This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa
File: 3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier: My/E3U2YjEkJ7p81KXQgTPdi4E+cRNQubZkkhFtYu1U=
Subject key identifier: 36:03:1B:A6:7E:90:17:AD:EB:75:D9:50:FD:42:94:04:76:23:49:ED
Certificate issuer: /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Certificate serial: 43D406F213003250084DD1BC6983B7D0B4543E1B
Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa
Signing time: Fri 02 Jan 2026 21:33:37 +0000
ROA not before: Fri 02 Jan 2026 21:28:37 +0000
ROA not after: Fri 01 Jan 2027 21:33:37 +0000
asID: 263518
IP address blocks: 168.197.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 16:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d4:06:f2:13:00:32:50:08:4d:d1:bc:69:83:b7:d0:b4:54:3e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Validity
Not Before: Jan 2 21:28:37 2026 GMT
Not After : Jan 1 21:33:37 2027 GMT
Subject: CN=36031BA67E9017ADEB75D950FD429404762349ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:8c:b7:33:15:5a:a2:8a:36:a3:47:4b:50:
6a:9c:4b:c0:17:78:ba:60:3d:0f:c8:82:73:af:f8:
1a:0b:5b:91:c8:92:73:bd:2c:2d:25:3a:97:3c:99:
21:d0:27:3e:05:38:1d:22:da:f0:32:2e:4d:e2:f0:
fe:2e:84:46:12:70:1c:3f:39:07:37:d4:29:f8:46:
1b:b0:8d:4f:1f:b2:9d:d8:e7:1a:23:d6:55:23:a4:
80:f2:ec:e3:db:22:f9:cb:28:df:5a:4e:9d:00:bc:
62:0b:9a:a8:46:67:d2:c2:85:a6:a8:2c:89:ba:e2:
36:ce:a5:78:c5:1b:3c:88:3d:88:01:07:d7:b2:a9:
8c:c3:f1:f6:0d:e2:23:ac:78:03:d8:95:9e:d7:57:
50:c6:36:d4:5e:46:56:d7:0c:bd:e9:d9:91:1d:21:
af:d7:cc:32:95:5c:dd:1d:4f:1a:99:39:ac:62:b3:
32:85:3a:c7:39:54:84:0c:e4:f0:84:48:51:75:90:
7a:d7:09:cd:19:6d:b3:5a:27:33:0d:d5:1e:71:b5:
60:c8:b5:de:f9:66:d3:5e:f2:ec:3b:85:e7:20:f1:
61:05:94:a9:28:eb:a4:39:31:a5:34:9a:ce:e2:b6:
be:c2:f2:d2:2f:af:f3:ca:4e:aa:77:07:ec:44:e3:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:1B:A6:7E:90:17:AD:EB:75:D9:50:FD:42:94:04:76:23:49:ED
X509v3 Authority Key Identifier:
keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:34:c3:77:1a:a8:98:ef:12:d1:8e:96:b3:01:b1:2c:36:34:
f7:79:e9:64:8a:06:6d:cf:82:ef:80:07:1f:cd:b0:28:42:cd:
46:d8:3a:39:99:84:82:93:43:68:3a:5f:c3:c1:2a:73:9d:27:
ca:80:44:0b:f4:a4:d7:32:b6:91:ae:12:04:86:fa:65:d0:63:
69:97:44:58:b2:aa:62:5e:c2:61:02:6e:a2:c6:62:2e:47:08:
b8:c3:73:ac:db:ec:3e:aa:15:1d:cb:2b:35:46:21:f2:5e:e7:
cf:25:16:11:58:78:25:24:18:55:65:f1:d3:37:3e:55:98:e6:
37:60:18:58:2a:0c:94:8c:4d:f7:16:cb:60:79:ee:f5:82:01:
02:3a:e4:96:0c:fb:8f:9a:a8:98:8a:2c:b0:c6:e2:ef:1d:e3:
90:5b:b3:2c:ce:62:24:84:a4:13:3f:cb:2e:eb:c7:45:b1:93:
72:1d:7e:ca:79:92:52:23:32:9f:1a:04:8c:56:ef:d7:e2:e2:
0c:c0:68:b3:88:fd:0c:2d:5c:f5:7a:6e:02:46:9d:d6:68:01:
00:a7:51:a1:9f:ab:c6:81:d8:d5:ba:de:8a:c9:83:dc:57:d8:
a6:3a:d9:85:39:4b:bb:1e:8f:c2:ec:10:33:d7:a5:c7:26:4b:
18:c1:b9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:32 2026 by rpki-client