This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa
File: 3138392e38392e37382e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier: MCoiijy9qRVv9wjm9S85h+qru6eXkQR8GB1FuFA2ug4=
Subject key identifier: 4F:0D:6D:40:19:EF:FF:72:7D:2B:F4:53:B5:4D:7F:42:1E:49:0A:FE
Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial: 35950C7D97ACC7B33707CCA1B7AD3F701A25DC82
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa
Signing time: Thu 08 Jan 2026 20:45:36 +0000
ROA not before: Thu 08 Jan 2026 20:40:36 +0000
ROA not after: Thu 07 Jan 2027 20:45:36 +0000
asID: 28184
IP address blocks: 189.89.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Jan 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:95:0c:7d:97:ac:c7:b3:37:07:cc:a1:b7:ad:3f:70:1a:25:dc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Validity
Not Before: Jan 8 20:40:36 2026 GMT
Not After : Jan 7 20:45:36 2027 GMT
Subject: CN=4F0D6D4019EFFF727D2BF453B54D7F421E490AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:e1:16:bd:2e:55:7a:96:47:54:da:51:4e:
d0:63:e8:84:06:4a:5a:86:cb:a2:d5:aa:8a:48:b9:
13:af:21:f0:78:1d:e9:c0:57:42:ca:d7:5c:83:17:
00:84:bc:3f:1a:64:d9:6e:17:6e:56:78:90:5a:79:
91:f0:80:67:04:b8:ca:cd:a7:55:f4:9e:fa:11:66:
3a:07:39:3a:8c:ef:0b:90:db:7b:05:b1:2e:19:5d:
89:9c:59:7c:c4:0b:57:a4:6f:6a:70:6a:3e:d0:8b:
3b:28:5f:b3:ca:13:49:f2:6d:9c:0a:22:d8:a3:26:
3e:95:62:9d:6b:bf:b8:e6:30:e1:39:4d:63:e1:2b:
e2:be:81:bc:89:e2:41:fc:08:4c:01:58:05:a6:f7:
b3:d6:a3:4e:95:e6:ae:6a:9a:36:f2:0d:fb:2e:9e:
32:66:0a:f3:ff:7c:ab:37:47:a1:32:ff:ed:53:1d:
5c:27:2f:5c:64:a9:a0:7c:34:76:06:c0:c8:0e:29:
47:e5:b0:e6:b7:6c:23:d5:d6:8d:08:91:ea:25:ae:
f1:42:65:28:0a:db:d7:3d:1b:43:b0:ce:77:8b:92:
f0:1b:31:da:46:5b:9c:d5:09:ec:cf:f0:93:2a:50:
89:fb:d3:5d:39:40:63:a0:66:0e:e6:33:57:d5:bc:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:6D:40:19:EF:FF:72:7D:2B:F4:53:B5:4D:7F:42:1E:49:0A:FE
X509v3 Authority Key Identifier:
keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.78.0/23
Signature Algorithm: sha256WithRSAEncryption
25:cf:d2:5f:41:e9:01:71:41:44:03:cd:8d:0e:bd:89:f4:63:
56:aa:34:92:d2:5e:45:82:92:25:12:0d:61:0e:a2:36:f3:be:
94:7b:2c:89:95:89:65:d1:3f:cc:dc:5b:fc:ae:28:0e:9b:e3:
38:c6:2d:b4:00:41:97:05:b4:52:2e:9f:63:4b:fc:df:a6:e8:
fe:2b:a7:ac:4d:6c:0d:57:f7:93:80:8c:31:b4:a6:1b:e5:63:
a6:c0:e7:86:00:9d:64:55:de:f7:8e:fe:7e:79:8f:d6:d2:e5:
a8:47:cf:24:0b:e4:6e:8b:57:e0:cc:9f:7c:5f:fd:73:1f:2c:
27:8a:8d:50:0e:4c:50:5f:46:ea:0f:ec:e8:08:fe:6d:65:a0:
c9:0e:0f:4d:46:fa:52:00:88:01:7b:d9:8d:73:b4:f9:e5:46:
ac:64:f8:ed:7f:c6:a3:53:8b:32:36:1f:b1:e2:ff:e5:c3:56:
b3:33:9b:6b:e7:31:27:df:dd:d5:f4:f2:50:90:40:4e:8c:93:
bb:ce:84:91:c0:0b:93:07:86:b5:d9:37:ba:95:12:53:71:a1:
40:94:3d:3f:2e:c3:57:90:a5:a2:2c:e4:ee:96:f1:9f:4d:5e:
11:ad:f5:80:23:e4:d2:86:aa:b5:31:11:45:e9:91:73:09:f6:
13:38:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:34 2026 by rpki-client