01:f7:4c:ea:01:ab:63:65:96:c1:b8:4e:0e:47:a1:27:
a1:ee:a1:d7:20:02:73:b4:39:eb:d8:4f:78:ca:7d:44:ca:b6:
75:82:4b:90:33:0d:7c:97:f5:af:1e:d5:5e:4b:81:a7:36:d5:
a5:23:2c:a6:fd:e7:7b:38:e8:93:7f:60:b2:c4:ec:6f:70:bb:
40:c9:1c:8d:ba:be:ea:3f:e7:9c:1c:74:f3:0d:c0:36:d7:45:
ae:97:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:51:40 2026 by rpki-client