This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39372e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e39372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: 9X0VNvjbm+n7xY9g1ZupECT+B6y8bKyHCYi5Bkmp+Ls=
Subject key identifier: 09:FE:81:9B:26:10:86:49:35:66:68:94:0C:E6:0E:64:46:C1:2B:C1
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 239DB5FF3CE69DE7BD2ED7B1AA0FFD9566B4BB2E
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39372e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:27 +0000
ROA not before: Wed 28 Jan 2026 11:29:27 +0000
ROA not after: Wed 27 Jan 2027 11:34:27 +0000
asID: 53153
IP address blocks: 186.209.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Feb 2026 21:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9d:b5:ff:3c:e6:9d:e7:bd:2e:d7:b1:aa:0f:fd:95:66:b4:bb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:27 2026 GMT
Not After : Jan 27 11:34:27 2027 GMT
Subject: CN=09FE819B26108649356668940CE60E6446C12BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:7e:2a:48:7e:3e:47:01:8c:77:64:a4:2c:
1a:e9:e6:da:db:34:51:0a:d8:74:6e:61:e4:bb:32:
2b:7c:3d:7b:b8:4c:5e:cc:a8:60:d6:dc:ef:6d:a6:
ea:2b:f3:83:e1:ea:6e:7f:0e:05:4d:ed:5b:bf:27:
7f:2f:29:f0:8a:ef:71:52:ea:f8:d2:f5:a6:90:06:
4c:0b:61:7b:4e:97:87:93:0f:06:cd:cf:27:f0:da:
ed:02:ff:0f:57:3d:e8:8d:6f:b7:9a:8f:8b:92:60:
cc:6c:cc:d8:f1:8d:e7:34:30:2b:cc:de:2c:b9:21:
2d:fb:08:95:8c:79:ef:d5:24:44:24:42:98:4f:4c:
ca:1b:10:3a:02:9a:6a:91:e2:3f:63:7a:02:6b:51:
d9:19:59:f1:f7:70:cb:a6:59:f5:2e:84:2b:06:b1:
7e:a3:b9:a5:a6:89:58:78:35:bc:1f:94:ad:6f:de:
36:61:d1:4c:1b:4d:2b:cc:ee:d7:86:8b:69:26:52:
7c:14:a1:52:03:26:eb:9e:5a:de:ec:e0:c1:b7:44:
ee:ae:ed:16:2a:d0:f0:43:f5:8f:fe:76:b4:ed:a1:
33:d2:42:c0:7a:61:72:53:0b:4e:5a:e8:05:36:81:
18:47:0a:65:60:0c:58:8e:05:ef:58:af:e0:e2:0d:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:81:9B:26:10:86:49:35:66:68:94:0C:E6:0E:64:46:C1:2B:C1
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39372e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.97.0/24
Signature Algorithm: sha256WithRSAEncryption
25:77:96:c1:ee:5f:58:25:4b:b7:40:13:cf:58:23:0c:b5:39:
03:01:45:97:5f:f9:58:ea:ee:5f:10:6e:ad:73:4b:ba:7f:91:
83:93:55:29:29:67:57:a2:ec:2c:a1:4e:4d:2f:ab:be:3e:69:
0f:bd:a5:41:73:d2:5a:04:a4:2c:62:f1:9d:ec:0d:97:54:23:
03:44:c9:d4:b5:d8:76:ee:56:1a:dc:42:da:9a:12:2d:7b:c2:
13:a0:9f:29:3c:9e:9d:ca:ab:0c:3d:98:72:2d:ed:b9:25:f5:
7b:ba:37:45:68:1a:7a:32:a5:88:f7:a1:3c:f5:0f:3f:0f:50:
38:aa:e3:91:bc:e5:f2:ee:d5:98:86:56:c3:80:27:a4:8a:1d:
0a:7e:f1:a7:54:67:6d:4a:3b:e9:e6:05:38:3e:93:90:49:25:
3f:19:da:e2:7f:17:66:73:62:fa:0c:1c:3c:37:e2:19:f6:ec:
17:8a:ed:66:3d:0b:6a:59:36:32:45:43:f1:e2:b2:1d:d6:a2:
5b:15:83:57:dc:08:a2:f9:06:21:02:c3:0d:e5:f0:77:74:3b:
d2:c8:2c:f2:67:d7:b0:d9:d3:69:ad:00:59:00:3f:6e:5b:fd:
fe:99:f2:26:1b:8a:a1:d4:fe:43:1d:ea:93:96:52:3c:c1:0f:
b5:49:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:03:59 2026 by rpki-client