This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
File: 3138392e35312e3139322e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier: q/SB8CoKvCzuPRmKD/ldI78HFMxHM0MOOw+1uWM/OkY=
Subject key identifier: 90:55:53:96:2D:B3:F2:94:E0:30:20:0A:52:41:1B:6E:5A:21:FF:4C
Certificate issuer: /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial: 674446D63E17FA8788FB43AE5689218FDF8779F6
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
Signing time: Tue 06 Jan 2026 12:23:32 +0000
ROA not before: Tue 06 Jan 2026 12:18:32 +0000
ROA not after: Tue 05 Jan 2027 12:23:32 +0000
asID: 28352
IP address blocks: 189.51.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 12:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:44:46:d6:3e:17:fa:87:88:fb:43:ae:56:89:21:8f:df:87:79:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Validity
Not Before: Jan 6 12:18:32 2026 GMT
Not After : Jan 5 12:23:32 2027 GMT
Subject: CN=905553962DB3F294E030200A52411B6E5A21FF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:da:ad:68:48:0a:7f:c6:e0:b9:a2:4a:d0:
59:7f:c0:9e:fe:f9:32:6d:66:70:81:c9:9e:4f:e4:
10:52:ad:10:d1:bf:9d:ce:42:6d:ae:16:e0:4b:1a:
b3:07:dc:d7:b1:38:56:a4:7f:86:53:1d:55:38:c6:
ce:50:ee:d3:0b:df:bb:9b:77:16:1d:de:e7:7f:94:
ca:69:e0:22:96:e5:45:85:68:55:62:3c:e9:d5:80:
d2:34:2f:83:57:66:8d:0b:23:34:7c:03:76:a9:5e:
b0:27:89:3d:d5:67:78:6e:23:c7:37:05:12:b9:5c:
d9:e1:6f:f8:89:95:d1:af:96:49:39:75:13:9e:af:
82:2c:29:9a:81:19:74:2b:af:5e:85:db:da:cb:70:
57:c9:07:b5:c7:f1:bb:6a:9a:a2:d0:d3:78:0c:59:
b9:e5:54:f5:a0:fd:c6:40:c6:f9:dd:92:c3:b4:a9:
4c:32:0c:85:1a:41:6b:36:66:76:d7:f3:6a:a9:4e:
63:77:26:0a:0b:0d:12:33:58:a9:78:e9:a4:85:99:
20:e0:57:b7:fa:b0:70:3a:5a:a5:0e:6a:f9:d7:e2:
97:32:fb:6c:91:e1:16:42:15:28:c0:c3:57:1a:25:
ee:d6:59:7c:bf:b1:94:75:9e:cf:e1:76:c8:69:6a:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:55:53:96:2D:B3:F2:94:E0:30:20:0A:52:41:1B:6E:5A:21:FF:4C
X509v3 Authority Key Identifier:
keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.51.192.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:d9:53:44:93:f1:cd:0c:e9:ea:49:05:24:56:8d:71:e0:bc:
5d:d3:f2:da:9a:cd:88:f9:68:d3:d0:d7:a8:3c:83:1d:d1:41:
63:45:e1:d3:7b:e8:e7:30:3b:72:f1:cb:53:38:66:8c:f9:7a:
23:81:03:a4:bd:dd:9f:f0:39:a5:3e:89:3c:2a:cb:8f:74:25:
dc:c7:bd:79:bb:55:4b:de:05:82:08:67:1a:85:ae:10:77:50:
05:dd:16:28:b0:a9:74:85:8f:af:11:e7:24:98:55:fd:07:a3:
bb:da:85:72:dc:4b:29:c5:25:0b:42:d2:70:ab:b0:3f:a3:fe:
d7:88:05:e6:7c:ba:d4:23:d3:eb:52:96:1d:92:17:28:bc:44:
5a:f5:48:b5:58:90:99:ce:46:c7:83:74:a5:f5:52:d4:04:d2:
c4:9a:04:f4:03:e8:ad:75:4f:3f:1e:1b:22:ce:1b:bd:24:77:
8f:89:6e:b3:31:a3:8c:24:0c:82:84:db:a3:c8:9a:8f:c6:48:
38:83:8c:db:ab:1d:12:39:1a:f8:17:8a:c4:dd:d0:d8:d3:ed:
0b:92:96:fc:ef:d4:3d:4f:9f:e4:88:40:f0:85:62:28:77:c9:
55:6b:91:1d:45:7e:1f:62:0f:a2:55:6a:a1:fc:9d:1f:c7:b6:
81:bf:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:45 2026 by rpki-client