This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
File: 3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa (raw, json)
Hash identifier: 6nSai82BJaPNq4K0RNqFhJyBOx580X/jd/bg/z91oVQ=
Subject key identifier: FD:1B:BC:27:22:33:76:AE:A0:5B:A1:D2:1D:7D:E3:A7:97:21:A2:1A
Certificate issuer: /CN=D57E60B6D121559190E71D8B78977B6B3567A1F3
Certificate serial: 32B51F2CD84D32D5C0B5CEA42A1C4F92CD7D83FA
Authority key identifier: D5:7E:60:B6:D1:21:55:91:90:E7:1D:8B:78:97:7B:6B:35:67:A1:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57E60B6D121559190E71D8B78977B6B3567A1F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
Signing time: Fri 23 Jan 2026 15:29:15 +0000
ROA not before: Fri 23 Jan 2026 15:24:15 +0000
ROA not after: Fri 22 Jan 2027 15:29:15 +0000
asID: 269167
IP address blocks: 138.118.188.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.crl
rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57E60B6D121559190E71D8B78977B6B3567A1F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 00:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b5:1f:2c:d8:4d:32:d5:c0:b5:ce:a4:2a:1c:4f:92:cd:7d:83:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D57E60B6D121559190E71D8B78977B6B3567A1F3
Validity
Not Before: Jan 23 15:24:15 2026 GMT
Not After : Jan 22 15:29:15 2027 GMT
Subject: CN=FD1BBC27223376AEA05BA1D21D7DE3A79721A21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:b6:32:da:44:06:82:1d:f6:be:ef:0e:ed:
db:e0:70:5d:f3:84:d1:66:3e:e8:30:49:34:eb:a1:
23:67:d2:86:b9:64:2c:2d:50:7e:f0:eb:ff:97:db:
1d:cd:96:37:f7:f4:dc:6f:fa:0e:33:8e:72:81:94:
49:19:0d:49:1f:d2:1f:85:f7:77:2a:70:56:36:23:
58:1d:03:cb:70:6d:7b:16:65:fa:6b:87:91:ae:66:
5c:ea:82:c2:8d:8b:2c:b4:53:6d:d1:67:b8:bb:e4:
9d:5a:b7:a3:a5:71:9f:4f:51:94:3a:d5:98:51:1c:
8b:6b:25:fd:39:36:52:e5:81:ff:b9:0a:52:9e:b0:
86:ae:dd:38:0f:4f:5d:1b:6b:31:ca:98:71:a1:23:
25:cc:80:d3:93:ab:d6:5b:22:1c:04:74:6a:c6:93:
22:bc:60:42:c5:01:49:ee:c2:75:25:ad:9c:7f:39:
e5:4c:d6:61:46:cd:e5:ca:84:a3:9e:64:70:57:9e:
a7:1a:98:7a:29:da:6b:92:67:21:c5:51:f2:d5:26:
3e:37:b8:9c:94:e9:fb:06:52:fe:8a:2e:26:01:89:
1e:18:a8:ad:04:11:49:1f:77:e4:a1:1e:98:0f:d2:
4a:43:44:c4:2f:bd:a2:13:44:6c:08:9d:29:8b:6b:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:BC:27:22:33:76:AE:A0:5B:A1:D2:1D:7D:E3:A7:97:21:A2:1A
X509v3 Authority Key Identifier:
keyid:D5:7E:60:B6:D1:21:55:91:90:E7:1D:8B:78:97:7B:6B:35:67:A1:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57E60B6D121559190E71D8B78977B6B3567A1F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.188.0/22
Signature Algorithm: sha256WithRSAEncryption
33:6b:59:f8:6a:13:c9:95:9d:67:c2:5b:47:12:86:9e:2f:95:
e7:1f:77:33:d3:50:ff:a1:c4:2a:57:9d:8e:25:79:94:15:a4:
f0:9f:5a:4d:09:9f:03:10:8b:fa:a7:74:f5:87:e5:3d:ad:25:
5f:28:e4:b3:0d:77:fa:97:d7:8d:96:f5:ab:aa:8b:91:c5:f2:
cd:20:0f:ef:57:81:78:e6:02:9a:ae:81:ee:6b:31:9b:c9:99:
03:cd:96:e1:6f:d0:a9:b8:22:9b:1c:cd:0d:bf:ed:3a:58:b2:
66:85:cd:6a:41:b9:24:49:ca:f5:eb:8d:88:c5:43:1a:d6:a1:
ea:20:4d:c7:71:56:2c:2f:67:80:26:d0:20:0a:95:cd:da:85:
f1:9d:d5:c2:64:97:75:48:19:b7:65:79:94:fe:cb:9f:4f:88:
bd:92:49:67:ff:d5:36:34:00:49:9c:95:3b:d2:73:a5:e4:13:
47:8b:a1:a0:9d:13:d6:28:e0:a8:6a:cd:38:b0:4c:e7:86:2a:
2b:a3:95:d8:eb:38:cd:8a:4e:44:93:65:a6:33:3c:c1:ec:ff:
de:b4:c6:cb:35:1d:82:81:cf:de:34:e3:15:e6:9c:0c:88:92:
b1:98:3b:90:ca:77:eb:e3:85:32:b2:a6:15:0c:93:bb:2e:98:
c9:df:af:97
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMrUfLNhNMtXAtc6kKhxPks19g/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU3RTYwQjZEMTIxNTU5MTkwRTcxRDhCNzg5NzdCNkIz
NTY3QTFGMzAeFw0yNjAxMjMxNTI0MTVaFw0yNzAxMjIxNTI5MTVaMDMxMTAvBgNV
BAMTKEZEMUJCQzI3MjIzMzc2QUVBMDVCQTFEMjFEN0RFM0E3OTcyMUEyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkB7Yy2kQGgh32vu8O7dvgcF3z
hNFmPugwSTTroSNn0oa5ZCwtUH7w6/+X2x3Nljf39Nxv+g4zjnKBlEkZDUkf0h+F
93cqcFY2I1gdA8twbXsWZfprh5GuZlzqgsKNiyy0U23RZ7i75J1at6OlcZ9PUZQ6
1ZhRHItrJf05NlLlgf+5ClKesIau3TgPT10bazHKmHGhIyXMgNOTq9ZbIhwEdGrG
kyK8YELFAUnuwnUlrZx/OeVM1mFGzeXKhKOeZHBXnqcamHop2muSZyHFUfLVJj43
uJyU6fsGUv6KLiYBiR4YqK0EEUkfd+ShHpgP0kpDRMQvvaITRGwInSmLa4fRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/Ru8JyIzdq6gW6HSHX3jp5chohowHwYDVR0j
BBgwFoAU1X5gttEhVZGQ5x2LeJd7azVnofMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJzN3h1QTIyak11TXNOUWZWYk56VHpQSDZOY0RWYU40d3RyTkFyR3dx
dlMvMC9ENTdFNjBCNkQxMjE1NTkxOTBFNzFEOEI3ODk3N0I2QjM1NjdBMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1N0U2MEI2RDEyMTU1OTE5
MEU3MUQ4Qjc4OTc3QjZCMzU2N0ExRjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSczd4dUEyMmpNdU1zTlFmVmJOelR6UEg2TmNEVmFONHd0ck5Bckd3cXZTLzAv
MzEzMzM4MmUzMTMxMzgyZTMxMzgzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzOTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop2vDANBgkqhkiG9w0BAQsFAAOCAQEAM2tZ
+GoTyZWdZ8JbRxKGni+V5x93M9NQ/6HEKledjiV5lBWk8J9aTQmfAxCL+qd09Yfl
Pa0lXyjksw13+pfXjZb1q6qLkcXyzSAP71eBeOYCmq6B7msxm8mZA82W4W/Qqbgi
mxzNDb/tOliyZoXNakG5JEnK9euNiMVDGtah6iBNx3FWLC9ngCbQIAqVzdqF8Z3V
wmSXdUgZt2V5lP7Ln0+IvZJJZ//VNjQASZyVO9JzpeQTR4uhoJ0T1ijgqGrNOLBM
54YqK6OV2Os4zYpORJNlpjM8wez/3rTGyzUdgoHP3jTjFeacDIiSsZg7kMp36+OF
MrKmFQyTuy6Yyd+vlw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:14 2026 by rpki-client