This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/3230312e3134302e3233322e302f32322d3332203d3e203631383237.roa
File: 3230312e3134302e3233322e302f32322d3332203d3e203631383237.roa (raw, json)
Hash identifier: 1VzzLd+lHZFO56e99ALQW8fU4rPeXdLGpMgus50m1YY=
Subject key identifier: 98:B4:E4:F7:A4:64:54:13:6D:4A:B9:91:C7:24:8D:89:95:80:AE:F9
Certificate issuer: /CN=FAB287B5E62AECE651D89597FB0C5EE6A8707015
Certificate serial: 345341C28303333920D51CA58AEDCEF50D10F9E3
Authority key identifier: FA:B2:87:B5:E6:2A:EC:E6:51:D8:95:97:FB:0C:5E:E6:A8:70:70:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/3230312e3134302e3233322e302f32322d3332203d3e203631383237.roa
Signing time: Sat 10 Jan 2026 12:02:37 +0000
ROA not before: Sat 10 Jan 2026 11:57:37 +0000
ROA not after: Sat 09 Jan 2027 12:02:37 +0000
asID: 61827
IP address blocks: 201.140.232.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.crl
rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 09:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:53:41:c2:83:03:33:39:20:d5:1c:a5:8a:ed:ce:f5:0d:10:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAB287B5E62AECE651D89597FB0C5EE6A8707015
Validity
Not Before: Jan 10 11:57:37 2026 GMT
Not After : Jan 9 12:02:37 2027 GMT
Subject: CN=98B4E4F7A46454136D4AB991C7248D899580AEF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:5d:e5:3d:27:e5:78:e6:c8:07:3d:6a:d3:
b9:74:86:35:36:71:1f:51:e4:29:67:e4:fa:e0:5d:
67:10:bd:84:06:e9:46:16:64:18:86:3d:02:f4:da:
ac:b3:2c:aa:16:3a:5f:5a:d5:ac:07:06:60:10:f2:
d4:3a:fe:1c:74:bb:d6:0f:46:45:a0:27:77:91:3b:
9b:e1:77:21:b4:72:d2:5a:42:13:6b:12:4c:dd:9d:
16:bc:d5:40:5f:36:36:63:ae:12:16:d0:d9:2d:fe:
95:ff:c5:02:87:81:d4:a0:df:4a:a7:9c:5e:49:a2:
ed:6c:5e:24:f5:fb:4f:65:b7:f2:e8:d0:6a:a9:e3:
4e:15:18:87:ca:f8:27:b0:a6:40:b7:93:65:6a:a0:
ed:5a:3c:d2:21:f7:ae:ad:30:83:43:bd:b0:75:af:
03:16:14:a5:71:a9:fb:93:d2:e0:71:99:0a:ca:ad:
b8:b2:63:19:f0:99:97:b4:c7:49:a4:58:f5:a7:8f:
a7:06:e3:ae:57:45:c8:f5:19:c6:2d:bd:e5:c5:55:
61:b6:8b:b8:5d:32:fd:1f:54:1f:52:c3:d3:50:00:
90:ab:e1:c3:20:0a:12:75:ab:ab:53:bb:33:12:95:
23:d9:8a:1a:e3:78:86:21:12:7d:80:48:90:ef:12:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:E4:F7:A4:64:54:13:6D:4A:B9:91:C7:24:8D:89:95:80:AE:F9
X509v3 Authority Key Identifier:
keyid:FA:B2:87:B5:E6:2A:EC:E6:51:D8:95:97:FB:0C:5E:E6:A8:70:70:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/3230312e3134302e3233322e302f32322d3332203d3e203631383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.140.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:39:94:86:12:6e:7d:5b:9d:f6:d2:8e:e7:67:80:12:25:c7:
fb:5c:9a:96:35:5a:12:41:d6:95:83:49:e2:45:4c:38:74:bf:
fb:cb:ef:64:84:2a:80:aa:e0:c1:23:00:10:3b:e3:70:c7:cd:
ea:71:b9:b9:ae:25:b0:c4:98:d3:85:d2:f7:41:b1:ec:5b:3f:
0a:26:1e:b9:14:2d:d7:a6:78:45:2e:8a:7f:e6:c2:12:c5:68:
ef:10:d4:1d:80:53:79:a6:ff:25:38:6b:16:c8:b2:2f:57:3d:
bc:bb:48:e9:dd:49:90:3c:66:a3:16:2d:79:9f:f6:89:d1:22:
4a:30:12:d1:cb:ef:d0:eb:d5:37:b2:c6:48:8c:57:b3:a9:d1:
ce:19:75:3d:98:47:2e:1e:2a:35:00:99:f5:5c:ee:e6:99:bc:
6d:18:ad:95:75:d4:61:ac:ae:c7:47:7b:7e:8f:b6:3f:ee:c5:
55:14:9b:06:1f:96:00:e5:b3:15:74:46:3e:ac:6e:e6:df:c9:
3b:a1:37:be:57:82:ae:6e:95:65:f3:d9:f6:58:5b:c9:ea:01:
47:14:1c:ae:3f:10:c2:99:80:38:17:1f:ba:72:bc:e3:8c:db:
c2:c9:e6:80:c5:51:81:a5:f5:a7:65:10:8a:64:e9:4e:f0:d1:
e9:7e:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:58 2026 by rpki-client