This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa
File: 3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa (raw, json)
Hash identifier: ay8kr3rZ8NQsxUA5TLjv78BN11lKNDgWf3X+Bb8x3yg=
Subject key identifier: AB:E1:0D:4F:69:83:EB:B4:30:90:E7:32:AE:FD:DE:F5:C2:DD:A9:39
Certificate issuer: /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial: 5DDEF96B58DE7DFD242A0841EB05F07F720A0848
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa
Signing time: Tue 20 Jan 2026 13:27:56 +0000
ROA not before: Tue 20 Jan 2026 13:22:56 +0000
ROA not after: Tue 19 Jan 2027 13:27:56 +0000
asID: 267003
IP address blocks: 191.240.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 06:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:de:f9:6b:58:de:7d:fd:24:2a:08:41:eb:05:f0:7f:72:0a:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Validity
Not Before: Jan 20 13:22:56 2026 GMT
Not After : Jan 19 13:27:56 2027 GMT
Subject: CN=ABE10D4F6983EBB43090E732AEFDDEF5C2DDA939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:36:52:5d:29:4f:53:1a:b5:92:07:0b:c3:
62:80:cc:21:c7:ae:79:22:8f:33:5e:60:20:67:11:
78:ec:6f:70:22:17:37:09:c1:0d:cb:57:b1:e8:7f:
5c:89:95:18:06:88:18:e1:f1:f0:cc:1b:1c:cd:86:
98:35:07:8d:69:2a:28:6a:86:d8:c7:82:5b:c6:26:
a9:0d:bf:1d:70:3b:77:ff:7d:22:2a:af:18:62:ec:
65:e7:14:6c:99:67:3d:bd:bf:69:a5:98:aa:e0:3e:
2a:45:32:a5:de:7f:e3:82:2c:61:99:79:d6:58:d4:
56:5d:ef:8f:6d:ec:37:b2:5a:be:fe:37:60:6d:af:
e3:df:3f:04:38:92:e8:d6:8f:39:9b:90:29:25:b8:
fa:f2:f0:f6:48:47:6a:fc:32:24:31:68:68:fe:63:
d6:ba:ed:e9:35:66:44:ee:3d:8b:08:46:0a:78:ef:
7e:d4:e7:84:5c:75:97:5d:40:48:50:ec:07:62:9e:
c0:f6:69:6b:00:6b:6e:3e:0b:12:43:fd:a3:32:28:
51:34:69:be:9b:6a:e7:e2:b0:55:37:16:33:63:52:
ec:a1:07:ff:05:cd:ab:ec:e3:7d:2a:03:13:7b:5f:
ff:cb:33:a0:3e:03:41:dd:38:5e:67:98:c2:9b:34:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E1:0D:4F:69:83:EB:B4:30:90:E7:32:AE:FD:DE:F5:C2:DD:A9:39
X509v3 Authority Key Identifier:
keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.208.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:cd:2b:f8:7e:bc:98:a8:6c:29:5a:3b:12:c6:ef:8a:c0:56:
25:0d:77:ec:7a:16:d5:10:15:e1:c3:26:d4:03:ad:20:21:cf:
04:2b:24:33:4d:16:98:0b:48:16:35:af:11:6c:d8:9b:97:2b:
d8:32:e6:9a:1c:7b:af:23:37:89:97:1b:c3:86:ea:7c:13:69:
79:9b:ee:31:70:48:0b:bb:f7:01:7d:4e:64:48:71:55:c9:7e:
ce:88:f6:fb:74:5c:35:74:89:64:64:5d:02:b3:77:fb:f1:21:
4f:f6:10:5f:11:0b:44:1d:08:c3:bb:4a:29:1f:57:70:42:f0:
7a:6d:04:e8:bf:27:59:b1:18:26:f6:05:d9:e3:de:6e:b8:2e:
20:1d:73:70:61:37:40:b2:02:ec:91:04:72:8e:a7:c2:ba:ec:
ee:3b:59:2d:08:ca:7b:33:b3:90:80:8c:a6:98:43:be:eb:cf:
4d:22:45:6e:f7:91:47:3d:cb:8a:c7:c5:4c:ff:f7:4e:45:61:
6e:38:53:33:13:be:c2:e5:33:aa:6d:b0:b3:98:91:09:3e:53:
c8:74:80:71:20:c1:63:1f:12:10:35:b1:c9:24:26:b8:e6:e9:
5b:74:1f:75:17:4d:cf:04:b2:05:45:6e:d4:8e:76:54:38:9a:
c8:a4:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:08 2026 by rpki-client