This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa
File: 3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier: wtKmfIHmC+F2RowqZuxxK6APE+cTWNr4xO2YEOnJIUc=
Subject key identifier: AC:50:43:E1:38:85:09:CC:DE:2B:E8:B5:40:72:92:31:CA:4D:D6:C7
Certificate issuer: /CN=4766F3CA43125EDED2BA274155576386D9101EDC
Certificate serial: 09E1FA363A47E0FE684C6B0D3F8A303022D1AE90
Authority key identifier: 47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa
Signing time: Mon 05 Jan 2026 21:29:42 +0000
ROA not before: Mon 05 Jan 2026 21:24:42 +0000
ROA not after: Mon 04 Jan 2027 21:29:42 +0000
asID: 264525
IP address blocks: 128.201.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl
rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Jan 2026 03:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e1:fa:36:3a:47:e0:fe:68:4c:6b:0d:3f:8a:30:30:22:d1:ae:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766F3CA43125EDED2BA274155576386D9101EDC
Validity
Not Before: Jan 5 21:24:42 2026 GMT
Not After : Jan 4 21:29:42 2027 GMT
Subject: CN=AC5043E1388509CCDE2BE8B540729231CA4DD6C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:92:1f:18:0b:66:e4:0a:4e:3e:1e:98:6e:
67:61:da:52:9a:2e:90:2d:be:57:8e:13:ed:d8:af:
b1:25:f8:85:d4:cd:63:38:e6:e6:63:56:77:77:0f:
a3:f1:9f:66:ca:14:84:13:e2:96:ed:d0:b9:0f:f2:
fb:d2:13:33:ef:30:1e:17:27:c3:f4:91:0e:c4:97:
57:95:4b:d7:1c:17:f2:1c:44:3c:84:fb:55:3c:3b:
ab:8c:cc:ee:8e:ce:24:79:d1:3b:73:da:94:61:1c:
cf:14:e2:92:3a:4a:21:14:66:58:32:15:6c:6a:df:
5f:11:52:4c:fa:83:b6:17:30:24:33:61:bd:bd:79:
b8:0b:5c:1d:3c:59:14:45:1c:fc:1f:3b:75:e3:b1:
30:2c:16:d9:20:2c:39:91:10:c7:ac:66:f4:a0:14:
84:54:4e:c9:97:91:20:5f:18:64:d7:23:73:5f:b8:
17:2f:4f:d1:bc:3f:23:af:6e:12:bf:89:43:bd:5d:
07:13:3d:e3:c5:44:ad:bf:1b:d4:30:61:fe:8b:52:
78:dd:32:b5:4f:ac:ea:ff:cb:e6:ce:8d:e0:25:f5:
d5:43:4f:72:0d:ac:a2:75:05:54:6b:ca:fa:d8:0d:
c3:61:f5:ff:ba:9b:54:59:03:1a:89:20:03:d8:26:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:50:43:E1:38:85:09:CC:DE:2B:E8:B5:40:72:92:31:CA:4D:D6:C7
X509v3 Authority Key Identifier:
keyid:47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.208.0/22
Signature Algorithm: sha256WithRSAEncryption
07:39:83:77:78:89:74:2a:d8:3b:33:93:ed:0a:23:7b:d2:ce:
49:b1:de:d1:ec:f3:f8:23:e8:be:b0:af:d3:15:4c:25:a9:cd:
d9:e5:4e:0b:fc:94:ee:aa:ca:d0:7e:73:ff:36:b0:f4:8b:31:
a6:7c:2f:b1:c5:05:d6:d5:6a:1f:ff:b9:37:d8:f3:19:e5:a2:
25:ee:8b:4b:4d:0e:49:ff:58:bd:ed:18:6a:31:58:3d:f7:16:
cb:40:90:ce:cd:54:10:bf:49:2e:57:30:9b:00:25:4e:a6:e3:
43:67:85:7a:c7:48:f9:6b:02:e9:fb:ca:a5:5e:7c:ba:7a:cc:
77:9a:2d:b0:24:ac:8e:21:98:ac:09:f4:34:a9:c7:da:62:18:
f4:86:37:72:1e:3c:61:83:d7:7d:b7:62:0f:91:7a:e0:fb:e4:
38:8f:7f:11:64:20:b1:d4:77:6a:d7:31:4b:fa:65:40:75:cf:
c7:18:39:34:29:7e:63:04:b1:27:eb:6b:ad:c6:20:05:70:d7:
54:d4:a6:dc:69:b4:44:2e:f5:ad:ad:b9:61:29:e5:f5:1a:e8:
00:69:b2:f2:e8:5a:c8:ba:fc:de:c5:e8:22:c5:89:a8:c0:ba:
c6:bd:a3:1a:35:de:44:2c:8e:b2:ec:2e:ed:e3:e0:a9:dc:20:
a3:ea:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:17:36 2026 by rpki-client