This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa
File: 32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier: out6gvoDcVP3tDfO22PLmcKaqL1rNjaO18t6vbNJcBI=
Subject key identifier: 31:88:A1:F9:7C:08:C8:DC:9C:D3:27:1E:3A:2A:46:6F:1B:9E:84:10
Certificate issuer: /CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
Certificate serial: 6B7ACAB8533A99B2C3B1733FB9BD9BC9E9A43B64
Authority key identifier: 6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa
Signing time: Fri 09 Jan 2026 14:35:40 +0000
ROA not before: Fri 09 Jan 2026 14:30:40 +0000
ROA not after: Fri 08 Jan 2027 14:35:40 +0000
asID: 270564
IP address blocks: 24.152.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl
rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 17:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7a:ca:b8:53:3a:99:b2:c3:b1:73:3f:b9:bd:9b:c9:e9:a4:3b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
Validity
Not Before: Jan 9 14:30:40 2026 GMT
Not After : Jan 8 14:35:40 2027 GMT
Subject: CN=3188A1F97C08C8DC9CD3271E3A2A466F1B9E8410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:b8:a7:d1:83:69:f9:ff:9d:a7:82:11:64:
62:61:ed:48:dd:7d:d6:b8:01:fa:c6:41:cd:eb:23:
23:57:09:68:09:93:2e:cc:5d:5f:41:f4:65:0c:af:
18:ab:a7:c5:01:3b:dc:5b:e0:d0:a5:6c:cc:cd:05:
a0:76:0a:af:01:c4:85:ae:90:d5:5a:96:b0:d5:7f:
2f:2a:46:a8:12:59:40:68:f8:92:f0:37:d0:a0:a3:
13:41:15:cc:1a:9e:7d:73:19:09:3c:27:fb:9b:2e:
5b:c5:a3:54:07:a6:8e:e1:0c:a5:55:53:90:e0:b0:
33:07:3d:90:d0:3c:6c:26:57:98:e0:7a:c1:b1:87:
ed:4d:31:3a:d7:d5:cc:82:b1:5a:04:0f:76:bf:a2:
f9:73:fb:2b:d9:c0:ff:4f:02:98:22:9d:51:2d:14:
46:97:79:b4:dd:d5:84:e4:51:c5:9b:af:b8:6b:42:
6a:91:20:96:b7:77:af:f4:9b:da:2d:fb:39:35:4e:
1a:d4:6e:d4:83:7d:6e:71:90:cb:2c:dc:c9:cb:61:
b8:6a:83:6e:32:21:74:da:a7:86:46:5a:c8:34:de:
72:01:3b:69:5c:c4:3b:11:c2:08:dd:ea:12:70:20:
52:98:9b:ef:6f:01:1c:fb:d1:b7:0e:7d:10:5c:73:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:88:A1:F9:7C:08:C8:DC:9C:D3:27:1E:3A:2A:46:6F:1B:9E:84:10
X509v3 Authority Key Identifier:
keyid:6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:16:3f:d0:d4:30:6b:35:65:d7:fa:ac:ca:97:d7:ff:84:b3:
cd:13:3e:9d:26:5d:59:cb:5c:08:77:43:2d:75:60:07:d6:8d:
cc:03:48:63:4e:74:27:51:27:7c:2e:74:c5:7b:06:d4:54:4b:
f0:84:a3:7f:0a:ca:e6:d6:ad:cb:87:74:6b:f6:57:1e:7f:4f:
b6:47:57:b8:1b:fa:ce:4a:50:4a:8d:0b:f0:23:bb:6d:27:1a:
e5:ac:83:ee:d8:ee:7c:e5:ed:01:34:d8:dd:72:56:07:cc:72:
2b:7e:e9:2d:21:15:4b:a6:12:b5:8f:d9:93:15:20:b9:24:4e:
a3:d0:70:01:b2:7a:62:39:92:e8:0d:88:2f:ff:a6:20:1f:5f:
63:19:cf:9f:c8:3b:54:a1:55:74:1f:34:e6:e6:25:ac:26:c4:
18:c7:65:fb:32:a6:77:ac:af:f0:32:f0:45:1e:bb:f1:34:65:
fc:ae:13:5d:c6:8b:f2:b9:08:38:65:86:fb:80:f5:07:5d:b6:
14:dc:36:0a:3c:a7:10:c2:4c:85:ed:e5:9e:38:87:ed:88:52:
70:10:a7:56:a3:16:aa:e0:16:1d:a4:a0:e7:59:69:c5:d5:4d:
cd:88:b9:b9:c1:c4:f4:50:30:00:c6:da:ef:6c:05:2a:12:52:
71:46:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:33:08 2026 by rpki-client