This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa
File: 3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa (raw, json)
Hash identifier: lbqJ4bvDansH2bszjGpISn94SIODSMOuCxwVCLtajcc=
Subject key identifier: 08:2B:17:67:72:2A:0C:87:3E:26:A0:E1:2C:B1:F6:A1:13:6F:3F:8C
Certificate issuer: /CN=E25C8BAC5F3F0E1B158538E0C88D150037FBD43A
Certificate serial: 5D60E14939355267E8B85FEDD3BF737385597F5A
Authority key identifier: E2:5C:8B:AC:5F:3F:0E:1B:15:85:38:E0:C8:8D:15:00:37:FB:D4:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa
Signing time: Wed 07 Jan 2026 18:37:54 +0000
ROA not before: Wed 07 Jan 2026 18:32:54 +0000
ROA not after: Wed 06 Jan 2027 18:37:54 +0000
asID: 61653
IP address blocks: 131.100.224.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.crl
rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 18:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:60:e1:49:39:35:52:67:e8:b8:5f:ed:d3:bf:73:73:85:59:7f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E25C8BAC5F3F0E1B158538E0C88D150037FBD43A
Validity
Not Before: Jan 7 18:32:54 2026 GMT
Not After : Jan 6 18:37:54 2027 GMT
Subject: CN=082B1767722A0C873E26A0E12CB1F6A1136F3F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:b9:25:42:27:44:6b:77:09:3e:7c:74:e7:
d1:75:20:c3:18:f3:c0:c9:6f:8f:47:b1:e7:4b:11:
da:00:c8:2c:b8:3a:ad:ed:c3:a0:c1:d2:46:40:b5:
ba:b1:03:52:c8:a9:8f:e7:78:d3:01:0b:07:b4:8f:
89:ef:d8:6d:5b:49:64:fb:b7:3b:ef:56:6d:58:73:
12:a0:54:4f:75:35:a3:48:1e:6d:e7:e6:d4:5d:47:
88:81:4f:0e:72:d9:89:d9:17:a0:c6:8e:de:83:7b:
48:be:4e:05:01:de:12:37:96:81:dc:07:61:81:62:
50:d5:50:e1:97:c8:e6:8a:4c:09:f3:c8:2d:73:14:
a3:b3:30:61:ce:6a:f3:e5:42:d2:64:50:41:5a:89:
45:94:f7:24:80:f1:fc:f6:ad:b1:3f:a7:e0:fb:1a:
45:58:e9:41:86:94:0a:21:6d:e9:36:70:9c:71:1d:
19:58:63:90:b8:01:dd:a0:29:35:5e:ec:94:7b:c2:
eb:fe:31:c0:01:57:0c:15:d9:67:44:a6:83:d5:62:
58:e1:c4:9b:81:22:ef:18:50:40:34:05:ea:97:5f:
64:ca:81:7e:93:79:16:81:39:b9:ea:65:25:3b:ec:
9d:f4:7d:8d:6e:e1:3a:0d:bf:99:a4:69:fb:c1:da:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:17:67:72:2A:0C:87:3E:26:A0:E1:2C:B1:F6:A1:13:6F:3F:8C
X509v3 Authority Key Identifier:
keyid:E2:5C:8B:AC:5F:3F:0E:1B:15:85:38:E0:C8:8D:15:00:37:FB:D4:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.224.0/22
Signature Algorithm: sha256WithRSAEncryption
25:03:d8:36:b5:4d:f5:f2:b4:ab:e0:e0:08:f3:11:d3:e3:55:
ef:51:30:eb:1b:54:ad:11:85:28:51:41:e0:90:59:7c:d7:a8:
cc:01:3f:c0:66:c1:bf:61:2b:72:14:59:3c:42:a6:68:2a:1a:
0f:ae:55:dd:a8:b1:b1:e2:60:7c:f1:f4:88:47:89:4a:24:e8:
9e:75:7c:73:45:58:ca:54:cb:7e:15:a2:bd:ae:b6:99:62:4f:
7c:95:2f:6f:0e:47:f4:7d:98:ad:a7:32:69:6a:08:8a:3c:d8:
72:f8:93:f7:b3:02:0e:93:6f:70:ad:d7:cc:a5:a9:24:2c:7f:
9d:6b:7a:58:53:aa:99:f2:81:78:5a:6e:9f:6a:71:30:b2:d8:
61:da:61:05:00:84:97:e6:7b:b0:de:16:ff:f7:6f:ac:f3:77:
8e:09:c0:fe:a6:19:07:97:a6:46:3b:34:2a:b5:79:7d:e9:d0:
59:15:b6:ae:de:d4:ec:4d:43:46:51:b7:3b:e3:59:36:eb:1e:
4a:8e:91:f9:4e:c6:32:c8:92:51:fe:0b:41:6d:d6:27:b3:17:
ec:a8:35:7f:25:d6:7d:52:8b:5c:2c:a0:1e:ee:24:a1:66:64:
c6:60:1c:ef:b9:25:f2:aa:c3:42:77:bb:dc:fe:0c:80:bb:b5:
33:24:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:26:58 2026 by rpki-client