This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa
File: 3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier: XZfRURcT66S5+enOMEP9O+rkM8QDnY2EzbRYeKkFYxA=
Subject key identifier: 20:0D:2D:D0:CC:AC:54:A9:DB:D1:11:6C:AB:94:6C:24:69:23:06:33
Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial: 7FDA08E53CB3F904D57C861E8B82A034CAC73EA7
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa
Signing time: Tue 02 Dec 2025 19:03:47 +0000
ROA not before: Tue 02 Dec 2025 18:58:47 +0000
ROA not after: Tue 01 Dec 2026 19:03:47 +0000
asID: 61587
IP address blocks: 170.254.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 08:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:da:08:e5:3c:b3:f9:04:d5:7c:86:1e:8b:82:a0:34:ca:c7:3e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Validity
Not Before: Dec 2 18:58:47 2025 GMT
Not After : Dec 1 19:03:47 2026 GMT
Subject: CN=200D2DD0CCAC54A9DBD1116CAB946C2469230633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:25:a3:f8:5f:98:2a:46:44:d9:a2:d0:aa:
5e:3e:c1:e7:08:6c:3f:99:21:d1:5c:f5:e5:be:43:
1a:0c:5c:0f:c6:02:f6:8e:e5:bc:36:bc:42:08:aa:
a8:d2:f2:5c:42:e8:ea:eb:ae:83:b3:73:b8:e8:b0:
dc:bd:f0:4f:b0:50:04:dd:4b:b0:ff:2f:aa:5c:06:
73:06:61:f8:d7:74:40:79:03:c3:63:d7:a5:92:8a:
11:8a:ea:85:d7:bd:9f:fc:59:af:e4:db:9f:51:48:
b0:7e:8b:ce:b1:97:ea:e2:4c:80:5f:95:b2:03:1c:
cf:31:c5:77:05:8f:b8:75:2f:0e:6d:4d:b2:69:44:
3d:61:6e:b0:c6:aa:80:04:75:29:a5:cd:5c:57:95:
88:94:e9:c0:7f:04:34:c3:f8:9d:a3:95:29:6a:1d:
a2:e8:b5:8a:f3:3a:df:4e:ff:82:14:2f:45:d6:09:
42:12:5c:2e:bd:a3:91:bc:6e:0a:8e:1f:48:43:45:
81:57:9d:f5:b3:2f:3a:2d:a3:e5:58:74:c9:8e:4f:
9b:f8:ef:81:c9:bd:fa:ca:be:ea:d2:68:62:f0:33:
c5:9a:3f:e5:85:4b:9e:c0:4d:de:ec:fc:96:5e:b9:
45:ce:94:42:63:c1:5f:9b:59:e3:0d:98:7f:1e:cc:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:2D:D0:CC:AC:54:A9:DB:D1:11:6C:AB:94:6C:24:69:23:06:33
X509v3 Authority Key Identifier:
keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.136.0/24
Signature Algorithm: sha256WithRSAEncryption
82:06:4e:08:db:4d:d7:b2:2d:26:7f:f6:23:e4:eb:b0:0c:08:
85:88:fa:57:bb:1a:9a:0a:60:a4:4e:55:7f:aa:cc:ff:78:4a:
67:01:14:e6:a4:ca:55:4b:a5:ac:dd:39:da:bb:48:10:93:d1:
4b:82:0c:b8:89:c7:e7:94:96:5f:a0:78:28:65:d2:71:e8:32:
cf:f3:60:4e:fc:d2:b6:6b:0e:34:e8:d7:75:f1:61:60:9c:54:
f6:50:03:5c:40:e3:2e:d8:5f:36:a0:dd:79:79:01:ea:24:43:
a0:69:f6:30:32:23:df:0c:a0:43:5b:4d:f5:c7:0f:8d:bd:96:
1d:e2:0d:7b:ab:bc:48:eb:94:3c:9b:67:22:74:76:14:76:98:
b4:04:be:5b:04:58:50:9e:f3:9c:24:f2:44:75:2a:ed:0e:ae:
dc:a2:ff:e9:53:0d:01:0f:6e:92:cc:e7:20:ef:f2:76:5d:37:
2b:81:12:6d:33:49:2c:da:c5:e9:89:a3:7a:f8:63:6a:35:f9:
a3:df:bd:98:4b:26:4c:1a:63:7c:e9:08:62:56:86:d7:d0:c6:
62:3e:09:e9:c3:3c:9b:b8:ed:7c:9b:93:81:be:f0:90:8c:5e:
55:45:17:57:22:f4:ea:0f:3e:ee:43:ac:74:f1:7a:a1:da:67:
74:da:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:32:16 2025 by rpki-client