This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: am0r5SCv33R6rqbcuyYFrOPb+xq+S1vKAKu7I2K45Cw=
Subject key identifier: A1:CE:5C:FF:2D:96:A7:AF:0C:DE:25:D8:39:C4:70:47:2D:08:62:24
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 381A4F586AB29813A00849AC30BCD9A394FB49B7
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:27 +0000
ROA not before: Wed 28 Jan 2026 11:29:27 +0000
ROA not after: Wed 27 Jan 2027 11:34:27 +0000
asID: 53153
IP address blocks: 187.61.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Feb 2026 21:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1a:4f:58:6a:b2:98:13:a0:08:49:ac:30:bc:d9:a3:94:fb:49:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:27 2026 GMT
Not After : Jan 27 11:34:27 2027 GMT
Subject: CN=A1CE5CFF2D96A7AF0CDE25D839C470472D086224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:77:ac:8a:1f:8b:24:fe:0c:da:99:b0:2d:
48:3e:e2:b0:90:c6:8f:a3:e6:1d:7f:05:dc:8a:24:
a3:ab:72:87:14:12:39:b7:54:0a:22:10:e2:04:3c:
9a:fd:a9:14:7b:3b:42:48:8e:fb:06:a8:60:a3:c9:
ab:2d:30:30:12:7a:66:ab:76:79:1e:66:71:f2:38:
73:6f:5e:c9:84:07:f3:dc:41:ec:7a:6a:e6:5d:c0:
8e:f9:da:e7:b2:ae:6e:dd:7f:a1:69:35:39:41:d3:
9c:65:12:64:7c:56:f5:76:38:ba:69:58:04:90:33:
21:e7:6e:5c:ae:79:02:ee:9f:70:a0:53:5f:12:18:
23:2d:20:5f:f8:d5:27:c7:0d:a5:bd:c8:85:a6:1b:
68:de:1f:ea:cf:8c:03:96:b8:54:19:46:ee:6a:8e:
0e:ea:25:15:0c:59:96:c1:1e:1b:93:8e:f1:a3:9f:
ac:13:1e:72:a3:b3:50:52:6a:d4:dc:13:ca:fc:9a:
ad:c2:74:5b:f7:d5:7f:9b:f9:de:6d:71:f1:26:36:
83:f7:a6:a6:f2:18:99:c1:9a:c0:4a:6e:5e:29:e9:
89:f0:16:36:9e:67:68:10:27:81:5f:fa:22:e1:c4:
96:83:8a:0d:ca:bc:c9:19:5e:1c:35:d0:e3:88:c8:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:5C:FF:2D:96:A7:AF:0C:DE:25:D8:39:C4:70:47:2D:08:62:24
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
24:57:7b:7e:c3:21:4c:e6:d3:6f:f1:76:27:f0:fd:7e:2d:d3:
bb:88:dc:71:a4:c0:8c:a2:b4:d7:46:38:e1:76:70:26:cf:19:
12:fe:5e:71:90:20:c7:01:6b:57:7c:87:fa:cf:1b:c5:af:9b:
0d:c7:6f:a7:22:01:fb:f2:43:dc:fa:b5:8f:84:ea:f3:ef:4b:
17:ab:ac:73:df:45:4b:63:eb:54:95:29:6c:44:d8:62:83:0e:
68:7f:4e:84:1e:7d:26:1a:35:57:21:3a:88:68:87:e3:4a:b0:
ab:b5:32:52:c2:5c:f7:60:b8:f8:93:11:e1:12:46:65:f0:33:
a9:b9:ba:7b:ab:a2:eb:a7:43:f9:06:9f:4a:f7:3e:7e:a8:07:
8c:f0:c7:6a:a8:84:21:9c:3c:ed:19:bf:f1:29:b0:2e:f7:30:
c5:5f:cf:54:de:b9:46:56:c5:69:51:c9:33:85:f5:8d:cf:f8:
45:a8:98:d2:f8:0d:61:26:66:2e:2a:e6:ba:e7:b5:b7:1d:0f:
03:94:32:ae:61:52:c9:c9:7b:8d:6f:58:fb:6a:e5:99:69:20:
08:de:8c:ac:2b:91:9a:b2:c7:67:54:0f:53:0b:e8:35:85:bd:
c9:6f:4a:08:c8:45:75:2a:52:87:81:f8:89:38:5a:08:63:51:
db:28:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:03:01 2026 by rpki-client