This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa
File: 3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa (raw, json)
Hash identifier: KVfRexoYQZxBkIP9oLjHrKbscoon2XvZjlwU0XI8IgY=
Subject key identifier: 7F:28:B8:44:2D:05:B3:4A:4E:A9:74:C4:33:CE:51:36:CA:B9:44:F5
Certificate issuer: /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial: 40BF64F699DC6BACDA3224E473614DD25C73AD9E
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa
Signing time: Fri 16 Jan 2026 17:26:02 +0000
ROA not before: Fri 16 Jan 2026 17:21:02 +0000
ROA not after: Fri 15 Jan 2027 17:26:02 +0000
asID: 262391
IP address blocks: 170.254.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bf:64:f6:99:dc:6b:ac:da:32:24:e4:73:61:4d:d2:5c:73:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Validity
Not Before: Jan 16 17:21:02 2026 GMT
Not After : Jan 15 17:26:02 2027 GMT
Subject: CN=7F28B8442D05B34A4EA974C433CE5136CAB944F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:b4:02:3b:28:da:81:07:a2:c1:01:bc:7f:
86:37:28:3e:68:68:fd:84:75:14:0a:68:44:46:5d:
a1:b8:24:95:bc:55:ac:5f:53:f1:eb:cc:c7:49:d5:
f8:de:ee:0c:30:a5:d4:2b:ed:2a:65:49:c1:b4:d0:
39:9d:28:b7:26:78:13:61:0a:c0:d2:f7:d3:67:ea:
57:39:0d:59:30:0e:1f:e6:20:48:72:cd:62:a3:5d:
9b:53:71:50:38:ea:6c:17:23:59:3b:b2:d7:a6:58:
9b:c4:8d:f1:43:9b:61:01:68:79:04:c4:8c:b2:38:
b6:5b:18:3b:81:59:1c:80:df:30:e4:e6:50:ed:af:
06:96:c5:e3:fb:36:0a:ae:51:c3:9b:7d:5b:b1:07:
20:36:1e:c5:d3:1d:96:3b:f5:6b:cc:73:4f:89:ee:
a3:0e:06:f1:01:10:5b:3c:d6:67:f9:c3:8e:02:da:
68:60:40:d9:c2:24:3e:39:d5:4e:7c:f4:5d:0a:19:
85:cd:18:29:13:b4:a5:b4:48:ae:87:b2:02:81:01:
80:40:33:9f:a6:ba:d2:cd:01:a2:10:c4:57:b0:26:
11:cf:04:77:b8:f5:b0:47:6c:ad:68:c3:d5:0e:08:
7e:bc:a8:d0:0f:09:31:89:62:b0:de:40:03:2b:7b:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:B8:44:2D:05:B3:4A:4E:A9:74:C4:33:CE:51:36:CA:B9:44:F5
X509v3 Authority Key Identifier:
keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a9:78:95:8e:4b:78:15:a8:0f:f8:9c:9d:d4:9e:19:23:99:
06:59:58:b3:b4:03:90:24:6a:cf:3a:b2:4b:fc:49:db:e6:a3:
02:60:b3:16:58:7b:16:3c:cd:38:39:32:58:6f:fb:63:24:50:
cf:76:c3:11:ac:15:08:1f:cc:f4:15:9d:da:72:db:de:cf:28:
8c:9b:a4:cc:c1:0e:b6:c3:df:36:ba:ea:ae:fa:d0:e8:a4:85:
79:ee:a9:9a:6f:73:e6:47:a5:83:fd:a3:92:28:f4:b1:33:ca:
38:ac:5e:36:bb:05:66:53:f7:0f:b3:c8:8f:19:37:98:6b:3f:
c9:b2:75:29:b3:30:a8:6c:bc:4b:bf:b2:4a:fb:0e:a6:73:0c:
35:57:b8:99:f4:4a:8f:80:72:f5:d8:84:1e:a2:ba:83:6a:62:
78:c8:7e:84:87:3c:64:25:2c:a9:c7:bf:fe:84:33:d2:44:c0:
5e:30:54:0f:50:ae:cc:0b:38:23:8c:35:2e:25:a9:73:03:f0:
14:e0:c8:e9:38:64:04:e2:cc:86:80:d6:f8:81:5a:14:29:4f:
c6:f0:bd:e0:11:a3:90:6b:2f:6d:05:da:6e:ea:c7:82:3d:27:
14:8b:03:74:06:77:a5:9a:a9:23:ad:2f:be:54:41:ce:3a:81:
cb:ca:13:73
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQL9k9pnca6zaMiTkc2FN0lxzrZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc4RDhDOTBBMkNDRkU2MzEzQzVEMTVDODcyQjg5NjMy
MDIxRTQ0QzAeFw0yNjAxMTYxNzIxMDJaFw0yNzAxMTUxNzI2MDJaMDMxMTAvBgNV
BAMTKDdGMjhCODQ0MkQwNUIzNEE0RUE5NzRDNDMzQ0U1MTM2Q0FCOTQ0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBrQCOyjagQeiwQG8f4Y3KD5o
aP2EdRQKaERGXaG4JJW8VaxfU/HrzMdJ1fje7gwwpdQr7SplScG00DmdKLcmeBNh
CsDS99Nn6lc5DVkwDh/mIEhyzWKjXZtTcVA46mwXI1k7stemWJvEjfFDm2EBaHkE
xIyyOLZbGDuBWRyA3zDk5lDtrwaWxeP7NgquUcObfVuxByA2HsXTHZY79WvMc0+J
7qMOBvEBEFs81mf5w44C2mhgQNnCJD451U589F0KGYXNGCkTtKW0SK6HsgKBAYBA
M5+mutLNAaIQxFewJhHPBHe49bBHbK1ow9UOCH68qNAPCTGJYrDeQAMre7obAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfyi4RC0Fs0pOqXTEM85RNsq5RPUwHwYDVR0j
BBgwFoAUh42MkKLM/mMTxdFchyuJYyAh5EwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzMvODc4RDhDOTBBMkNDRkU2MzEzQzVEMTVDODcyQjg5NjMyMDIxRTQ0Qy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NzhEOEM5MEEyQ0NGRTYzMTND
NUQxNUM4NzJCODk2MzIwMjFFNDRDLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzMvMzEz
NzMwMmUzMjM1MzQyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
MjMzMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqr+fDANBgkqhkiG9w0BAQsFAAOCAQEAoql4lY5L
eBWoD/icndSeGSOZBllYs7QDkCRqzzqyS/xJ2+ajAmCzFlh7FjzNODkyWG/7YyRQ
z3bDEawVCB/M9BWd2nLb3s8ojJukzMEOtsPfNrrqrvrQ6KSFee6pmm9z5kelg/2j
kij0sTPKOKxeNrsFZlP3D7PIjxk3mGs/ybJ1KbMwqGy8S7+ySvsOpnMMNVe4mfRK
j4By9diEHqK6g2pieMh+hIc8ZCUsqce//oQz0kTAXjBUD1CuzAs4I4w1LiWpcwPw
FODI6ThkBOLMhoDW+IFaFClPxvC94BGjkGsvbQXaburHgj0nFIsDdAZ3pZqpI60v
vlRBzjqBy8oTcw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:38 2026 by rpki-client