This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32342d3234203d3e203238313834.roa
File: 3138392e38392e37342e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier: axfw2WSyCtqkDilffuKBG86l3XmmWolQbNRNwQub4Yg=
Subject key identifier: 48:8C:47:1A:D3:D0:8E:EC:A7:90:39:EA:CE:06:B8:82:8B:5C:CC:5F
Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial: 6371C5DC51F15014858B1072347FA2EAE8C66385
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32342d3234203d3e203238313834.roa
Signing time: Thu 08 Jan 2026 20:45:35 +0000
ROA not before: Thu 08 Jan 2026 20:40:35 +0000
ROA not after: Thu 07 Jan 2027 20:45:35 +0000
asID: 28184
IP address blocks: 189.89.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Jan 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:71:c5:dc:51:f1:50:14:85:8b:10:72:34:7f:a2:ea:e8:c6:63:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Validity
Not Before: Jan 8 20:40:35 2026 GMT
Not After : Jan 7 20:45:35 2027 GMT
Subject: CN=488C471AD3D08EECA79039EACE06B8828B5CCC5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:30:da:16:dd:78:76:47:68:51:c7:4e:3a:
2f:d6:2b:8e:0a:f0:6e:59:08:15:0f:da:fa:10:06:
b4:a2:09:10:fe:9b:dc:6c:e1:ad:88:5c:aa:8a:ee:
7a:25:92:f5:bb:99:41:d6:bf:27:cb:24:83:75:05:
c9:7f:a4:3f:58:34:9d:63:e9:08:b6:27:b2:62:82:
1f:bc:8a:a3:1b:0f:2d:0a:d3:18:6a:fa:f7:a2:8b:
4f:9d:e1:e4:f7:dd:db:95:c4:bd:24:e9:cd:f2:70:
84:bf:36:e8:74:00:03:95:04:ea:31:e5:b8:ca:27:
4c:80:a5:6e:e3:9f:44:a2:a0:d2:86:26:c1:89:ff:
db:14:f6:ba:60:fc:5a:0b:f2:df:b3:1e:92:23:04:
52:6d:94:11:aa:f2:32:16:64:29:ac:29:23:66:41:
32:5d:f7:f9:03:b7:4d:a3:7b:51:71:23:45:ff:9f:
a6:79:fb:82:3a:07:05:7f:7a:26:d3:c4:9c:9d:89:
a5:58:10:46:2a:87:47:ad:03:01:c8:cb:48:10:78:
ff:8b:1e:59:d2:a8:13:1a:03:f1:c7:68:5c:21:5b:
ed:86:2d:47:b2:37:d3:ee:57:bf:ed:17:60:e7:95:
ce:27:c1:cf:0a:54:34:23:a9:02:b4:6b:38:a0:f1:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:47:1A:D3:D0:8E:EC:A7:90:39:EA:CE:06:B8:82:8B:5C:CC:5F
X509v3 Authority Key Identifier:
keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32342d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:17:82:9c:2b:61:c8:a6:e3:7a:8d:53:29:8b:59:de:2a:be:
ea:f7:5d:7e:d5:da:64:33:da:05:5e:43:9c:5f:33:8a:ef:1b:
bf:9a:a5:c9:c9:ee:d7:fd:95:ba:49:a2:39:57:e3:30:18:5c:
c1:83:17:6c:16:e1:7a:b7:8b:16:7d:3a:ec:b7:c8:86:45:07:
54:0c:ef:a4:90:44:46:51:a2:c0:24:1b:77:b5:cc:c4:40:23:
2b:68:f5:1f:f8:79:18:72:fb:ae:83:f4:02:50:dd:64:ff:b3:
9f:f5:e4:59:e2:98:83:a2:1f:79:6e:ad:02:12:c6:93:24:d7:
51:4c:32:fb:5f:45:b6:3a:c8:16:24:fb:7d:6a:5b:20:e6:a8:
ba:b3:c4:bc:43:b6:51:ba:96:c8:5b:38:47:a3:79:33:51:14:
ad:07:0c:f6:c4:81:ad:40:b5:46:ae:f8:66:44:bf:ee:44:42:
fa:95:7e:f0:3c:d2:32:61:2d:97:ae:07:65:b9:1c:a5:58:fe:
a5:c1:98:d0:e2:3a:69:4d:4c:0f:76:41:22:3c:3d:9e:d6:ac:
4b:4d:0c:73:f2:46:85:6c:4f:84:a1:cc:b5:93:44:13:8c:66:
33:f7:22:3c:ee:03:6d:bc:13:16:a5:1f:0a:43:f8:df:30:9f:
06:92:f7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:31 2026 by rpki-client