This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
File: 3138372e302e34382e302f32302d3230203d3e203238333532.roa (raw, json)
Hash identifier: oU46DuPWwhoycBqeigFj+fJ4Nllg/KHTNXO0Z6n4eP0=
Subject key identifier: 1C:94:7D:BC:D0:4B:EE:66:E9:2D:D2:42:2C:5B:CB:35:08:C6:81:AD
Certificate issuer: /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial: 3986EA001622528A7A2C89DF72CA7BD10197C014
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
Signing time: Tue 06 Jan 2026 12:23:31 +0000
ROA not before: Tue 06 Jan 2026 12:18:31 +0000
ROA not after: Tue 05 Jan 2027 12:23:31 +0000
asID: 28352
IP address blocks: 187.0.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 12:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:86:ea:00:16:22:52:8a:7a:2c:89:df:72:ca:7b:d1:01:97:c0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Validity
Not Before: Jan 6 12:18:31 2026 GMT
Not After : Jan 5 12:23:31 2027 GMT
Subject: CN=1C947DBCD04BEE66E92DD2422C5BCB3508C681AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:a9:77:ba:ce:cb:78:99:3a:77:c7:bc:1a:
53:63:3c:81:92:e1:d6:57:42:00:a5:bd:f3:fe:d0:
fe:bd:f2:e4:16:46:7f:a8:ab:ac:f3:40:3d:1b:39:
92:2c:bc:5d:67:a5:a6:01:ba:d1:87:66:2e:4d:da:
83:29:87:56:23:35:b3:bd:ca:b9:29:bb:ab:a4:57:
f7:c3:4c:56:b7:36:f7:90:f2:6a:90:e5:54:60:81:
54:3a:eb:ff:6d:31:7f:2b:a5:24:26:7b:00:82:b0:
e6:4c:a4:2d:b6:b8:c4:11:ff:db:b8:81:f8:c5:ab:
fb:01:95:8c:6f:d2:0c:b8:0f:cf:11:83:08:91:d9:
02:06:4b:58:31:a4:b9:b7:44:03:b8:98:9e:98:f7:
71:0b:db:08:d9:ef:22:a1:c2:1e:8a:d8:6e:78:67:
03:a4:f8:68:c2:d5:8e:ba:66:34:c6:f2:84:5a:c5:
fa:78:fb:8a:47:f9:8f:a5:3b:02:0d:c9:32:00:eb:
d1:d2:de:32:77:31:09:f1:97:93:0f:03:b5:5d:5e:
fa:8b:8b:83:8b:45:d4:54:53:61:e3:02:e6:1b:3c:
6e:1a:92:44:26:a6:e0:b5:99:13:b6:5a:a9:c0:b9:
f3:17:a8:34:7d:30:56:bb:72:49:4f:28:ff:9a:8c:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:7D:BC:D0:4B:EE:66:E9:2D:D2:42:2C:5B:CB:35:08:C6:81:AD
X509v3 Authority Key Identifier:
keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:d4:49:c3:fa:e6:51:4e:71:32:57:0f:87:cd:a7:89:c3:95:
5e:61:64:e2:11:1c:85:ba:6f:92:66:56:c0:8f:0e:c1:20:0e:
8c:a1:0e:0b:15:f7:3f:22:49:3b:d8:13:1d:72:bf:02:11:29:
8c:f2:48:e0:52:66:3d:d0:b6:80:76:92:81:6d:15:b0:b7:4c:
42:fb:72:97:09:fe:1e:1f:87:c7:f1:2d:79:35:7c:82:6f:2d:
70:40:da:0c:ad:77:fc:c3:7b:51:c5:0e:cc:c1:64:67:6d:4d:
d6:53:44:ed:11:8a:32:af:d2:f0:af:68:a9:0e:ed:bf:13:bd:
18:bc:17:59:67:da:8e:bf:dc:cc:07:6f:d9:0f:c1:bb:60:09:
9f:40:db:6b:4e:f3:7a:18:d8:e3:b0:80:12:62:f1:da:37:71:
72:cc:10:96:93:91:2b:38:70:6d:9f:7e:0c:da:22:54:8a:09:
e2:0b:e4:31:31:7e:28:66:2d:d5:14:95:09:a8:da:1f:4c:22:
85:4e:d6:69:98:2c:0d:32:f8:14:d3:8b:a9:0a:00:0c:21:76:
82:e4:ef:25:de:f7:26:65:22:6d:4b:d3:55:8e:9f:cf:c3:e0:
3a:5e:ca:45:0c:8e:9b:34:11:5c:83:2c:fd:89:a6:77:ba:ce:
60:b3:bc:3c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOYbqABYiUop6LInfcsp70QGXwBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0
OUEzM0Y5NTAeFw0yNjAxMDYxMjE4MzFaFw0yNzAxMDUxMjIzMzFaMDMxMTAvBgNV
BAMTKDFDOTQ3REJDRDA0QkVFNjZFOTJERDI0MjJDNUJDQjM1MDhDNjgxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwKl3us7LeJk6d8e8GlNjPIGS
4dZXQgClvfP+0P698uQWRn+oq6zzQD0bOZIsvF1npaYButGHZi5N2oMph1YjNbO9
yrkpu6ukV/fDTFa3NveQ8mqQ5VRggVQ66/9tMX8rpSQmewCCsOZMpC22uMQR/9u4
gfjFq/sBlYxv0gy4D88RgwiR2QIGS1gxpLm3RAO4mJ6Y93EL2wjZ7yKhwh6K2G54
ZwOk+GjC1Y66ZjTG8oRaxfp4+4pH+Y+lOwINyTIA69HS3jJ3MQnxl5MPA7VdXvqL
i4OLRdRUU2HjAuYbPG4akkQmpuC1mRO2WqnAufMXqDR9MFa7cklPKP+ajCMLAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUHJR9vNBL7mbpLdJCLFvLNQjGga0wHwYDVR0j
BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1
RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM3MmUzMDJlMzQzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS7ADAwDQYJKoZIhvcNAQELBQADggEBAC/UScP65lFOcTJX
D4fNp4nDlV5hZOIRHIW6b5JmVsCPDsEgDoyhDgsV9z8iSTvYEx1yvwIRKYzySOBS
Zj3QtoB2koFtFbC3TEL7cpcJ/h4fh8fxLXk1fIJvLXBA2gytd/zDe1HFDszBZGdt
TdZTRO0RijKv0vCvaKkO7b8TvRi8F1ln2o6/3MwHb9kPwbtgCZ9A22tO83oY2OOw
gBJi8do3cXLMEJaTkSs4cG2ffgzaIlSKCeIL5DExfihmLdUUlQmo2h9MIoVO1mmY
LA0y+BTTi6kKAAwhdoLk7yXe9yZlIm1L01WOn8/D4DpeykUMjps0EVyDLP2Jpne6
zmCzvDw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:55 2026 by rpki-client