This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
File: 3133382e3132312e37322e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier: vRIBGvvPIHdULC8x+5GyReLQiaKNgilxa/OZ2XSXEhQ=
Subject key identifier: 3B:0D:A5:C2:CA:7B:31:FE:4C:DB:ED:00:B5:4D:00:F0:D3:70:1C:A1
Certificate issuer: /CN=90E42BBB08F64935F183226430D88A8065D576AB
Certificate serial: 718D68BCB54D380720BA1C07B455E937ECE0F17E
Authority key identifier: 90:E4:2B:BB:08:F6:49:35:F1:83:22:64:30:D8:8A:80:65:D5:76:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90E42BBB08F64935F183226430D88A8065D576AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
Signing time: Sun 18 Jan 2026 05:34:24 +0000
ROA not before: Sun 18 Jan 2026 05:29:24 +0000
ROA not after: Sun 17 Jan 2027 05:34:24 +0000
asID: 52637
IP address blocks: 138.121.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/90E42BBB08F64935F183226430D88A8065D576AB.crl
rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/90E42BBB08F64935F183226430D88A8065D576AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90E42BBB08F64935F183226430D88A8065D576AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8d:68:bc:b5:4d:38:07:20:ba:1c:07:b4:55:e9:37:ec:e0:f1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90E42BBB08F64935F183226430D88A8065D576AB
Validity
Not Before: Jan 18 05:29:24 2026 GMT
Not After : Jan 17 05:34:24 2027 GMT
Subject: CN=3B0DA5C2CA7B31FE4CDBED00B54D00F0D3701CA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:57:2c:b2:4c:86:49:e4:f0:88:d6:76:40:
87:84:9d:ca:e8:2d:c3:87:f1:32:83:c7:5f:a3:db:
59:08:11:9f:af:0e:63:aa:89:4a:14:f5:04:35:48:
ab:bf:fa:fd:c7:7d:55:97:34:47:2c:2d:70:00:74:
d1:8a:b8:be:5a:df:96:71:bb:be:e4:8f:27:f4:81:
2f:8e:14:a2:dc:d3:31:33:7d:f7:e7:a9:4e:f3:bf:
8a:51:60:90:92:78:61:83:24:b1:d5:a3:ba:f4:11:
8c:ef:6c:53:fa:7e:ef:7a:75:60:31:7d:df:26:29:
14:56:3d:8e:5b:47:35:59:69:f3:27:4a:d1:10:76:
50:a2:b8:e2:71:64:ed:7d:13:81:a8:55:75:c8:d4:
58:41:7d:06:58:19:cd:b4:93:75:22:0e:57:d2:61:
8b:89:11:0f:6e:11:83:c7:c1:24:f3:9c:07:e6:97:
79:07:9a:b7:3e:69:a0:e3:d5:de:f7:22:f0:b6:15:
d6:ea:59:76:b8:c5:b9:03:09:d6:c9:cd:a7:e1:17:
1f:65:cf:1c:df:3c:f4:6a:88:2b:d1:3a:27:6b:82:
b4:17:81:7a:48:68:d1:9f:41:cf:6b:9e:ef:0b:ed:
9c:94:c4:1a:82:c2:97:6e:b7:43:70:9d:d1:74:78:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0D:A5:C2:CA:7B:31:FE:4C:DB:ED:00:B5:4D:00:F0:D3:70:1C:A1
X509v3 Authority Key Identifier:
keyid:90:E4:2B:BB:08:F6:49:35:F1:83:22:64:30:D8:8A:80:65:D5:76:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/90E42BBB08F64935F183226430D88A8065D576AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90E42BBB08F64935F183226430D88A8065D576AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.72.0/22
Signature Algorithm: sha256WithRSAEncryption
91:eb:83:cf:47:03:23:cd:9d:a1:61:a8:f7:51:55:fe:6d:fa:
26:d8:df:0c:39:ab:23:0b:a4:63:f6:da:29:e7:63:68:ff:2c:
22:f1:7a:67:ab:5d:62:fe:71:60:85:88:19:3c:82:da:f8:5a:
61:19:01:6e:a0:8c:41:8c:78:06:18:39:3c:e5:e1:56:db:93:
e2:ec:22:95:1c:51:a2:df:c7:6e:8d:42:1e:14:4b:fa:8c:0b:
9e:e0:4b:03:4c:7a:77:c0:3a:f1:12:89:70:95:98:34:6a:6d:
1f:d1:96:e8:5f:1c:64:02:f2:f1:2e:cc:2f:7b:14:54:9e:3b:
95:70:59:35:48:8e:b7:7d:b6:df:bf:98:43:09:f4:20:ef:c8:
64:72:d2:d3:9a:2f:34:8a:c4:13:5f:ce:51:0c:91:3a:29:11:
62:5b:96:18:4d:5f:c3:12:06:6b:a6:d9:60:4d:11:e2:4d:42:
67:87:c6:1d:55:dc:62:b3:7c:68:0f:78:28:86:b7:89:5c:41:
89:10:55:7d:a9:87:e7:4e:99:47:41:99:99:0a:ac:83:d1:39:
cb:f7:bc:16:29:d7:73:ea:a9:9d:d0:31:33:45:d7:b4:5d:8d:
7c:94:41:dd:d7:18:cf:51:36:ba:f3:e9:12:b7:d2:e1:92:a7:
2f:b8:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:56 2026 by rpki-client