This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa
File: 3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier: L5L5TWlNJTyGE3Es/UE9yIKAfmNRuBSFl778HHl42JE=
Subject key identifier: E9:A9:E8:4A:AE:00:E9:17:5D:D7:38:6F:8A:A1:3F:75:84:C8:B0:EE
Certificate issuer: /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial: 0424F488AF55E35C943B19443A8F11C85129D515
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa
Signing time: Tue 06 Jan 2026 16:56:31 +0000
ROA not before: Tue 06 Jan 2026 16:51:31 +0000
ROA not after: Tue 05 Jan 2027 16:56:31 +0000
asID: 198949
IP address blocks: 138.118.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 08 Jan 2026 13:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:24:f4:88:af:55:e3:5c:94:3b:19:44:3a:8f:11:c8:51:29:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Validity
Not Before: Jan 6 16:51:31 2026 GMT
Not After : Jan 5 16:56:31 2027 GMT
Subject: CN=E9A9E84AAE00E9175DD7386F8AA13F7584C8B0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:4b:02:b3:60:f2:dd:64:63:d7:97:90:7b:
2c:c6:9f:2d:4c:83:7b:4b:cc:af:7b:47:c2:3d:60:
4d:b1:6c:8f:43:20:4a:40:fa:2b:32:80:6e:95:d7:
76:e0:63:33:e1:f2:41:53:70:71:db:58:4a:6f:f1:
9c:f1:a9:1a:74:6c:8d:c1:61:f9:21:b4:40:52:71:
7c:7d:57:10:04:44:5e:cc:02:77:79:c0:47:11:b0:
c5:eb:65:35:1d:07:5b:45:e3:3c:3b:19:1e:7b:28:
34:bc:a2:34:a8:f3:16:7b:56:8e:45:5a:21:44:52:
77:12:41:57:bf:b7:46:21:b2:88:15:fd:a9:4f:cd:
53:19:00:36:9e:96:fc:3c:0d:5a:15:f4:bb:07:e3:
df:92:11:53:dd:56:08:0f:0e:3e:33:05:5d:23:c4:
d9:19:1c:09:db:c6:fc:08:e5:55:74:f5:37:53:c8:
c9:d0:b5:c7:60:be:b3:c1:3c:e2:3b:98:18:68:bc:
2d:18:3b:55:f2:16:04:6b:c8:2d:98:55:42:49:f1:
53:a4:37:db:07:fb:52:63:b1:9b:c3:99:10:4f:6d:
df:ea:ca:70:8b:b0:04:d5:75:20:50:d5:97:33:ab:
eb:40:94:a7:bb:75:cf:7a:f3:a3:9c:bf:46:55:d0:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:E8:4A:AE:00:E9:17:5D:D7:38:6F:8A:A1:3F:75:84:C8:B0:EE
X509v3 Authority Key Identifier:
keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:47:03:74:94:4d:9f:d4:d0:54:43:47:c6:32:a7:ba:6a:4e:
5b:77:cf:a5:8f:24:7b:cf:49:99:91:a0:60:63:13:37:b2:87:
ab:ce:4b:87:c3:97:48:a6:41:a3:bb:25:71:2d:bb:cf:d8:31:
98:9e:70:3c:b4:2b:38:8f:3f:ee:6d:45:3a:06:fc:89:88:1a:
9f:95:48:33:65:1f:64:8b:6f:bb:59:f5:e2:39:e5:6b:04:d3:
37:60:9f:ef:cd:b2:0b:6b:91:40:04:9d:72:6f:33:7e:f5:a2:
48:6e:54:f3:cf:b3:15:9a:a4:3d:c5:3a:ba:1c:b4:f4:47:dd:
63:ac:40:cb:66:2a:6e:c5:27:1f:f8:a7:95:79:66:aa:e5:c5:
dd:e4:c1:1d:b1:f6:9c:fd:ca:05:c9:67:f4:39:6f:30:ad:5b:
ae:ac:62:0b:e5:7f:bb:64:43:d0:5e:8a:08:32:ca:97:41:0b:
ba:16:ab:88:32:c1:7d:69:08:92:b4:a1:8d:d2:57:fe:cd:51:
25:fe:5a:1c:07:93:7f:b2:04:9b:a8:e5:5d:38:2a:59:eb:07:
3c:84:b8:13:2e:ee:ca:18:b3:e7:f1:80:24:fe:d3:3f:eb:0b:
9d:8c:64:b6:07:e5:54:0b:e0:03:74:c2:f0:11:c0:58:df:9c:
8a:ab:68:de
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBCT0iK9V41yUOxlEOo8RyFEp1RUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4Njk4QzFDMTNFQTNDNjY0NDJDN0Y3N0JDMzc1MDlD
NDhBMUJBRTAeFw0yNjAxMDYxNjUxMzFaFw0yNzAxMDUxNjU2MzFaMDMxMTAvBgNV
BAMTKEU5QTlFODRBQUUwMEU5MTc1REQ3Mzg2RjhBQTEzRjc1ODRDOEIwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUksCs2Dy3WRj15eQeyzGny1M
g3tLzK97R8I9YE2xbI9DIEpA+isygG6V13bgYzPh8kFTcHHbWEpv8ZzxqRp0bI3B
YfkhtEBScXx9VxAERF7MAnd5wEcRsMXrZTUdB1tF4zw7GR57KDS8ojSo8xZ7Vo5F
WiFEUncSQVe/t0YhsogV/alPzVMZADaelvw8DVoV9LsH49+SEVPdVggPDj4zBV0j
xNkZHAnbxvwI5VV09TdTyMnQtcdgvrPBPOI7mBhovC0YO1XyFgRryC2YVUJJ8VOk
N9sH+1JjsZvDmRBPbd/qynCLsATVdSBQ1Zczq+tAlKe7dc9686Ocv0ZV0A6dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6anoSq4A6Rdd1zhviqE/dYTIsO4wHwYDVR0j
BBgwFoAUtIaYwcE+o8ZkQsf3e8N1CcSKG64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGNmTGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVM
WHgvMC9CNDg2OThDMUMxM0VBM0M2NjQ0MkM3Rjc3QkMzNzUwOUM0OEExQkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0ODY5OEMxQzEzRUEzQzY2
NDQyQzdGNzdCQzM3NTA5QzQ4QTFCQUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hjZkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzAv
MzEzMzM4MmUzMTMxMzgyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMx
MzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop2qDANBgkqhkiG9w0BAQsFAAOCAQEAtEcD
dJRNn9TQVENHxjKnumpOW3fPpY8ke89JmZGgYGMTN7KHq85Lh8OXSKZBo7slcS27
z9gxmJ5wPLQrOI8/7m1FOgb8iYgan5VIM2UfZItvu1n14jnlawTTN2Cf782yC2uR
QASdcm8zfvWiSG5U88+zFZqkPcU6uhy09EfdY6xAy2YqbsUnH/inlXlmquXF3eTB
HbH2nP3KBcln9DlvMK1brqxiC+V/u2RD0F6KCDLKl0ELuhariDLBfWkIkrShjdJX
/s1RJf5aHAeTf7IEm6jlXTgqWesHPIS4Ey7uyhiz5/GAJP7TP+sLnYxktgflVAvg
A3TC8BHAWN+ciqto3g==
-----END CERTIFICATE-----
Generated at Wed Jan 7 22:31:06 2026 by rpki-client