This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa
File: 3133382e33362e38362e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier: jQKgLiEcHT1jQi25uVZOEFzBkMfvCZwfybJ3uqAF+vg=
Subject key identifier: 4F:F7:35:9C:BC:9B:36:58:19:E5:B6:ED:E5:03:CE:36:0A:00:3D:75
Certificate issuer: /CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Certificate serial: 4711111F2484072AF73C2C54C580C39E6E2837D9
Authority key identifier: 19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa
Signing time: Sun 28 Dec 2025 20:51:20 +0000
ROA not before: Sun 28 Dec 2025 20:46:20 +0000
ROA not after: Sun 27 Dec 2026 20:51:20 +0000
asID: 264193
IP address blocks: 138.36.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl
rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 16:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:11:11:1f:24:84:07:2a:f7:3c:2c:54:c5:80:c3:9e:6e:28:37:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Validity
Not Before: Dec 28 20:46:20 2025 GMT
Not After : Dec 27 20:51:20 2026 GMT
Subject: CN=4FF7359CBC9B365819E5B6EDE503CE360A003D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:cb:b2:8e:6f:c5:8a:48:45:96:49:76:d6:
d9:37:f4:f6:ad:80:ad:89:9f:1f:da:ee:0e:55:13:
ee:be:4f:14:be:b5:03:b2:38:99:3c:aa:87:1f:69:
c6:ee:df:f1:35:00:90:41:e7:c0:a6:84:e3:b5:7e:
0c:ec:9d:36:dc:b4:05:14:17:85:a3:87:b9:65:35:
c4:b2:a3:cc:79:5c:e8:4b:32:c6:d2:30:09:77:e1:
5c:28:64:5f:01:f0:3d:ed:bd:8a:e1:9f:54:b5:7a:
65:d6:97:44:08:f5:2c:7c:b8:b9:cb:78:8d:a8:cb:
37:b3:73:5c:01:9f:35:4e:d5:ec:34:09:8c:98:f1:
b2:d8:3f:d8:d3:37:a7:69:7b:de:0a:d3:a2:ec:3e:
56:50:2a:25:8e:cd:d5:2a:09:ce:a0:cb:c9:74:e7:
fc:8f:49:e7:ab:fc:8b:3e:1c:92:c2:51:e9:50:02:
c9:a1:e3:ed:cf:4b:84:28:f0:f7:ee:d1:f3:49:a6:
d7:5a:5f:9f:12:a3:8f:e1:33:59:48:8f:c4:de:ea:
98:0a:2c:0a:0f:fb:48:bc:56:c0:d7:f8:e2:53:87:
ac:cd:cf:f6:cb:4f:ea:cb:9a:da:11:3b:f8:b1:e9:
91:66:f9:e6:df:71:5f:26:68:d2:9a:dc:49:c6:50:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:35:9C:BC:9B:36:58:19:E5:B6:ED:E5:03:CE:36:0A:00:3D:75
X509v3 Authority Key Identifier:
keyid:19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4c:e6:15:d5:08:ff:f8:8d:d9:43:da:e4:01:84:80:d6:9a:
90:a7:65:3f:81:6f:3e:3d:e2:1f:13:85:59:22:40:8b:6d:ff:
e2:63:c0:7e:a3:fe:d0:76:57:d4:0f:84:7c:bb:bd:af:9e:b7:
d6:2e:bb:49:2f:a2:80:19:de:ff:c2:62:0d:ed:f6:16:c4:3e:
8d:7c:cc:6f:c7:2e:11:a8:08:85:85:b5:3b:21:25:c7:3d:79:
9f:ff:c8:66:c6:8b:fb:42:2a:5c:ab:44:c1:d4:55:ee:8a:82:
20:cb:ff:84:60:e7:ef:26:dc:e9:e4:54:50:f8:21:75:fa:1e:
6b:88:43:62:44:2b:47:55:a1:a7:b0:c8:c8:2d:c6:17:97:fb:
3f:98:a7:2b:28:90:fc:f3:cd:53:50:f6:d8:dd:f3:c4:49:4c:
0c:3d:13:7d:25:ec:83:d8:50:69:17:fb:1f:e7:30:55:bc:de:
69:54:9f:25:f5:40:68:a0:9e:52:b1:5f:8e:0f:d1:c5:0e:9b:
61:5f:c0:dc:06:b5:e3:63:91:a4:af:c7:b7:db:f1:8a:8c:5e:
f0:ae:e3:f6:90:55:b5:d0:c0:f6:8a:c6:89:39:3a:df:46:0b:
1b:1e:bb:d5:09:c5:16:b8:65:b0:2f:2d:d3:86:55:84:1d:3a:
d1:3b:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:11:06 2026 by rpki-client