This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa
File: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier: n14oosemqhBjKJdVtflWC+HpPxELkPaFWKg6Eso9Skc=
Subject key identifier: D4:2D:1D:52:59:7C:AF:54:C4:23:B8:5D:E4:55:8C:92:7A:73:E7:04
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 12FF334F88342F86EF39064157A8D22B92CD4F93
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa
Signing time: Thu 22 Jan 2026 12:00:59 +0000
ROA not before: Thu 22 Jan 2026 11:55:59 +0000
ROA not after: Thu 21 Jan 2027 12:00:59 +0000
asID: 263891
IP address blocks: 138.204.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ff:33:4f:88:34:2f:86:ef:39:06:41:57:a8:d2:2b:92:cd:4f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Jan 22 11:55:59 2026 GMT
Not After : Jan 21 12:00:59 2027 GMT
Subject: CN=D42D1D52597CAF54C423B85DE4558C927A73E704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:2f:59:49:21:8f:ee:c9:cb:e7:c8:23:15:
b5:70:48:14:1c:f1:68:e8:85:56:c1:41:59:fb:01:
ad:cd:1a:9e:3b:05:50:ee:f1:0e:93:c6:a1:af:a0:
19:a3:64:71:4c:28:54:f1:fc:25:4a:63:17:31:f6:
ea:7e:ec:04:ee:d5:d2:a4:6e:61:9a:48:2f:dd:9b:
0c:46:50:c7:db:37:cb:b8:b6:21:ec:ad:dc:8d:9f:
04:9d:dd:c4:16:7a:93:b3:d5:12:35:3a:ff:44:6b:
28:cb:c4:5b:a9:bb:7e:7e:bd:2b:8f:30:d4:9d:79:
f2:e0:15:26:83:30:a1:ef:45:57:ad:d3:4b:80:87:
8f:0f:8d:61:86:c4:d3:4c:54:be:89:5b:ac:f7:2d:
d5:4d:b8:dd:18:8f:0a:59:a6:1f:1a:74:33:2d:a9:
b6:a4:3c:19:ca:48:cb:e5:91:af:d5:a4:00:dc:76:
96:6f:91:32:ac:23:f0:b5:e3:0b:03:90:26:15:18:
33:75:79:2e:56:56:8f:e5:d3:28:c0:ea:34:a0:2c:
86:38:5c:77:cb:15:cc:d1:18:a0:de:70:59:89:62:
4b:51:f4:31:33:68:dc:2a:43:3f:e8:df:41:d3:c3:
2d:69:c5:d4:89:07:b0:2f:88:2a:5d:73:bd:eb:ce:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:1D:52:59:7C:AF:54:C4:23:B8:5D:E4:55:8C:92:7A:73:E7:04
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.50.0/24
Signature Algorithm: sha256WithRSAEncryption
26:cb:c4:80:11:f3:a5:77:cd:7d:fb:e0:2d:e3:69:dd:49:3b:
f7:6e:2b:d2:c3:2e:93:30:83:c5:b1:6e:6d:82:77:b8:11:9a:
0a:a4:cf:e6:58:3c:9d:fe:eb:fd:77:27:8a:df:f5:45:76:6e:
af:49:aa:67:36:d8:a6:26:d2:84:a6:27:a5:8b:52:ac:48:9a:
10:5a:8f:7f:b8:a4:f6:cc:2f:e3:0a:70:e7:76:33:b6:9e:94:
90:97:a4:fd:ca:bb:c1:f7:c9:65:d1:a1:3f:0f:87:ba:b3:de:
77:19:8a:ac:ed:d8:09:6a:34:56:69:bc:c0:6c:c1:a6:5d:32:
11:c1:e5:d6:72:82:bf:03:12:b9:91:0b:8f:d0:c6:7f:c2:5d:
19:52:3e:3e:60:62:24:30:39:3a:f5:6d:e1:26:0f:cf:75:14:
ea:1c:95:6c:23:00:c3:46:15:f9:df:bb:a0:33:0c:ea:0c:f2:
57:23:03:8b:52:6c:14:91:69:bf:44:7c:46:2b:99:b8:9d:81:
5e:ec:74:87:26:72:76:b0:93:50:9d:2d:2e:02:5e:ca:b9:78:
07:b5:6d:b4:55:41:2a:63:21:4c:6f:14:f7:39:b1:46:5b:0d:
66:8a:dc:c9:1b:7e:a7:b9:8d:4d:3d:88:f9:48:42:7b:8f:df:
b0:e3:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:42 2026 by rpki-client