This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32392e302f32342d3234203d3e203631373933.roa
File: 3230312e3133302e32392e302f32342d3234203d3e203631373933.roa (raw, json)
Hash identifier: GwrYc7SpOYAs3Tu7JLmIVEnT30gP3yG9gu1hD3QguaY=
Subject key identifier: DE:33:F7:D0:30:E8:A4:10:F1:50:DF:E6:8E:32:8B:C2:5D:D7:92:4B
Certificate issuer: /CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
Certificate serial: 06FBA1D17EE97D7764CEA268BFE7FA532A1461D7
Authority key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32392e302f32342d3234203d3e203631373933.roa
Signing time: Fri 23 Jan 2026 16:43:16 +0000
ROA not before: Fri 23 Jan 2026 16:38:16 +0000
ROA not after: Fri 22 Jan 2027 16:43:16 +0000
asID: 61793
IP address blocks: 201.130.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl
rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 22:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fb:a1:d1:7e:e9:7d:77:64:ce:a2:68:bf:e7:fa:53:2a:14:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
Validity
Not Before: Jan 23 16:38:16 2026 GMT
Not After : Jan 22 16:43:16 2027 GMT
Subject: CN=DE33F7D030E8A410F150DFE68E328BC25DD7924B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:3a:f5:49:b6:d0:0e:1b:26:f2:35:a1:86:
3b:f4:04:63:51:eb:3c:8b:8d:a5:9e:c5:f9:cc:ef:
19:dc:b6:27:47:45:31:ba:ce:99:8d:4a:c4:12:d1:
ae:fc:5e:01:e0:68:91:dc:5c:c8:51:dd:5b:c9:d9:
2b:e9:97:37:f8:e4:81:0c:27:a8:68:84:c2:6a:0f:
80:df:11:33:77:25:64:de:52:88:6b:15:50:4f:ed:
60:0d:1b:c5:0f:d2:98:5b:e7:b9:f1:35:39:67:79:
a0:f8:de:49:82:59:cf:84:43:60:f3:77:c4:79:9b:
ed:73:3c:ab:38:43:db:45:92:14:ff:c8:26:ea:8f:
99:27:17:b8:56:6e:0d:c8:12:c9:b4:fa:c7:4f:85:
a8:f7:6b:0a:c6:f0:a8:f1:34:9f:3f:76:63:c6:2c:
0b:4b:55:3d:0c:7a:04:b1:d7:c8:69:67:b5:17:f2:
fd:5b:8f:ee:0c:c5:b4:3a:7b:a6:d0:4e:16:61:22:
9d:c7:d4:02:80:e5:d8:76:43:b7:41:4b:4a:44:84:
ce:a8:ec:c9:d2:f2:a8:00:b1:09:e7:4a:21:8b:70:
cf:e3:c0:62:fe:6c:f7:42:4c:f0:db:e2:75:27:31:
bf:16:1d:19:5c:bd:05:81:f6:1e:79:04:f0:c8:c5:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:F7:D0:30:E8:A4:10:F1:50:DF:E6:8E:32:8B:C2:5D:D7:92:4B
X509v3 Authority Key Identifier:
keyid:AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32392e302f32342d3234203d3e203631373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.130.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5d:9b:a3:2b:2c:4d:38:9d:28:e4:35:be:30:a2:a4:20:58:
24:a2:b7:e1:aa:ab:98:ac:36:c3:8c:f2:27:3d:72:77:96:02:
1d:0d:af:11:fc:29:08:99:12:e8:28:c1:94:41:d4:4e:9a:ff:
ae:5e:54:5a:c3:09:88:7c:a1:1f:04:d6:6a:6a:f1:83:88:47:
d0:99:03:35:88:a9:b6:4e:3a:64:f9:23:9f:6c:23:89:47:c5:
12:55:3a:60:3e:bb:ad:72:0e:89:e7:40:bb:f4:1c:28:0c:49:
9b:c5:97:a6:03:f4:72:bb:b4:70:8b:04:24:9c:e6:28:d9:2d:
83:1b:b5:59:f7:0a:0d:79:20:c7:02:08:59:25:71:dd:49:4e:
9a:24:3a:c5:ed:08:ca:f9:d7:0f:50:0f:d1:76:78:05:06:e6:
3a:40:77:7b:19:fd:25:fe:9a:f8:0e:64:9f:53:bf:5e:28:6e:
a4:0d:1e:83:6c:97:62:18:d4:70:02:d7:7d:20:87:79:d6:08:
0e:d1:e1:4f:75:18:ac:ce:58:d1:60:f1:d6:8e:5e:86:60:11:
e0:cc:4c:ba:8f:d7:94:9b:9c:f7:3a:af:3b:73:36:32:71:91:
96:6d:e9:09:18:e4:34:53:34:c2:5a:15:a7:39:76:16:79:2d:
6f:1d:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:12 2026 by rpki-client