This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
File: 3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier: 490Lh6dcFzAhuWoNx3LtvG2mdxKyBdKOTcSCcHjKZlY=
Subject key identifier: 4A:7A:39:96:D5:B4:64:F5:0B:79:8C:1C:00:F2:78:3F:A1:CD:83:14
Certificate issuer: /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Certificate serial: 36606D3FF776F52AF23A1BB66D2ECABC7EFD23D7
Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
Signing time: Fri 02 Jan 2026 21:33:38 +0000
ROA not before: Fri 02 Jan 2026 21:28:38 +0000
ROA not after: Fri 01 Jan 2027 21:33:38 +0000
asID: 263518
IP address blocks: 168.197.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 16:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:60:6d:3f:f7:76:f5:2a:f2:3a:1b:b6:6d:2e:ca:bc:7e:fd:23:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Validity
Not Before: Jan 2 21:28:38 2026 GMT
Not After : Jan 1 21:33:38 2027 GMT
Subject: CN=4A7A3996D5B464F50B798C1C00F2783FA1CD8314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:b7:f9:f3:30:93:08:41:a7:80:76:c7:a4:
da:65:56:66:d3:7a:92:00:25:b5:7c:ed:d1:40:f1:
67:ae:6b:13:c2:8a:d1:f3:f7:44:87:3e:1b:99:ac:
1c:b3:16:7f:b3:42:d1:79:b2:c3:77:9b:84:64:78:
62:00:51:7e:d5:7c:20:65:6b:1c:36:17:2f:6a:05:
8b:99:b0:f3:be:66:d8:a2:ad:54:aa:31:ca:35:d8:
8c:c5:12:aa:f4:1b:f2:1a:b4:9a:f0:93:7d:32:3a:
58:46:5d:4f:e4:9e:49:84:10:61:2a:f1:dc:78:6c:
d9:c8:8b:7d:73:5e:a0:14:8b:4c:93:39:05:d4:12:
76:32:47:0d:de:58:09:19:8c:49:3a:3c:f2:dc:f8:
eb:82:a3:cc:f9:59:9f:08:c1:b3:5c:31:c0:ac:45:
f2:a1:a5:09:29:22:bb:85:d3:7c:10:f4:22:0a:b1:
09:55:60:db:1c:37:fd:39:ec:56:cf:73:13:dc:b0:
bf:a3:56:5a:62:04:54:06:07:02:18:5b:3e:01:24:
21:58:4e:08:92:25:d0:b6:99:95:ec:73:40:17:26:
74:d1:42:30:86:48:e3:65:6d:ed:e8:8a:a5:a5:75:
06:25:7a:79:ff:45:40:48:14:31:43:8d:57:36:c1:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7A:39:96:D5:B4:64:F5:0B:79:8C:1C:00:F2:78:3F:A1:CD:83:14
X509v3 Authority Key Identifier:
keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1f:bb:59:6b:c7:68:50:f6:50:47:49:e6:b3:f6:b6:48:07:
e3:c5:9f:6d:1d:ac:21:f4:50:22:57:86:aa:75:87:8a:50:fa:
b6:d6:4f:2a:98:8d:fc:12:89:4b:ea:09:f0:71:49:1d:0e:b0:
7d:0b:ba:3a:3a:35:c8:a6:73:e0:e7:4e:71:3a:3e:d3:75:39:
1e:cf:54:0b:c0:76:6e:b1:6b:a8:69:a7:c1:78:b5:e1:fc:9c:
db:e5:af:76:e4:20:5e:fb:09:19:2e:42:5e:55:98:27:ab:41:
1e:56:b1:6a:ac:f1:0d:2c:9b:d2:aa:fd:5e:b8:72:53:9d:35:
db:f6:72:45:f8:ef:7c:55:48:3a:34:67:d4:30:68:77:a8:d6:
c8:7e:f7:a0:d5:a6:4b:54:ff:0d:4c:01:9a:d0:c9:b1:a0:4f:
0c:3c:5e:af:56:62:26:ea:f4:fa:43:5d:b3:f2:3f:98:d7:9c:
51:fb:11:84:bb:85:bb:a5:73:cc:17:15:8a:98:43:de:64:e2:
22:ae:66:3f:62:fe:bb:95:3d:3c:b8:a3:36:4e:87:de:2c:5d:
64:52:ca:73:fd:ce:d7:9b:c7:26:f3:3d:db:61:72:67:88:8f:
dd:b7:16:95:fe:67:91:4f:bb:cf:46:44:b1:25:01:6b:ff:79:
e0:64:14:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNmBtP/d29SryOhu2bS7KvH79I9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4OTI4MDA2RDlFRDI4RjdFQzk4OTE3NEZDOUM0MEVB
NDQ4MzhDMTAeFw0yNjAxMDIyMTI4MzhaFw0yNzAxMDEyMTMzMzhaMDMxMTAvBgNV
BAMTKDRBN0EzOTk2RDVCNDY0RjUwQjc5OEMxQzAwRjI3ODNGQTFDRDgzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkM7f58zCTCEGngHbHpNplVmbT
epIAJbV87dFA8WeuaxPCitHz90SHPhuZrByzFn+zQtF5ssN3m4RkeGIAUX7VfCBl
axw2Fy9qBYuZsPO+ZtiirVSqMco12IzFEqr0G/IatJrwk30yOlhGXU/knkmEEGEq
8dx4bNnIi31zXqAUi0yTOQXUEnYyRw3eWAkZjEk6PPLc+OuCo8z5WZ8IwbNcMcCs
RfKhpQkpIruF03wQ9CIKsQlVYNscN/057FbPcxPcsL+jVlpiBFQGBwIYWz4BJCFY
TgiSJdC2mZXsc0AXJnTRQjCGSONlbe3oiqWldQYlenn/RUBIFDFDjVc2wb3bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSno5ltW0ZPULeYwcAPJ4P6HNgxQwHwYDVR0j
BBgwFoAUsokoAG2e0o9+yYkXT8nEDqRIOMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5nZWVqY2NQYXozaW1WbWUzcUQ0N2lQeDZYdFZ2eXJrS1ZMMURUM2p1
UHovMC9CMjg5MjgwMDZEOUVEMjhGN0VDOTg5MTc0RkM5QzQwRUE0NDgzOEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyODkyODAwNkQ5RUQyOEY3
RUM5ODkxNzRGQzlDNDBFQTQ0ODM4QzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluZ2VlamNjUGF6M2ltVm1lM3FENDdpUHg2WHRWdnlya0tWTDFEVDNqdVB6LzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoxVYwDQYJKoZIhvcNAQELBQADggEBAJ4fu1lr
x2hQ9lBHSeaz9rZIB+PFn20drCH0UCJXhqp1h4pQ+rbWTyqYjfwSiUvqCfBxSR0O
sH0Lujo6Ncimc+DnTnE6PtN1OR7PVAvAdm6xa6hpp8F4teH8nNvlr3bkIF77CRku
Ql5VmCerQR5WsWqs8Q0sm9Kq/V64clOdNdv2ckX473xVSDo0Z9QwaHeo1sh+96DV
pktU/w1MAZrQybGgTww8Xq9WYibq9PpDXbPyP5jXnFH7EYS7hbulc8wXFYqYQ95k
4iKuZj9i/ruVPTy4ozZOh94sXWRSynP9ztebxybzPdthcmeIj923FpX+Z5FPu89G
RLElAWv/eeBkFA8=
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:31 2026 by rpki-client