This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
File: 3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa (raw, json)
Hash identifier: yGN0s88KE6yC4jvfM5nD9znIkBAUi9jRnqsdZJUTnxs=
Subject key identifier: 50:5E:EB:05:B4:AF:B5:4D:2B:F0:01:9B:00:31:AE:8E:96:1B:9A:BC
Certificate issuer: /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial: 3239C79A0CFFB0BB0371990DA0751E153990B1CB
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
Signing time: Sat 10 Jan 2026 16:29:14 +0000
ROA not before: Sat 10 Jan 2026 16:24:14 +0000
ROA not after: Sat 09 Jan 2027 16:29:14 +0000
asID: 263920
IP address blocks: 138.185.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 04:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:39:c7:9a:0c:ff:b0:bb:03:71:99:0d:a0:75:1e:15:39:90:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Validity
Not Before: Jan 10 16:24:14 2026 GMT
Not After : Jan 9 16:29:14 2027 GMT
Subject: CN=505EEB05B4AFB54D2BF0019B0031AE8E961B9ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:4a:59:66:a5:7b:e8:b8:9b:9c:1e:3d:b5:
f5:07:b8:12:0b:a8:f2:92:9b:d1:46:55:64:5a:8b:
45:86:ed:f3:51:70:b9:a6:14:11:d7:7c:41:44:ff:
54:da:4e:c5:36:fd:a7:ec:29:82:3b:96:44:ee:d4:
22:ba:d7:0b:c9:4b:44:d0:e3:0a:f3:fa:33:66:27:
3e:e6:4d:44:75:be:6b:7a:d9:91:00:d0:6d:e5:db:
95:84:b8:6e:33:60:cc:70:cd:e7:17:56:cc:62:fa:
20:e0:17:2d:45:98:b5:14:21:ac:49:e4:e7:9c:13:
a6:1a:0c:90:e7:36:86:e8:0d:81:a4:e5:84:e8:0f:
fe:ed:70:80:4e:fd:2e:fe:4a:ac:1b:f8:05:4b:0b:
fe:a7:d4:a1:cb:72:fa:16:a2:9f:40:ce:07:7e:93:
68:8f:19:f5:d6:2c:78:64:a6:d8:31:56:33:3c:db:
43:57:cd:46:ae:b0:79:df:a8:c5:18:cc:9d:27:75:
db:9b:3f:83:74:62:ab:13:20:35:fe:6c:eb:78:c4:
3c:e1:bf:c1:e8:77:96:ca:77:f4:0f:f9:99:2d:c2:
81:93:9e:ee:bb:12:27:25:ca:98:52:f4:f1:cc:67:
b2:d3:d2:a7:a5:ac:76:cb:ab:56:bf:51:20:10:9e:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:EB:05:B4:AF:B5:4D:2B:F0:01:9B:00:31:AE:8E:96:1B:9A:BC
X509v3 Authority Key Identifier:
keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.240.0/22
Signature Algorithm: sha256WithRSAEncryption
96:21:10:50:83:e2:dc:63:ce:ce:c4:76:c3:65:a0:2f:08:33:
14:d1:b0:8a:15:3b:f6:2a:65:15:f8:10:fc:78:34:72:22:11:
26:bd:3c:fd:2d:1f:a1:39:f4:eb:1b:f4:65:c0:ea:64:ec:bd:
a5:60:be:86:75:ca:f5:d5:4f:b5:d4:62:2a:fc:16:f3:ff:f2:
4b:08:51:28:4e:7a:40:21:ce:34:63:00:73:75:78:5f:de:31:
cd:71:11:41:c7:ff:6a:2d:66:03:47:28:b8:94:be:ae:64:11:
3e:e0:96:d4:41:a5:fa:8f:88:c7:60:d5:96:09:97:ed:ac:d8:
ba:a9:58:a1:b6:f2:9c:d8:7d:b3:a4:5a:62:5b:7c:44:15:8c:
d0:ed:75:43:a8:5a:5c:22:96:8a:13:65:0d:2b:d3:19:81:cc:
c9:72:b1:40:a7:01:a2:84:76:26:34:2c:bc:c7:43:00:09:0a:
7d:1b:50:69:3f:3c:39:81:79:9a:d0:ee:51:a2:e4:64:ea:a9:
1d:e7:45:cb:93:09:87:f8:b3:e9:7e:e8:ff:b7:86:29:52:7a:
98:86:db:0d:2d:8a:59:fa:86:7e:57:fb:7e:f7:2e:67:f8:5f:
2b:05:a8:fb:cd:d1:a4:08:36:62:36:77:d2:a4:45:12:be:8e:
ed:00:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:22 2026 by rpki-client