This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
File: 3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (raw, json)
Hash identifier: MbaZbO0dSet4MJuYf4z3E0rWSfNDnbLuPdALAgu2DkU=
Subject key identifier: 9F:EF:EE:96:BD:E1:58:80:BF:AC:B1:C8:43:31:6C:DB:81:5E:22:8A
Certificate issuer: /CN=84FD8F1989410A974714F8A8E867D28365445A3B
Certificate serial: 2FA3FC872CB6E9DB8BE67F495756D3D1FADA595B
Authority key identifier: 84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
Signing time: Mon 05 Jan 2026 18:12:11 +0000
ROA not before: Mon 05 Jan 2026 18:07:11 +0000
ROA not after: Mon 04 Jan 2027 18:12:11 +0000
asID: 265011
IP address blocks: 170.84.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl
rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 02:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a3:fc:87:2c:b6:e9:db:8b:e6:7f:49:57:56:d3:d1:fa:da:59:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84FD8F1989410A974714F8A8E867D28365445A3B
Validity
Not Before: Jan 5 18:07:11 2026 GMT
Not After : Jan 4 18:12:11 2027 GMT
Subject: CN=9FEFEE96BDE15880BFACB1C843316CDB815E228A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:b4:6a:4e:dd:63:a1:f5:c0:70:7d:01:ef:
27:d4:cb:e0:cf:77:b5:b4:fa:ab:21:60:92:21:b4:
4a:47:3d:68:51:a0:8c:a4:9c:14:e7:b1:44:51:0e:
35:e6:d7:0b:65:f2:e5:56:c6:0a:c0:85:09:3e:c9:
fc:67:62:82:f4:6e:61:61:eb:f5:39:d5:e3:52:e1:
af:95:1a:3c:2f:54:ef:81:7c:15:5d:1a:0b:2a:45:
09:ff:61:2e:70:e5:5d:cf:a0:39:e1:73:22:e3:21:
d2:9e:d2:c6:f2:64:f5:00:ef:95:0a:48:3d:aa:b1:
b5:46:e6:b3:9e:b8:7f:3d:fa:a6:10:a9:73:bb:3d:
5f:5c:21:ee:e5:df:08:bd:11:77:63:98:7b:28:57:
3b:a2:63:eb:f5:48:6a:48:86:50:0f:a5:e2:05:5a:
8f:46:30:5f:99:52:19:87:60:1c:96:15:62:0e:d3:
d9:4a:9b:25:1e:75:2a:dd:0a:60:b3:b4:b0:db:31:
50:fc:95:04:0d:a5:37:58:79:ad:b1:a9:40:68:4d:
58:c2:ff:d8:a3:7a:2a:0f:80:69:21:60:ec:37:c7:
81:08:4b:27:2c:db:fd:4d:24:79:0c:96:75:74:cc:
8d:6f:c1:ac:63:6f:41:bb:df:64:5f:e8:c8:8d:c2:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:EE:96:BD:E1:58:80:BF:AC:B1:C8:43:31:6C:DB:81:5E:22:8A
X509v3 Authority Key Identifier:
keyid:84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.148.0/22
Signature Algorithm: sha256WithRSAEncryption
07:32:12:f8:1d:a3:61:c8:6c:45:f7:fc:64:79:71:ab:b2:5e:
18:25:c0:84:6b:ef:ab:27:7d:e4:c7:4d:bc:ee:eb:26:0f:6d:
18:b4:98:64:76:fa:64:c5:3b:ed:83:27:b3:55:e8:1d:15:1c:
29:28:32:85:c8:76:33:47:a6:e4:0d:24:0c:fa:7e:3b:a6:74:
08:30:1a:1a:b2:77:67:db:42:03:5f:16:a8:24:8f:6f:88:97:
bf:51:16:0d:7d:8f:c6:a3:8a:c5:17:43:9d:81:0a:55:9d:76:
c9:c1:7d:b4:0a:58:af:37:20:ab:b8:28:1e:32:29:c9:4c:69:
95:ce:ce:6a:79:28:39:dd:40:2e:4c:2d:5a:07:be:45:78:e7:
76:f2:0a:ce:1c:f9:d5:8e:2e:71:fa:f4:b8:41:da:e3:90:1e:
bc:50:ca:1e:4d:0f:d8:02:82:a4:41:7e:6f:85:10:d2:6b:1a:
19:c2:d8:53:eb:c9:1a:05:e5:b6:bc:6b:f1:c6:bc:b4:4d:b3:
62:3c:cc:47:4a:4d:04:7b:d1:51:59:0f:ab:e2:c8:7e:b2:92:
71:43:98:0a:ea:1b:c3:f1:58:57:0a:b1:3f:eb:fb:cb:ae:d7:
87:6e:7c:bd:0e:3d:2e:99:6b:c5:ec:ab:2a:ea:e0:df:75:f0:
60:7d:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:22 2026 by rpki-client