This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e39392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: 2eMMAvqba9liuFX1YvSBIMrqOQO6ecDEOBtrXmUEYnM=
Subject key identifier: 3B:5F:B2:02:F8:36:B6:8A:1F:7B:5D:43:E1:C8:59:95:E9:94:63:EF
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 05CABB7DF8D9B1EF2C86D63ABE05668F33ACCC14
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:27 +0000
ROA not before: Wed 28 Jan 2026 11:29:27 +0000
ROA not after: Wed 27 Jan 2027 11:34:27 +0000
asID: 53153
IP address blocks: 186.209.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Feb 2026 21:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ca:bb:7d:f8:d9:b1:ef:2c:86:d6:3a:be:05:66:8f:33:ac:cc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:27 2026 GMT
Not After : Jan 27 11:34:27 2027 GMT
Subject: CN=3B5FB202F836B68A1F7B5D43E1C85995E99463EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:d3:fb:cf:a8:d3:c9:f7:c1:54:a3:f2:97:
a3:4a:f9:d7:a6:73:37:1f:00:cf:73:57:f9:b3:78:
08:26:5f:ee:7c:20:4b:2e:bf:2f:9b:ec:76:28:25:
f2:b5:42:dd:ad:b9:e1:a1:c9:37:b4:ca:5b:cb:f3:
bd:c8:00:4f:3b:ee:1f:3d:d9:ae:ee:64:d6:bf:cb:
fe:e9:43:de:35:cb:a0:26:84:53:9c:bc:24:fb:eb:
46:d8:43:8e:65:67:bb:10:e7:ed:b1:ac:6a:ae:e2:
b2:7f:92:76:79:27:b8:b8:da:49:9b:d0:a4:43:1e:
42:70:fc:aa:2b:e6:16:06:f3:41:95:15:28:af:52:
b6:d3:a7:78:a7:ba:60:5f:68:b3:8d:2f:d7:4d:72:
c0:85:a7:60:6f:82:d2:69:bc:60:d1:cc:2a:c3:20:
8e:9a:f6:0b:14:89:31:34:b8:5b:53:f8:ea:a2:b7:
0c:c1:cf:d9:7c:d5:d5:af:8c:ad:b2:ff:c0:e7:8d:
26:e1:44:1a:f7:b1:8d:30:19:5d:13:75:df:85:29:
02:d9:23:18:eb:a6:c3:02:72:82:2a:44:94:ba:7d:
94:f9:82:8b:d3:3f:bc:7b:b1:2f:28:ff:69:3f:df:
f5:9d:8d:b9:9a:31:38:3a:44:7b:13:e7:58:10:e0:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:B2:02:F8:36:B6:8A:1F:7B:5D:43:E1:C8:59:95:E9:94:63:EF
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.99.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:21:a8:b7:f0:a7:bc:39:33:57:46:c0:d3:25:76:0d:cb:2d:
ee:d1:97:dd:68:30:41:19:b4:1b:02:b1:75:18:93:e8:fc:f1:
bc:f9:71:9c:6b:7a:54:25:bb:ee:46:c6:1d:fa:17:cd:c1:d1:
55:b5:db:b6:7c:dd:50:6b:01:97:21:68:ab:b9:65:7e:14:b4:
17:43:27:6f:b1:4e:91:73:5d:e8:72:8c:a6:bc:0d:9d:1e:a3:
e7:1f:9e:f4:c3:a9:c7:98:2c:fa:a9:3a:1e:70:44:07:89:e6:
d7:6a:f4:da:a3:d0:7c:c7:50:98:1c:db:c8:1b:5d:ae:3b:ad:
73:1e:85:9d:2d:78:c6:ce:ee:ac:1e:83:bd:e0:d6:d1:31:7a:
aa:02:4c:e0:35:c0:3f:7b:f1:fe:ec:ba:84:83:b6:24:ab:63:
4d:a1:47:7f:fd:11:75:d2:59:25:85:f7:f7:27:ae:99:b5:35:
46:0c:8f:58:a5:01:1d:fd:a7:69:05:6f:51:43:d9:50:4d:ec:
b4:0f:96:58:10:b5:0f:9e:c2:61:7e:0e:b4:0f:ad:15:af:13:
21:52:9a:e4:d8:78:79:29:a3:d6:86:86:3c:ff:bd:de:bc:c6:
63:c0:7a:d6:54:a4:d0:ff:43:11:27:8a:68:0b:83:76:28:3d:
8c:71:72:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:06:01 2026 by rpki-client