This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
File: 3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (raw, json)
Hash identifier: Z+mfum6E0qJUsrZjD4z+JHLn4pZCtvz2Zl2YyWVdcp4=
Subject key identifier: DB:72:40:C0:36:33:67:AA:45:F1:2E:21:B3:1D:2B:E5:6F:C6:C5:90
Certificate issuer: /CN=34BF6A56915CA33890219A0C1EA36D5F1688801B
Certificate serial: 765D816F004499DF34013D861507810AC9192F22
Authority key identifier: 34:BF:6A:56:91:5C:A3:38:90:21:9A:0C:1E:A3:6D:5F:16:88:80:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
Signing time: Fri 12 Dec 2025 13:36:52 +0000
ROA not before: Fri 12 Dec 2025 13:31:52 +0000
ROA not after: Fri 11 Dec 2026 13:36:52 +0000
asID: 53019
IP address blocks: 177.70.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.crl
rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 17 Dec 2025 08:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5d:81:6f:00:44:99:df:34:01:3d:86:15:07:81:0a:c9:19:2f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34BF6A56915CA33890219A0C1EA36D5F1688801B
Validity
Not Before: Dec 12 13:31:52 2025 GMT
Not After : Dec 11 13:36:52 2026 GMT
Subject: CN=DB7240C0363367AA45F12E21B31D2BE56FC6C590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:6a:67:ba:9b:5b:5e:c0:5a:1c:63:87:20:
e8:fe:bf:06:50:0d:46:25:2c:08:a4:1a:b1:52:d6:
d9:d2:9e:7b:6d:bc:7c:a9:d2:e2:7d:58:e7:df:59:
c6:28:b2:55:ed:1c:75:67:7d:ff:96:06:8c:e2:ea:
fb:09:6e:dd:55:87:57:ee:35:b1:6f:59:2e:b9:76:
11:34:0a:80:34:47:61:ca:81:93:97:a0:7e:74:02:
60:eb:4a:67:12:0c:f9:f4:1b:ff:9e:ed:d3:92:5d:
22:f9:52:6d:24:0b:2b:84:6c:aa:28:66:74:d5:66:
fa:fc:78:a2:9c:a0:94:90:74:36:17:01:e2:a0:e1:
4e:82:f2:15:b0:08:1e:09:ce:68:d8:b4:64:3d:44:
ad:c9:98:e6:16:ac:0c:72:98:a3:16:92:4c:7b:66:
c0:5f:37:26:e4:ad:d8:08:8f:62:8b:28:1b:a6:54:
34:3d:73:f9:21:94:e5:66:e4:c7:3e:ef:03:3e:56:
6f:ee:5a:d2:d8:91:54:95:52:d2:30:0b:cf:5a:45:
47:8c:0e:53:58:f8:f3:bc:06:1c:1a:cc:58:46:c6:
23:ec:e6:c1:b3:ee:d3:11:08:b7:d2:c5:90:a0:3a:
e3:57:b8:20:10:41:f4:31:de:ad:fb:8c:24:13:c5:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:40:C0:36:33:67:AA:45:F1:2E:21:B3:1D:2B:E5:6F:C6:C5:90
X509v3 Authority Key Identifier:
keyid:34:BF:6A:56:91:5C:A3:38:90:21:9A:0C:1E:A3:6D:5F:16:88:80:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.160.0/20
Signature Algorithm: sha256WithRSAEncryption
30:b1:ee:52:75:60:4c:b4:b5:16:34:34:23:ad:cc:14:f7:18:
47:0a:13:d1:a9:8b:6a:5d:8d:63:ba:40:fd:2f:23:fb:16:a8:
b1:46:56:25:ed:63:87:ce:13:54:96:05:03:99:cd:11:e0:0d:
c9:88:38:5f:2d:93:f5:10:24:4f:d3:ab:24:3b:dd:73:8d:42:
ba:fc:5e:10:20:e8:b5:39:17:d7:89:90:cf:ad:0e:89:56:84:
0d:3e:9e:0c:84:62:be:de:2f:ab:d9:9d:35:b9:53:d1:27:f9:
88:bc:16:d2:b0:f4:33:3d:69:16:0f:ef:21:30:8c:c5:14:d9:
59:06:34:94:29:1e:e7:35:9c:54:77:44:f9:62:c2:e2:5a:7e:
6f:fc:9f:30:47:19:b0:78:a3:83:98:8c:6a:68:f4:78:bf:0c:
1f:0f:0c:ad:3b:95:e3:28:be:8a:4b:2d:96:ec:1b:18:d2:13:
9c:8c:96:0d:ff:3c:b1:be:bc:61:c3:e7:54:9a:af:02:41:49:
a9:cc:d2:a9:af:6b:3f:13:fa:a3:e8:0a:e0:7b:db:a6:97:37:
66:a9:0c:3c:2c:86:a9:00:4e:f5:54:73:e4:d2:e1:c9:f7:ec:
af:da:0e:51:0e:0c:cb:27:59:38:d5:1f:ca:51:e2:31:c4:c6:
04:7f:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 01:05:47 2025 by rpki-client