This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: Iius5HTe7hxIQaGONbz8gOa6n+/4wBgjjTV3b2Gi3no=
Subject key identifier: 7D:41:B1:55:3A:39:84:A8:EF:E4:1A:87:BD:7F:CB:17:60:98:53:FB
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 5ACB977534EBB959B578B880F351BFE72C50BE17
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:26 +0000
ROA not before: Wed 28 Jan 2026 11:29:26 +0000
ROA not after: Wed 27 Jan 2027 11:34:26 +0000
asID: 53153
IP address blocks: 186.209.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Feb 2026 21:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cb:97:75:34:eb:b9:59:b5:78:b8:80:f3:51:bf:e7:2c:50:be:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:26 2026 GMT
Not After : Jan 27 11:34:26 2027 GMT
Subject: CN=7D41B1553A3984A8EFE41A87BD7FCB17609853FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:61:a8:7b:06:95:b5:43:df:17:63:b5:1b:
87:3d:76:7d:ce:a8:40:59:91:3a:88:9a:b7:b4:70:
e3:29:5a:49:a1:78:21:db:80:7a:3a:8d:90:73:f9:
9a:2a:d3:f3:75:88:26:6b:fb:c9:d4:2e:8f:69:c0:
a5:fc:53:79:58:b6:10:0f:fc:78:fc:21:5e:f6:8d:
81:3d:dc:a3:1c:44:7c:92:d7:71:43:b2:49:77:0f:
7c:a0:58:ec:ee:19:cf:f7:2b:24:ed:ea:f0:f1:a0:
bb:09:f0:b6:b3:6c:79:88:42:de:5f:af:e6:82:88:
7c:d0:2c:36:e0:e2:a9:cd:c7:78:49:6e:67:f6:18:
d5:02:0c:0a:bd:33:5d:e0:e3:f6:0e:07:91:3b:e7:
0e:50:ff:a6:d2:03:27:cc:81:aa:62:24:7c:20:05:
6d:32:fa:ab:bc:61:a1:44:5c:1d:7a:9f:55:f5:fe:
f9:4c:0b:bd:90:13:aa:28:57:4e:9c:82:d1:3e:55:
b7:e1:e8:58:f3:9b:c5:7b:56:6c:be:68:25:c9:36:
a2:9f:e5:f5:7f:56:14:4a:fa:55:e2:7c:84:73:a7:
45:54:67:fb:a4:49:3b:1a:23:c7:3a:75:3d:7e:60:
28:4d:d5:ab:ff:3f:9f:c2:1b:58:19:0b:f1:40:9f:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:41:B1:55:3A:39:84:A8:EF:E4:1A:87:BD:7F:CB:17:60:98:53:FB
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:65:12:64:30:41:57:b5:00:ef:9a:0b:7a:bc:7e:e6:30:8e:
60:a7:31:60:15:63:7e:70:74:cb:67:a5:4d:12:4b:e7:0d:33:
9c:fa:b3:ac:6e:c4:c4:94:db:4e:f0:ee:c8:91:06:d0:0a:42:
86:52:39:2d:14:5d:0b:3f:72:58:a9:69:db:42:9f:62:65:c0:
62:cb:76:04:7e:e2:e4:e3:b0:10:ee:03:d5:d6:c3:be:d1:1a:
97:b9:6e:b9:0c:b5:81:24:83:0d:70:cf:3f:d4:f4:d2:e2:2c:
c4:63:33:4b:4c:36:b7:f1:28:c6:58:0b:32:c9:3e:39:23:eb:
e1:bd:45:c7:45:63:c0:fa:76:f1:ea:ef:d6:43:e5:a6:31:a5:
a3:8f:62:ab:29:a6:00:39:82:03:66:1c:46:10:a8:e0:4e:4b:
a6:7f:dd:b5:96:3e:2d:83:2a:95:49:cf:9c:eb:0e:38:43:bf:
f5:2a:af:89:0c:e2:96:d0:68:53:29:42:0d:c7:c9:14:fd:26:
b4:ba:90:bf:01:02:08:e7:48:4a:0b:af:6f:cc:86:75:4c:e3:
50:c0:8a:9e:0b:a4:88:74:49:39:59:0d:93:2c:3d:35:8a:a0:
37:24:9a:b9:37:8d:b8:af:e4:6f:af:cc:42:64:48:e7:60:6a:
d5:e8:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:04:45 2026 by rpki-client