This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
File: 3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa (raw, json)
Hash identifier: y/KQu12g8a4PrD7rucWmBscwkQSRPjJq9D8krXI3tek=
Subject key identifier: 1F:C5:DD:97:65:A4:5E:02:B8:FB:83:14:00:A9:3C:82:83:7E:D4:1D
Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial: 618719D4136C5618F21BB30DF3FB03E798E1F0A1
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
Signing time: Tue 02 Dec 2025 19:03:40 +0000
ROA not before: Tue 02 Dec 2025 18:58:40 +0000
ROA not after: Tue 01 Dec 2026 19:03:40 +0000
asID: 61587
IP address blocks: 170.254.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:87:19:d4:13:6c:56:18:f2:1b:b3:0d:f3:fb:03:e7:98:e1:f0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Validity
Not Before: Dec 2 18:58:40 2025 GMT
Not After : Dec 1 19:03:40 2026 GMT
Subject: CN=1FC5DD9765A45E02B8FB831400A93C82837ED41D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:61:be:43:c0:75:ee:23:20:2f:bb:66:c7:
bb:df:79:71:7a:18:fe:3a:87:2b:6f:f0:2a:c5:5a:
2e:47:90:3a:53:40:94:a0:b4:05:0a:f7:db:ad:22:
52:03:c3:f6:4d:a2:56:8c:7e:a5:23:9e:7d:fa:1b:
6a:94:1d:90:83:e2:28:bf:70:ef:87:56:05:43:b9:
2b:58:48:a4:47:3f:e2:e5:ff:33:f9:29:df:79:bd:
b8:e7:e4:21:db:6f:31:6f:0a:4f:64:a6:70:fd:20:
c5:35:8f:98:85:d6:43:d9:46:72:be:87:63:fa:45:
0d:ec:da:26:a5:cc:34:09:40:82:f7:3d:da:25:9d:
dd:86:24:5d:1b:02:3d:86:e8:b2:0a:0c:6c:12:a7:
5f:22:67:1b:fd:51:59:4f:9a:e8:60:8f:c0:f6:6b:
74:6a:46:2a:35:62:2f:e2:3a:9f:c0:57:2c:e7:d4:
a4:66:90:d0:a7:ea:55:9f:de:6f:63:2f:eb:2e:1c:
a9:a8:99:85:bd:40:f0:26:df:b8:43:55:d8:06:8b:
d4:c7:5c:5a:f2:10:bd:8c:f7:90:83:a6:6c:4e:2f:
8d:4d:5b:10:b2:db:67:98:cd:28:f6:56:fc:ec:58:
d3:64:af:af:8f:25:ee:5e:20:68:09:e1:07:76:21:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:DD:97:65:A4:5E:02:B8:FB:83:14:00:A9:3C:82:83:7E:D4:1D
X509v3 Authority Key Identifier:
keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:41:e8:dd:7c:fa:74:1c:84:71:80:65:83:57:ec:1a:0a:07:
c8:0b:4d:00:fd:92:f6:a3:a2:21:e1:c6:72:56:11:fb:d8:a3:
81:b3:4c:7f:70:eb:75:8e:c3:4b:9a:db:20:bc:fe:45:71:94:
3b:f9:d7:d6:04:a3:a0:b4:ef:b0:38:df:74:2c:79:c8:fb:a1:
f9:ff:18:53:c0:83:15:36:17:9f:67:3c:c3:f5:9c:e6:77:72:
ad:31:93:e3:06:02:f6:03:2d:0c:aa:d6:e4:39:00:df:d7:ed:
91:e9:e5:3f:45:c7:3f:ad:62:d1:0d:e0:e0:ae:15:3a:7d:ab:
15:6e:6d:4f:01:f7:05:0b:49:97:4c:34:c9:73:74:de:ed:95:
29:30:9a:05:32:c4:80:51:45:18:ff:58:19:41:7c:50:78:96:
28:aa:68:af:5f:05:25:a6:5e:6a:fe:be:00:08:8c:65:35:bd:
30:98:ff:00:19:16:12:ab:29:92:9a:81:c1:56:2e:af:ae:9c:
98:04:f6:84:63:71:eb:a2:cb:69:23:66:fb:9e:d4:4f:dd:88:
18:3f:f6:b1:bb:13:44:ab:11:da:1d:5a:66:ba:a1:e9:dc:5a:
4b:30:8c:b5:68:37:17:6f:3c:f8:4a:e7:3b:84:e2:ee:81:06:
8a:e7:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:51 2025 by rpki-client