This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa
File: 3138392e35312e3139362e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier: 3QieXRwxc7VBMUazWGP+IT52GLS7fhi3nuOemU7dDVE=
Subject key identifier: 39:C2:A1:AC:09:AA:DF:27:92:20:CB:E7:17:08:B6:B7:06:D5:13:9F
Certificate issuer: /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial: 083A04A8FE3CD8C4B9CE9A32B8FDCEE9C7B7CBFF
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa
Signing time: Tue 06 Jan 2026 12:23:33 +0000
ROA not before: Tue 06 Jan 2026 12:18:33 +0000
ROA not after: Tue 05 Jan 2027 12:23:33 +0000
asID: 28352
IP address blocks: 189.51.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 12:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3a:04:a8:fe:3c:d8:c4:b9:ce:9a:32:b8:fd:ce:e9:c7:b7:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Validity
Not Before: Jan 6 12:18:33 2026 GMT
Not After : Jan 5 12:23:33 2027 GMT
Subject: CN=39C2A1AC09AADF279220CBE71708B6B706D5139F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:3f:a8:07:fe:a7:61:f8:f8:e1:ce:36:cb:
c4:dd:d2:25:0d:6a:0b:69:9c:b4:9f:84:75:d4:70:
45:49:76:30:f0:09:02:05:06:fb:7a:ba:c1:cb:c5:
a0:dc:c0:c5:64:08:1c:bf:0b:5a:3a:0e:9d:ed:14:
e8:48:64:d5:1a:6a:a8:12:16:43:db:29:23:26:41:
27:20:da:a6:1d:dd:79:1b:1b:a6:30:48:cd:31:98:
f9:5f:1d:5a:f3:d6:2e:65:76:b4:d3:a6:98:71:34:
1d:78:95:09:f9:5a:46:a0:3a:02:c7:c0:17:f5:85:
0d:89:7b:8c:ad:f3:22:45:3a:ca:46:2c:6d:ee:c8:
ec:1f:24:d9:5f:15:0f:d3:51:c3:53:da:d5:d2:9f:
97:d0:9f:4a:24:c7:78:5b:3e:51:9b:7f:b1:64:dc:
69:09:34:19:f4:cc:c5:7b:95:6a:48:1a:b3:ed:c0:
89:23:61:bc:16:89:51:8d:94:3e:f4:20:19:f3:99:
60:3c:b9:aa:0c:7c:ce:08:69:c3:7f:fd:e8:81:ec:
1e:f7:66:14:d3:a6:9d:63:87:05:83:e5:85:a1:60:
79:76:d6:96:1d:a7:84:4b:7a:28:81:35:13:ee:c6:
9c:a8:ce:9a:a2:b6:31:49:3d:45:0c:e0:9b:31:9b:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:A1:AC:09:AA:DF:27:92:20:CB:E7:17:08:B6:B7:06:D5:13:9F
X509v3 Authority Key Identifier:
keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.51.196.0/22
Signature Algorithm: sha256WithRSAEncryption
58:44:b6:0e:93:d1:52:6b:91:d4:56:d4:e5:a1:7b:59:d9:37:
71:0a:8f:ee:7a:ba:8f:a6:e0:79:b0:19:db:b7:7d:4f:a6:2a:
f8:9e:a9:29:b8:d2:a5:02:67:e7:bc:fe:77:0c:51:d5:a8:95:
f3:a3:15:bb:a8:f3:a7:a6:b6:5d:31:87:6f:19:a4:51:58:4e:
5c:78:0b:24:0d:e6:14:5b:65:b6:da:a9:e6:96:15:27:b5:43:
a5:de:f0:f8:cf:d3:ba:49:5c:e3:2f:a5:70:95:e5:b9:3b:4c:
61:e9:68:52:55:8e:11:0d:ba:00:5a:ef:d8:1e:84:09:72:71:
74:9b:49:50:a6:bd:13:70:d2:32:55:cb:58:4c:b5:16:fb:fa:
77:9f:c4:6c:29:1e:ee:28:a2:43:a3:a5:d7:8a:9f:67:f4:c8:
ea:a0:74:64:1a:8c:25:27:e6:3b:43:b0:32:ca:0e:5f:34:bd:
58:9b:75:2e:a2:34:0e:16:68:ce:e2:8a:dd:fc:8d:6e:66:f0:
5b:74:69:e6:e5:21:e2:5f:cd:9b:0e:e1:e8:06:38:4e:f7:ba:
82:7b:0e:67:73:33:d5:92:bc:26:3d:36:08:d2:3a:74:d2:35:
73:d2:87:e1:73:f5:7d:34:e4:84:3d:02:a3:ce:d0:2b:a3:92:
55:ea:0f:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCDoEqP482MS5zpoyuP3O6ce3y/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0
OUEzM0Y5NTAeFw0yNjAxMDYxMjE4MzNaFw0yNzAxMDUxMjIzMzNaMDMxMTAvBgNV
BAMTKDM5QzJBMUFDMDlBQURGMjc5MjIwQ0JFNzE3MDhCNkI3MDZENTEzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsD+oB/6nYfj44c42y8Td0iUN
agtpnLSfhHXUcEVJdjDwCQIFBvt6usHLxaDcwMVkCBy/C1o6Dp3tFOhIZNUaaqgS
FkPbKSMmQScg2qYd3XkbG6YwSM0xmPlfHVrz1i5ldrTTpphxNB14lQn5WkagOgLH
wBf1hQ2Je4yt8yJFOspGLG3uyOwfJNlfFQ/TUcNT2tXSn5fQn0okx3hbPlGbf7Fk
3GkJNBn0zMV7lWpIGrPtwIkjYbwWiVGNlD70IBnzmWA8uaoMfM4IacN//eiB7B73
ZhTTpp1jhwWD5YWhYHl21pYdp4RLeiiBNRPuxpyozpqitjFJPUUM4JsxmxDFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOcKhrAmq3yeSIMvnFwi2twbVE58wHwYDVR0j
BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1
RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM5MmUzNTMxMmUzMTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTPEMA0GCSqGSIb3DQEBCwUAA4IBAQBYRLYOk9FS
a5HUVtTloXtZ2TdxCo/uerqPpuB5sBnbt31Ppir4nqkpuNKlAmfnvP53DFHVqJXz
oxW7qPOnprZdMYdvGaRRWE5ceAskDeYUW2W22qnmlhUntUOl3vD4z9O6SVzjL6Vw
leW5O0xh6WhSVY4RDboAWu/YHoQJcnF0m0lQpr0TcNIyVctYTLUW+/p3n8RsKR7u
KKJDo6XXip9n9MjqoHRkGowlJ+Y7Q7Ayyg5fNL1Ym3UuojQOFmjO4ord/I1uZvBb
dGnm5SHiX82bDuHoBjhO97qCew5nczPVkrwmPTYI0jp00jVz0ofhc/V9NOSEPQKj
ztAro5JV6g/M
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:54:55 2026 by rpki-client