This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/3138312e3138392e31332e302f32342d3234203d3e20323731353139.roa
File: 3138312e3138392e31332e302f32342d3234203d3e20323731353139.roa (raw, json)
Hash identifier: QtP+kqpJxZj57qdjzXGNqxmcq50joZwhYxowTr/yvU8=
Subject key identifier: 3C:BA:9F:00:27:28:25:C5:89:69:20:F1:76:56:6B:29:2A:EF:24:06
Certificate issuer: /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial: 541F0A00907AFB9226FC0D2D1111A40CDB75C02D
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/3138312e3138392e31332e302f32342d3234203d3e20323731353139.roa
Signing time: Fri 09 Jan 2026 20:00:20 +0000
ROA not before: Fri 09 Jan 2026 19:55:20 +0000
ROA not after: Fri 08 Jan 2027 20:00:20 +0000
asID: 271519
IP address blocks: 181.189.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1f:0a:00:90:7a:fb:92:26:fc:0d:2d:11:11:a4:0c:db:75:c0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Validity
Not Before: Jan 9 19:55:20 2026 GMT
Not After : Jan 8 20:00:20 2027 GMT
Subject: CN=3CBA9F00272825C5896920F176566B292AEF2406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:20:50:f9:57:a4:77:a3:d2:21:83:e8:4d:
5d:12:8b:a3:b7:6d:73:3c:78:cb:d9:db:54:8b:da:
8b:f6:c3:3c:98:97:f8:a0:01:98:ba:19:3c:97:02:
bc:d1:b1:7a:72:ef:63:fa:92:2b:f1:fe:83:99:0d:
0a:a1:3f:6c:f0:f2:b1:4f:3f:96:b6:c9:de:97:5a:
30:9e:9f:57:8b:04:0d:6e:31:40:de:c2:d7:c6:11:
0e:e6:92:15:93:6c:60:37:14:20:da:03:8d:d2:83:
82:10:cc:d3:ed:cd:0d:41:d4:b5:65:12:10:2c:08:
11:26:e7:94:13:9a:c1:df:ef:a3:ef:0c:06:a3:80:
40:23:db:98:69:11:13:0f:79:b4:17:5d:16:e3:a4:
a8:1a:81:2a:fd:28:b7:65:d9:b3:5a:46:fb:81:9b:
76:62:11:5f:67:55:ec:53:ad:5c:48:80:5b:7a:9d:
33:31:d2:7a:84:e3:2f:8e:a1:f9:cd:82:b0:b3:58:
52:20:66:75:b8:b8:da:b1:a4:47:ee:ef:e9:89:44:
eb:a2:36:6f:09:3d:8f:e3:42:aa:21:43:c9:2b:8e:
64:ac:11:40:cd:4e:62:89:bc:9a:97:27:0e:c6:25:
86:47:00:77:77:83:e2:51:04:31:64:a3:31:8c:b8:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:9F:00:27:28:25:C5:89:69:20:F1:76:56:6B:29:2A:EF:24:06
X509v3 Authority Key Identifier:
keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/3138312e3138392e31332e302f32342d3234203d3e20323731353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ff:7b:93:df:ae:ac:da:30:fc:14:33:cd:08:cf:e2:7d:fa:
fe:e8:05:2a:5e:4d:58:d7:59:00:ef:4a:40:05:59:19:77:6c:
2a:08:3b:4d:24:4c:eb:65:86:8e:36:c8:ff:0f:0f:e4:52:9c:
2b:74:bc:c3:3a:4f:7a:50:68:2b:be:f3:57:93:80:6a:1a:29:
25:67:85:d6:64:96:f3:65:66:c5:20:65:3c:35:ab:03:31:5b:
ad:73:70:8f:28:d0:b0:81:c3:72:2c:9a:dd:89:4e:57:8e:f2:
96:cd:bf:74:d7:43:e0:ab:1c:9a:85:4e:ff:fb:01:f7:25:77:
35:d7:47:cd:3e:18:7b:16:76:4d:5d:a6:a7:8b:88:e5:19:b1:
fd:2d:f4:29:1b:a9:8c:7d:e0:40:64:dd:28:7b:a6:61:f2:65:
5c:97:f6:17:4e:91:05:68:89:0a:50:20:c3:43:41:82:3a:73:
15:e9:22:cb:60:bc:a5:85:c4:30:d8:47:c1:55:91:77:90:00:
76:1b:da:a6:1f:24:69:36:7c:eb:b0:51:14:53:d1:4c:36:7e:
6c:99:a6:66:b2:bc:9f:28:ae:a1:20:77:68:6b:29:0f:98:a0:
c0:16:0e:e3:38:fe:ab:a5:2b:65:50:12:0c:c0:2c:29:72:ec:
03:d7:a9:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVB8KAJB6+5Im/A0tERGkDNt1wC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVGODg3RjgyMzVCNUY3QTEzREVDQUNBRUM4Qzk0MEE3
NDBCRjQ4MDAeFw0yNjAxMDkxOTU1MjBaFw0yNzAxMDgyMDAwMjBaMDMxMTAvBgNV
BAMTKDNDQkE5RjAwMjcyODI1QzU4OTY5MjBGMTc2NTY2QjI5MkFFRjI0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk9yBQ+Vekd6PSIYPoTV0Si6O3
bXM8eMvZ21SL2ov2wzyYl/igAZi6GTyXArzRsXpy72P6kivx/oOZDQqhP2zw8rFP
P5a2yd6XWjCen1eLBA1uMUDewtfGEQ7mkhWTbGA3FCDaA43Sg4IQzNPtzQ1B1LVl
EhAsCBEm55QTmsHf76PvDAajgEAj25hpERMPebQXXRbjpKgagSr9KLdl2bNaRvuB
m3ZiEV9nVexTrVxIgFt6nTMx0nqE4y+OofnNgrCzWFIgZnW4uNqxpEfu7+mJROui
Nm8JPY/jQqohQ8krjmSsEUDNTmKJvJqXJw7GJYZHAHd3g+JRBDFkozGMuDyFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPLqfACcoJcWJaSDxdlZrKSrvJAYwHwYDVR0j
BBgwFoAULviH+CNbX3oT3srK7IyUCnQL9IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVBHTmdleDJ4b1llVVlkQ0JiRGhNakRNYVI3RUNMTVFxaFg5aHNLcHpB
S2MvMC8yRUY4ODdGODIzNUI1RjdBMTNERUNBQ0FFQzhDOTQwQTc0MEJGNDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRjg4N0Y4MjM1QjVGN0Ex
M0RFQ0FDQUVDOEM5NDBBNzQwQkY0ODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FQR05nZXgyeG9ZZVVZZENCYkRoTWpETWFSN0VDTE1RcWhYOWhzS3B6QUtjLzAv
MzEzODMxMmUzMTM4MzkyZTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vQ0wDQYJKoZIhvcNAQELBQADggEBAIz/e5Pf
rqzaMPwUM80Iz+J9+v7oBSpeTVjXWQDvSkAFWRl3bCoIO00kTOtlho42yP8PD+RS
nCt0vMM6T3pQaCu+81eTgGoaKSVnhdZklvNlZsUgZTw1qwMxW61zcI8o0LCBw3Is
mt2JTleO8pbNv3TXQ+CrHJqFTv/7AfcldzXXR80+GHsWdk1dpqeLiOUZsf0t9Ckb
qYx94EBk3Sh7pmHyZVyX9hdOkQVoiQpQIMNDQYI6cxXpIstgvKWFxDDYR8FVkXeQ
AHYb2qYfJGk2fOuwURRT0Uw2fmyZpmayvJ8orqEgd2hrKQ+YoMAWDuM4/qulK2VQ
EgzALCly7APXqYM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:53 2026 by rpki-client