This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
File: 3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier: WGrOAkQjRPFVU2v7ewN9jGpFW24oVFGlYDqI6p5msgU=
Subject key identifier: 86:8F:0F:96:41:50:AF:80:AB:9F:6E:AF:57:CA:08:91:F4:77:90:06
Certificate issuer: /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Certificate serial: 33B645CED7A11F04DE247E4ADAAAD2C1093192F8
Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
Signing time: Fri 02 Jan 2026 21:33:42 +0000
ROA not before: Fri 02 Jan 2026 21:28:42 +0000
ROA not after: Fri 01 Jan 2027 21:33:42 +0000
asID: 263518
IP address blocks: 191.243.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 16:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b6:45:ce:d7:a1:1f:04:de:24:7e:4a:da:aa:d2:c1:09:31:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Validity
Not Before: Jan 2 21:28:42 2026 GMT
Not After : Jan 1 21:33:42 2027 GMT
Subject: CN=868F0F964150AF80AB9F6EAF57CA0891F4779006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:ac:fe:02:37:14:07:57:a2:48:34:2f:d9:
da:6d:19:06:fb:4a:13:be:32:10:85:6e:cc:db:9d:
57:a8:05:27:4f:6c:ed:a5:f3:17:9d:ca:a7:dc:11:
d9:d0:5c:13:9f:cd:d4:ff:0c:7f:1f:7b:87:63:96:
3d:24:a8:16:45:66:02:d6:c3:13:be:36:91:ae:5f:
f6:d4:c0:2c:b0:2f:ea:7b:01:87:26:18:09:44:6b:
c6:6c:2d:d7:35:d6:da:b0:fd:fc:a7:8a:50:42:d3:
09:09:f8:63:c7:6a:2d:ce:87:96:53:94:56:be:d9:
60:84:ba:85:bb:5a:46:38:57:82:e3:c3:f9:df:dc:
71:37:5b:76:b1:2c:4d:bd:fb:b5:18:b5:e3:9a:f9:
c6:46:ad:74:e3:2a:23:01:39:c9:73:90:42:76:4c:
46:71:aa:d3:52:c9:a1:38:7a:89:22:47:90:fe:1a:
4b:f3:a3:b3:29:85:a3:62:da:59:7f:6c:55:73:f3:
4a:7e:4c:5d:61:a4:5e:bf:43:52:30:e4:a3:f2:9d:
4d:5a:8c:e1:95:fa:8d:a1:95:d5:6c:e0:c9:9c:64:
79:92:86:c3:a7:6e:a7:88:3d:f1:94:2d:56:30:bc:
82:26:6e:82:cc:f5:85:f3:5d:a7:89:eb:cc:70:3f:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:0F:96:41:50:AF:80:AB:9F:6E:AF:57:CA:08:91:F4:77:90:06
X509v3 Authority Key Identifier:
keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:2b:c8:ba:39:f7:bf:6f:25:1f:8a:66:bb:1d:ed:4a:60:0c:
0f:bb:c6:03:9a:84:0e:2e:26:d6:6f:69:45:2a:e0:49:38:15:
78:d8:37:86:11:93:0b:18:92:d0:3e:41:d9:95:d0:44:f1:3d:
ed:c4:a8:f6:43:ca:0c:47:9f:da:48:c3:e9:b1:d7:53:fa:f5:
67:8d:24:dc:68:e8:25:b2:09:e0:4b:18:dc:d7:62:50:f7:dc:
e9:e2:e0:34:29:0f:cf:01:82:c4:d0:15:25:18:ab:32:05:67:
47:db:58:0a:fb:68:6a:56:a8:39:43:ab:4f:1e:ef:de:6d:01:
24:93:59:93:c5:3f:4d:cd:e1:9e:a7:2c:d8:f7:21:c4:3f:f9:
d6:31:18:c5:19:9c:97:31:e7:21:37:52:38:99:21:6d:f9:86:
fc:fc:d5:7a:63:6c:a2:4f:1d:94:57:b7:3e:b5:86:72:a0:78:
10:f7:7e:71:c5:fb:f5:ad:3b:5f:97:d7:ad:20:0f:f9:a0:1d:
ac:c2:31:3f:9c:50:62:27:eb:38:98:74:a8:78:f0:03:de:da:
20:c1:90:9a:18:61:6f:8e:30:27:d8:a9:07:d9:8a:e7:4b:64:
aa:55:08:ab:0d:06:cd:88:7e:68:77:8e:81:e2:40:38:6b:52:
a8:d3:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:32 2026 by rpki-client