This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa
File: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (raw, json)
Hash identifier: boAtywzXo3l+O3coO5VXODkAwWQ2OHFkhLmylrZ/V9w=
Subject key identifier: 4E:C3:BF:54:18:B1:02:68:23:49:1D:17:70:A7:4D:5D:03:D9:AB:8D
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 1B9A06033D478C9307DD68FEF790121826665D8F
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa
Signing time: Thu 22 Jan 2026 12:01:00 +0000
ROA not before: Thu 22 Jan 2026 11:56:00 +0000
ROA not after: Thu 21 Jan 2027 12:01:00 +0000
asID: 263891
IP address blocks: 138.204.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:9a:06:03:3d:47:8c:93:07:dd:68:fe:f7:90:12:18:26:66:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Jan 22 11:56:00 2026 GMT
Not After : Jan 21 12:01:00 2027 GMT
Subject: CN=4EC3BF5418B1026823491D1770A74D5D03D9AB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:a3:f2:9d:e5:b4:90:23:37:21:ec:6e:45:
df:70:45:3b:03:72:cc:17:2d:92:60:a0:25:04:18:
23:9d:21:3f:ea:a8:10:0b:ff:b4:eb:d5:bd:19:e9:
39:97:70:2c:ff:da:e3:e4:36:d1:19:2f:29:bc:6c:
43:9d:bb:1d:5f:f9:9a:37:3a:86:a1:c1:31:6e:c4:
1f:ad:1a:b2:58:a7:9f:6e:53:5b:c1:17:ee:d7:29:
6d:b4:57:97:f9:18:01:16:17:03:47:4b:02:69:aa:
61:0f:e1:b2:92:aa:0d:7d:92:30:8b:bd:b6:de:b4:
69:9e:9c:38:67:03:7a:f8:cd:46:32:a7:0f:27:dd:
a7:63:32:aa:c6:93:4d:04:e2:0f:d8:47:e6:6a:2d:
3a:19:a3:63:65:a9:55:b7:e2:d2:9a:ec:f1:88:4b:
a7:85:16:fe:e3:72:bc:39:09:8a:9c:e4:a1:3f:03:
ad:1e:e5:ea:ee:5d:c7:cc:88:83:a6:49:ac:8d:11:
d8:54:93:6a:51:ca:3a:17:94:f3:a1:9b:44:4f:d2:
91:be:84:a2:66:c2:9f:96:57:c1:ee:be:88:6d:32:
08:05:05:d3:88:a7:f6:dc:3c:51:05:bb:65:6b:6a:
ef:6d:10:9d:04:d5:7a:07:b4:d0:7f:b9:f7:07:72:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C3:BF:54:18:B1:02:68:23:49:1D:17:70:A7:4D:5D:03:D9:AB:8D
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.50.0/23
Signature Algorithm: sha256WithRSAEncryption
00:d6:77:2d:dc:86:0c:3c:fc:27:94:83:02:cc:63:4b:6a:cb:
33:29:34:3d:fb:ed:b5:77:ed:2c:f9:bb:76:83:73:7a:41:8d:
45:e7:57:6c:2b:de:50:9d:da:bc:20:98:07:79:2b:79:f9:fc:
e1:84:4d:01:f5:ed:19:21:04:25:92:db:46:33:79:e8:40:2a:
9d:52:bf:76:99:b0:48:0f:0c:e1:14:6f:12:30:1d:c6:0a:64:
25:58:77:48:8f:16:ad:cc:95:ed:a0:01:31:c4:2e:35:b1:84:
a3:a3:1a:a7:fa:b2:51:fa:0d:3d:4f:80:02:ca:00:17:47:f6:
ba:7f:0c:0e:b4:38:15:c1:3f:dd:b4:b2:b3:3c:2a:7d:5e:b9:
eb:6d:60:f0:c0:dd:8a:aa:20:aa:66:b3:7d:28:f5:ac:8c:d7:
a9:41:83:da:5a:69:b4:45:5b:76:83:8a:ec:50:9d:93:29:81:
1f:96:2f:b2:5e:d7:d7:51:7b:b9:fa:93:5d:f2:e8:23:f6:0c:
1b:36:ce:95:e2:dd:d8:94:58:e9:4c:b4:be:00:b0:49:ad:22:
d6:52:b9:d4:bd:8d:1a:2e:af:23:f7:90:4b:34:c2:a8:f6:9d:
cf:59:ea:5d:61:71:7c:ae:db:3e:13:3e:5d:c5:2b:04:f4:11:
49:12:d5:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG5oGAz1HjJMH3Wj+95ASGCZmXY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx
QjAyRjM5MDAeFw0yNjAxMjIxMTU2MDBaFw0yNzAxMjExMjAxMDBaMDMxMTAvBgNV
BAMTKDRFQzNCRjU0MThCMTAyNjgyMzQ5MUQxNzcwQTc0RDVEMDNEOUFCOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoaPyneW0kCM3IexuRd9wRTsD
cswXLZJgoCUEGCOdIT/qqBAL/7Tr1b0Z6TmXcCz/2uPkNtEZLym8bEOdux1f+Zo3
OoahwTFuxB+tGrJYp59uU1vBF+7XKW20V5f5GAEWFwNHSwJpqmEP4bKSqg19kjCL
vbbetGmenDhnA3r4zUYypw8n3adjMqrGk00E4g/YR+ZqLToZo2NlqVW34tKa7PGI
S6eFFv7jcrw5CYqc5KE/A60e5eruXcfMiIOmSayNEdhUk2pRyjoXlPOhm0RP0pG+
hKJmwp+WV8HuvohtMggFBdOIp/bcPFEFu2Vrau9tEJ0E1XoHtNB/ufcHcnIzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTsO/VBixAmgjSR0XcKdNXQPZq40wHwYDVR0j
BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV
NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB
OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv
MzEzMzM4MmUzMjMwMzQyZTM1MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzODM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKzDIwDQYJKoZIhvcNAQELBQADggEBAADWdy3c
hgw8/CeUgwLMY0tqyzMpND377bV37Sz5u3aDc3pBjUXnV2wr3lCd2rwgmAd5K3n5
/OGETQH17RkhBCWS20YzeehAKp1Sv3aZsEgPDOEUbxIwHcYKZCVYd0iPFq3Mle2g
ATHELjWxhKOjGqf6slH6DT1PgALKABdH9rp/DA60OBXBP920srM8Kn1euettYPDA
3YqqIKpms30o9ayM16lBg9paabRFW3aDiuxQnZMpgR+WL7Je19dRe7n6k13y6CP2
DBs2zpXi3diUWOlMtL4AsEmtItZSudS9jRouryP3kEs0wqj2nc9Z6l1hcXyu2z4T
Pl3FKwT0EUkS1c0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:09 2026 by rpki-client