This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e302e37302e302f32342d3234203d3e203131303937.roa
File: 3230302e302e37302e302f32342d3234203d3e203131303937.roa (raw, json)
Hash identifier: H7j5BVbs3L9n0KXCS0a9XVauj84Gd44nYvijfUB67JA=
Subject key identifier: 8D:EA:B1:CA:A0:85:5C:4D:B6:6A:D8:B5:DF:F1:68:B6:87:78:F8:DD
Certificate issuer: /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial: 427122C268B9DF622BF5DED6674FF05E0BB485EE
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e302e37302e302f32342d3234203d3e203131303937.roa
Signing time: Thu 05 Feb 2026 18:28:46 +0000
ROA not before: Thu 05 Feb 2026 18:23:46 +0000
ROA not after: Thu 04 Feb 2027 18:28:46 +0000
asID: 11097
IP address blocks: 200.0.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 17 Feb 2026 11:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:71:22:c2:68:b9:df:62:2b:f5:de:d6:67:4f:f0:5e:0b:b4:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Validity
Not Before: Feb 5 18:23:46 2026 GMT
Not After : Feb 4 18:28:46 2027 GMT
Subject: CN=8DEAB1CAA0855C4DB66AD8B5DFF168B68778F8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:09:ff:87:43:a7:53:7f:d4:c8:0b:fe:95:
4b:2a:06:e9:31:49:a4:ef:0f:22:c1:94:87:67:8a:
2d:1b:cd:eb:7a:28:55:1e:83:a6:74:48:5d:5e:6d:
54:b1:26:82:8c:6a:4b:d7:f3:a6:15:20:63:8c:07:
d6:65:bf:2c:5e:d0:be:df:b1:ff:b3:e7:ad:c1:d4:
1e:3e:c3:76:a4:4e:c9:a0:b9:a6:cf:1f:5d:62:45:
6c:be:a7:c6:b2:24:c0:c4:2c:3e:b1:7d:bb:ed:34:
29:f6:bc:a0:b5:e7:cb:7b:b4:d0:1f:f8:72:b2:76:
b5:5b:b8:f4:16:00:5b:b8:3d:95:0b:fa:69:49:79:
9e:07:76:52:3c:4f:3f:b6:78:f2:3e:54:71:ef:02:
1e:27:92:17:ec:1b:f8:50:76:54:71:1a:e6:c5:ad:
57:f5:6f:cb:04:64:5f:f8:5d:d5:8e:15:b3:e6:90:
4f:57:20:e4:68:26:d4:4d:c6:7b:21:3d:fb:33:1b:
13:2d:76:63:a8:3a:70:d2:47:35:c4:d4:bd:c1:70:
2f:a1:47:54:5b:3f:d3:d0:88:ee:3d:e9:c6:e0:67:
f0:18:b5:a3:ff:d2:10:42:91:6d:f4:84:f6:19:5f:
16:7b:1b:00:8c:0b:ba:65:d1:41:d0:d2:1c:dd:8d:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:B1:CA:A0:85:5C:4D:B6:6A:D8:B5:DF:F1:68:B6:87:78:F8:DD
X509v3 Authority Key Identifier:
keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e302e37302e302f32342d3234203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.70.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ac:72:d8:a1:ab:77:9c:82:dd:60:f4:57:00:59:14:0f:b1:
3e:4d:b4:a3:a0:ec:ba:cb:8c:b6:db:df:b9:24:67:54:14:22:
09:6d:30:5e:18:71:14:6b:3b:5e:f8:5d:f1:31:6d:5e:4a:4a:
97:17:ec:7d:b1:ae:7b:91:1c:bf:d2:4a:42:5a:d6:ac:1b:84:
af:ca:1c:48:12:7c:5c:81:43:80:2e:ec:86:82:64:0d:25:79:
de:87:9a:d5:f0:7b:26:26:58:86:6a:14:e0:4f:a7:52:1e:a6:
59:04:a7:63:a3:69:18:19:99:e9:87:3d:96:dc:d0:cf:48:c9:
1f:23:2d:bc:99:ae:73:b1:6f:5f:f2:c5:57:01:01:9f:d1:af:
83:d7:bf:0e:46:dc:36:a7:af:bc:94:52:f7:10:85:0b:e8:b4:
60:8f:f7:20:7d:82:82:c7:13:0f:7b:b7:74:84:76:7b:12:68:
ff:33:a7:9b:06:e2:8e:18:0b:f2:2a:1b:9f:70:f3:10:3d:3b:
20:2a:05:20:1e:a0:5e:a8:c0:a8:c4:3e:bb:9a:7b:b7:1a:ca:
25:4f:f5:70:0f:87:65:fb:5c:1a:15:3b:1e:a1:02:52:6d:fc:
b7:b6:0a:ed:dd:fc:ae:7d:82:f2:42:6c:c1:8b:d2:6d:75:a8:
53:3d:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 17:13:20 2026 by rpki-client