This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa
File: 3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier: bPPdrVdgvZZyFvtcUlgBnU8Y/AT/Vc7fgqN8QmV522I=
Subject key identifier: 31:D5:86:15:73:5E:32:AE:1F:1B:45:7A:96:F0:AE:7A:79:59:27:4C
Certificate issuer: /CN=AF6D10F6F9F4A1781591C9AB770C3C36326E4C57
Certificate serial: 4ED5A3ED4498F9A903B0EB7017F457ECF0AF169E
Authority key identifier: AF:6D:10:F6:F9:F4:A1:78:15:91:C9:AB:77:0C:3C:36:32:6E:4C:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa
Signing time: Wed 21 Jan 2026 19:46:04 +0000
ROA not before: Wed 21 Jan 2026 19:41:04 +0000
ROA not after: Wed 20 Jan 2027 19:46:04 +0000
asID: 265933
IP address blocks: 170.150.144.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.crl
rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 23:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d5:a3:ed:44:98:f9:a9:03:b0:eb:70:17:f4:57:ec:f0:af:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF6D10F6F9F4A1781591C9AB770C3C36326E4C57
Validity
Not Before: Jan 21 19:41:04 2026 GMT
Not After : Jan 20 19:46:04 2027 GMT
Subject: CN=31D58615735E32AE1F1B457A96F0AE7A7959274C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:5a:91:92:5f:e3:6f:7e:ac:fc:af:77:75:
bf:cf:94:8d:d4:2d:52:12:6a:56:1b:57:a1:b9:57:
fb:09:40:e4:85:fb:ea:25:79:1e:7c:e7:7d:ed:84:
5b:ea:de:60:0e:f4:c2:82:c3:39:13:bf:92:77:71:
95:6d:4c:f1:02:a7:5b:03:4b:c6:b3:1c:ec:15:c3:
1a:9d:35:02:36:4d:02:8f:19:f2:83:c2:17:62:f6:
99:39:27:dc:5c:ca:cb:5f:e2:a9:f2:79:69:f2:82:
2e:28:2e:bc:6a:09:3f:c6:08:e6:88:db:25:81:95:
52:92:c0:56:f6:f9:27:12:c2:b4:5a:77:16:30:7e:
89:bd:ff:5e:89:09:5b:1f:1d:3b:6c:ce:66:bb:f8:
4e:5a:68:79:7c:f9:f7:be:d9:98:f0:8b:ee:fc:4c:
6f:6d:75:23:77:ba:df:27:31:d4:96:cd:79:67:0d:
f1:f0:bd:1c:b0:27:fa:8d:db:de:9b:81:57:08:d8:
b3:a4:6f:97:d1:b0:73:53:e7:ad:c5:d9:02:61:4f:
0f:08:50:ad:10:fb:d6:37:7b:66:6f:ac:11:76:70:
0f:b5:26:be:4a:8b:17:0f:d2:52:44:4f:af:0d:11:
d9:bf:ca:9f:75:18:10:37:7a:93:61:a2:32:36:d1:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D5:86:15:73:5E:32:AE:1F:1B:45:7A:96:F0:AE:7A:79:59:27:4C
X509v3 Authority Key Identifier:
keyid:AF:6D:10:F6:F9:F4:A1:78:15:91:C9:AB:77:0C:3C:36:32:6E:4C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.144.0/22
Signature Algorithm: sha256WithRSAEncryption
62:dd:17:79:6b:26:f5:0f:b0:c0:1e:be:23:44:c5:de:f9:ec:
e7:39:9f:34:18:38:f6:fa:d9:0e:e0:db:b0:1a:d4:bb:73:6d:
6a:14:0e:38:54:f3:98:28:7a:7e:6c:56:99:88:23:a1:28:d8:
43:d9:94:ea:28:84:0a:bb:4a:b1:ef:3b:9f:a6:67:ca:80:da:
19:4e:87:c2:32:fb:f4:f9:21:78:a1:1d:ff:01:d5:11:f2:55:
61:f9:4d:87:e3:d6:10:b5:72:73:e2:67:30:8f:fb:e4:40:9c:
a7:e1:e1:10:2d:33:32:2c:26:2f:f4:ac:e0:7d:eb:c5:ef:18:
94:b3:be:62:bd:16:0d:4f:f4:31:72:64:c8:eb:0a:ac:b3:46:
ba:61:47:83:8f:b3:7a:9a:6d:af:ee:80:7d:1a:ca:1c:bc:fe:
9d:53:8d:d0:eb:77:86:de:7e:2d:ca:23:10:26:9c:2b:9e:a5:
07:b3:e4:42:07:05:1d:ef:2c:80:fd:30:d9:17:51:7e:51:fe:
81:93:50:23:40:41:d2:93:1b:c6:d4:4c:b6:78:4d:97:b5:b8:
ed:80:44:75:ce:32:72:79:4c:8e:0c:0e:86:cb:9f:9a:36:9a:
00:7b:43:cc:86:8f:71:80:e0:52:b1:88:5e:d0:61:db:89:9b:
9e:de:01:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:25:47 2026 by rpki-client