This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32322d3232203d3e203631383233.roa
File: 3230312e3232322e32342e302f32322d3232203d3e203631383233.roa (raw, json)
Hash identifier: 98gQk7tfGUs9pRvDwbcZtGSi6xreh7ZTsgIuv3pcGUk=
Subject key identifier: 2D:B1:84:5A:7C:7C:47:B5:49:AC:65:89:6E:3F:8B:59:1D:BA:B0:81
Certificate issuer: /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Certificate serial: 20422BE690BFB27972F08A9F6D103E9EC0ACA114
Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32322d3232203d3e203631383233.roa
Signing time: Fri 09 Jan 2026 19:17:33 +0000
ROA not before: Fri 09 Jan 2026 19:12:33 +0000
ROA not after: Fri 08 Jan 2027 19:17:33 +0000
asID: 61823
IP address blocks: 201.222.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 09:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:42:2b:e6:90:bf:b2:79:72:f0:8a:9f:6d:10:3e:9e:c0:ac:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Validity
Not Before: Jan 9 19:12:33 2026 GMT
Not After : Jan 8 19:17:33 2027 GMT
Subject: CN=2DB1845A7C7C47B549AC65896E3F8B591DBAB081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:15:bd:7a:d8:24:1f:17:21:c1:00:97:86:
6f:cc:fe:14:c1:b1:1c:29:38:90:0b:a8:94:dd:8a:
d8:0b:40:67:67:5a:04:95:59:6c:64:50:01:88:37:
19:17:b4:94:49:c2:b5:43:c7:b1:3d:0a:f2:52:6e:
bb:28:b8:04:8d:a7:2b:34:42:63:ad:0e:fb:76:78:
1e:61:e5:db:45:f2:ff:35:fa:eb:da:c6:f7:ce:b2:
1f:1f:ea:cf:ff:7a:e4:85:35:09:06:65:7b:41:1a:
53:2e:10:20:40:6a:b6:d1:e4:9f:da:ee:e2:6b:43:
74:1a:51:a8:d2:9e:04:c5:8d:a1:86:fc:66:32:5f:
4b:7a:3e:d1:b6:e5:10:a6:ba:22:d5:26:bc:4a:d2:
3c:10:4c:ab:e9:2a:3f:ab:76:6b:17:b9:36:67:30:
53:23:8b:97:90:06:be:33:28:ec:14:53:8d:c9:21:
0f:c6:e8:58:11:9e:ed:3f:65:8c:89:ed:63:ee:fa:
58:8d:b9:fe:4a:ad:d6:71:0c:e4:a2:17:3b:6b:db:
fc:2c:48:27:38:3a:2a:39:57:b1:85:02:97:33:8b:
25:85:75:fe:65:77:f2:46:e0:15:98:24:81:48:2e:
2e:7f:1e:17:fc:ec:f7:58:c5:33:9c:c8:11:46:ba:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:84:5A:7C:7C:47:B5:49:AC:65:89:6E:3F:8B:59:1D:BA:B0:81
X509v3 Authority Key Identifier:
keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32322d3232203d3e203631383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.24.0/22
Signature Algorithm: sha256WithRSAEncryption
89:21:97:82:69:68:dd:1a:b4:0d:bb:6e:99:aa:a2:cf:fb:be:
ff:d9:b6:33:5b:4e:77:42:cf:cd:57:ae:c1:c3:2f:75:94:24:
74:69:37:cc:0e:3c:5d:af:74:15:b6:62:64:d5:ce:da:c0:71:
42:70:5f:b3:79:17:5b:00:66:ff:7a:13:73:b0:65:c7:f5:1e:
7e:86:ac:50:ee:ed:7f:a1:84:2d:69:7c:64:88:59:94:65:77:
87:74:e9:bd:1e:cb:45:13:35:fa:b2:b0:9e:ec:ec:35:82:55:
db:30:e1:b6:83:26:d1:7b:19:b1:59:04:67:85:e3:e3:31:1e:
35:5e:73:be:8a:0a:2e:e7:e4:21:5d:41:58:39:c2:eb:26:e2:
69:58:1a:0b:ea:7a:5f:17:3f:8d:d2:ba:9e:7a:00:f5:a7:55:
7f:5a:f7:c7:d1:14:27:1e:9c:1c:51:17:54:3a:89:c5:49:c0:
74:d2:9c:b3:42:50:1c:1e:cb:a0:4f:b6:79:07:05:93:80:60:
ec:69:48:e5:a2:0f:c8:ab:05:f8:f8:52:7e:12:48:62:79:96:
6a:8c:46:6f:97:e3:ef:ab:42:7f:66:69:79:3f:3f:b5:4e:87:
5d:40:f9:8c:a4:af:5f:f5:4a:59:32:89:be:cf:41:00:72:a2:
3b:05:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:19:20 2026 by rpki-client