This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa
File: 3138392e38392e37392e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier: ixmWrgVU3A040wr/G7ppVgbEjXkgRY6O0UxCUmDX7+Y=
Subject key identifier: FD:5F:7E:D0:ED:CE:B9:99:59:57:D5:87:30:35:DF:2E:E8:28:C1:2B
Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial: 102B34A0FACC9987A071DF52CAA2DAC392DB5203
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa
Signing time: Thu 08 Jan 2026 20:45:36 +0000
ROA not before: Thu 08 Jan 2026 20:40:36 +0000
ROA not after: Thu 07 Jan 2027 20:45:36 +0000
asID: 28184
IP address blocks: 189.89.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Jan 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2b:34:a0:fa:cc:99:87:a0:71:df:52:ca:a2:da:c3:92:db:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Validity
Not Before: Jan 8 20:40:36 2026 GMT
Not After : Jan 7 20:45:36 2027 GMT
Subject: CN=FD5F7ED0EDCEB9995957D5873035DF2EE828C12B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d8:23:6d:12:7a:c3:49:8f:72:3b:d0:96:d0:
bc:18:2e:d0:23:b5:51:fd:c9:28:fe:ac:59:03:b7:
91:0c:48:0f:f7:b4:56:04:4e:86:ec:70:12:f6:1a:
d4:4d:88:bb:f2:d3:cc:20:19:2e:e2:2f:22:96:c8:
44:37:44:d8:eb:57:c2:67:60:10:7d:eb:fc:c5:75:
49:ea:50:29:27:ce:06:d5:fd:60:aa:82:1f:c7:b8:
40:e4:21:05:90:fd:00:c2:b4:1e:fc:28:a7:87:fe:
01:f9:2c:b0:39:c7:75:42:87:f7:15:e1:ba:31:ae:
4b:25:eb:69:b0:21:14:fb:35:8f:54:2c:c9:13:80:
93:67:2a:b8:dc:b8:3c:e6:4c:4b:dd:a2:95:b5:15:
48:e8:55:7a:da:28:9b:b5:30:78:31:b2:92:25:34:
7b:0c:57:c5:5f:02:9e:de:bd:09:71:f6:06:7c:ba:
30:e8:cf:ed:76:26:96:f3:23:4f:16:92:7d:ea:0c:
d0:a7:b0:7d:72:d6:db:ff:d9:3a:ca:bd:d6:fc:50:
af:ec:64:0b:02:5e:f8:85:e1:f4:94:48:9b:60:57:
c1:e4:31:47:23:76:9c:82:67:d6:23:3a:23:c1:e0:
6b:bf:98:28:fa:4f:1c:e9:62:0f:70:40:f8:1a:d0:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:7E:D0:ED:CE:B9:99:59:57:D5:87:30:35:DF:2E:E8:28:C1:2B
X509v3 Authority Key Identifier:
keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.79.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e0:68:2b:3e:38:a0:84:ac:53:71:14:6e:7e:03:dc:41:73:
64:2d:d0:29:d9:42:a1:ad:c2:0e:04:f2:fc:36:d4:f2:83:9c:
0a:6f:83:57:1f:da:41:c6:5c:36:87:28:f4:9a:b6:a5:07:41:
a5:4a:fe:bb:90:4c:e8:10:e9:92:a8:75:17:11:ee:1c:b7:23:
a0:59:37:ab:db:b2:a9:76:40:58:06:ac:60:8a:27:ac:a2:85:
b7:e9:fd:bb:55:30:0e:90:e2:f6:4d:4f:2e:7f:39:15:63:07:
51:0e:f2:c8:b1:a8:b2:64:10:ee:27:5a:08:b0:17:78:0f:1b:
d8:a8:8b:1f:04:02:ab:c7:ac:50:e2:77:85:ec:17:04:ef:4b:
34:ef:b3:b0:1c:2d:38:b0:a9:88:da:a7:a4:a6:73:5e:fa:48:
aa:bc:11:9a:9f:07:a1:08:50:cf:2d:74:68:6e:af:3b:f4:31:
93:9d:51:1c:70:ce:11:e8:4b:86:c5:07:d7:d0:84:4f:f7:19:
a3:ba:5b:35:2a:44:96:52:24:8b:35:65:6d:1c:a8:0e:d2:23:
22:a3:a8:47:25:ce:09:02:b6:a0:c3:35:f1:28:d6:92:46:e0:
e9:9c:19:d1:03:82:64:55:a8:3f:55:e2:e2:4b:c6:14:f3:a5:
d0:08:6a:32
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUECs0oPrMmYegcd9SyqLaw5LbUgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD
QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV
BAMTKEZENUY3RUQwRURDRUI5OTk1OTU3RDU4NzMwMzVERjJFRTgyOEMxMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2CNtEnrDSY9yO9CW0LwYLtAj
tVH9ySj+rFkDt5EMSA/3tFYETobscBL2GtRNiLvy08wgGS7iLyKWyEQ3RNjrV8Jn
YBB96/zFdUnqUCknzgbV/WCqgh/HuEDkIQWQ/QDCtB78KKeH/gH5LLA5x3VCh/cV
4boxrksl62mwIRT7NY9ULMkTgJNnKrjcuDzmTEvdopW1FUjoVXraKJu1MHgxspIl
NHsMV8VfAp7evQlx9gZ8ujDoz+12JpbzI08Wkn3qDNCnsH1y1tv/2TrKvdb8UK/s
ZAsCXviF4fSUSJtgV8HkMUcjdpyCZ9YjOiPB4Gu/mCj6TxzpYg9wQPga0DurAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/V9+0O3OuZlZV9WHMDXfLugowSswHwYDVR0j
BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3
MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZTzANBgkqhkiG9w0BAQsFAAOCAQEAYOBoKz44oISs
U3EUbn4D3EFzZC3QKdlCoa3CDgTy/DbU8oOcCm+DVx/aQcZcNoco9Jq2pQdBpUr+
u5BM6BDpkqh1FxHuHLcjoFk3q9uyqXZAWAasYIonrKKFt+n9u1UwDpDi9k1PLn85
FWMHUQ7yyLGosmQQ7idaCLAXeA8b2KiLHwQCq8esUOJ3hewXBO9LNO+zsBwtOLCp
iNqnpKZzXvpIqrwRmp8HoQhQzy10aG6vO/Qxk51RHHDOEehLhsUH19CET/cZo7pb
NSpEllIkizVlbRyoDtIjIqOoRyXOCQK2oMM18SjWkkbg6ZwZ0QOCZFWoP1Xi4kvG
FPOl0AhqMg==
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:29 2026 by rpki-client