This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32332d3233203d3e203631373933.roa
File: 3230312e3133302e32382e302f32332d3233203d3e203631373933.roa (raw, json)
Hash identifier: 9N/yY5xSgudsEsolG/pBkhgACjFcaRjOcxdoqF/fIbs=
Subject key identifier: FD:EF:94:BF:7B:AF:87:D0:0D:94:40:2B:6E:80:5A:C4:E5:D2:ED:15
Certificate issuer: /CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
Certificate serial: 26AF461062996F6960C98AB6043D9DAB83A1BE06
Authority key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32332d3233203d3e203631373933.roa
Signing time: Fri 23 Jan 2026 16:43:16 +0000
ROA not before: Fri 23 Jan 2026 16:38:16 +0000
ROA not after: Fri 22 Jan 2027 16:43:16 +0000
asID: 61793
IP address blocks: 201.130.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl
rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 22:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:af:46:10:62:99:6f:69:60:c9:8a:b6:04:3d:9d:ab:83:a1:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
Validity
Not Before: Jan 23 16:38:16 2026 GMT
Not After : Jan 22 16:43:16 2027 GMT
Subject: CN=FDEF94BF7BAF87D00D94402B6E805AC4E5D2ED15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:cd:d6:2d:63:77:67:47:43:42:f0:60:1e:
02:40:95:4f:a1:7d:5a:45:52:fa:06:4b:6b:c1:5e:
50:c0:7f:7a:2f:57:a0:ef:10:e0:77:38:1d:e1:69:
56:df:71:f2:b9:d5:d6:02:ac:34:bf:c4:6b:4c:50:
28:8c:0c:db:ff:6c:1f:c2:46:a3:95:0e:60:62:7c:
f8:ef:4f:23:8f:b7:86:71:ec:c3:98:1f:d3:0f:5a:
93:1e:6c:fc:39:cb:b9:7c:a8:ee:20:b8:0c:26:44:
ab:ca:d5:fb:b2:9f:d9:c0:35:5c:3f:7c:e9:fb:35:
27:0e:e4:3a:00:63:83:1f:9f:26:0f:2b:1d:6e:a5:
79:e8:9e:1f:23:d4:62:96:ca:f5:3f:b2:81:bb:42:
c0:26:e3:f1:d6:1b:e5:0f:7b:27:08:f2:08:96:a6:
67:a0:0f:21:d3:28:20:ed:5a:39:95:d4:65:43:15:
2e:ab:96:c3:b0:57:1e:f4:30:21:7d:95:f9:27:96:
4f:55:96:1b:37:6a:ce:95:cc:fa:62:3b:aa:62:9a:
6d:9d:71:88:0d:16:ed:64:a2:e4:f5:34:80:9a:17:
f0:90:29:dc:b2:88:bc:4b:29:c0:a4:c1:19:7a:61:
33:c3:bf:32:fb:c5:e4:a6:13:ae:9c:56:38:97:9d:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:94:BF:7B:AF:87:D0:0D:94:40:2B:6E:80:5A:C4:E5:D2:ED:15
X509v3 Authority Key Identifier:
keyid:AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32332d3233203d3e203631373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.130.28.0/23
Signature Algorithm: sha256WithRSAEncryption
95:67:23:66:66:5b:d0:1d:94:5c:a5:c2:cb:08:63:8a:93:7e:
c0:3a:3f:f1:cf:4b:1b:92:d6:7c:2c:25:d9:7a:e3:1d:c0:cd:
5b:22:42:97:29:d4:e8:f9:82:fa:88:6e:be:87:7c:b1:f7:1e:
70:08:d1:af:c4:d3:c0:65:b1:db:7f:fe:20:46:4f:b0:56:56:
f3:43:63:99:ff:65:83:2b:8f:19:ba:34:ed:41:c8:e0:c5:e1:
08:5d:52:7f:4e:31:d5:8b:5c:01:cc:f6:7a:81:9e:f9:29:16:
f1:3d:b8:58:86:75:b6:e9:56:b4:a7:02:ec:14:58:6d:e8:53:
87:22:dc:60:32:e8:00:99:40:48:e1:06:c7:cb:2f:b5:1b:46:
7e:29:2d:76:80:18:62:67:1e:84:4e:e4:63:46:af:b4:80:1a:
52:43:da:13:a0:7d:73:13:62:47:2a:b0:23:55:a4:cb:f4:db:
49:77:13:0b:22:97:df:2b:cf:e2:3b:8b:a5:a6:58:68:c1:15:
6b:9c:6b:ac:a7:fa:16:0e:db:a3:a0:09:57:c4:7b:90:5d:1d:
6a:82:e4:07:67:d5:d2:c1:3a:21:8d:7e:4e:61:da:8b:dc:e3:
60:b9:10:a0:96:f5:64:66:5c:05:ff:80:63:c5:71:62:ff:8e:
db:77:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:23 2026 by rpki-client