This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
File: 3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier: d3fRmzI9sZVligCRQHKcYz+NsWuEweztuu/jW6ar/r0=
Subject key identifier: 93:4D:DD:FE:B0:2E:BF:98:91:E8:1B:17:15:AB:0B:74:FE:FA:67:9D
Certificate issuer: /CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Certificate serial: 7A149D48AB89D97796CD6CF964EA03ED44035AFD
Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
Signing time: Wed 03 Dec 2025 15:17:25 +0000
ROA not before: Wed 03 Dec 2025 15:12:25 +0000
ROA not after: Wed 02 Dec 2026 15:17:25 +0000
asID: 265384
IP address blocks: 170.254.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:14:9d:48:ab:89:d9:77:96:cd:6c:f9:64:ea:03:ed:44:03:5a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Validity
Not Before: Dec 3 15:12:25 2025 GMT
Not After : Dec 2 15:17:25 2026 GMT
Subject: CN=934DDDFEB02EBF9891E81B1715AB0B74FEFA679D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:eb:f3:a6:69:ca:7a:c8:22:4c:af:7c:bc:
c7:a2:51:e7:33:5d:43:18:07:3a:fb:38:ce:d0:6b:
b4:d0:0f:83:79:2e:79:e5:21:4d:22:9b:4d:bf:c1:
15:9a:71:69:31:f7:0e:00:7c:f1:5f:13:73:0a:94:
86:d7:d4:fc:b9:c3:51:88:ce:bb:22:2f:ea:8c:3f:
2c:60:8f:ee:4e:9d:2b:48:86:6e:2d:61:29:86:fe:
23:7e:a8:f1:d4:fc:b6:c7:7c:31:b5:e6:3d:1a:1b:
5d:1f:0b:0b:a8:87:51:ad:b9:34:32:d9:eb:43:29:
fd:ed:d2:12:76:8f:d0:77:8f:b9:58:55:11:36:6e:
9c:8e:e8:a0:3e:50:1e:46:e3:f9:02:d5:34:e4:36:
c3:1e:35:b6:1e:29:ea:14:a1:d1:92:2f:35:8c:18:
05:0a:67:65:a3:1d:46:3c:13:51:00:b8:19:05:71:
10:f7:88:cb:24:a7:3b:30:f6:78:7b:93:b3:55:06:
f5:b2:ab:97:2e:22:b4:30:aa:30:13:31:2b:59:47:
bc:c1:f8:e5:f5:bc:76:00:6f:27:b9:34:32:e9:38:
7e:1c:23:8d:9c:01:b3:6b:38:17:e4:a8:7e:d3:39:
6e:34:ba:c4:a2:4f:92:76:cf:08:b7:1d:b6:6a:a9:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:DD:FE:B0:2E:BF:98:91:E8:1B:17:15:AB:0B:74:FE:FA:67:9D
X509v3 Authority Key Identifier:
keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e6:3e:93:49:b4:d7:d1:f4:2a:af:48:8c:31:e2:70:ff:96:
6d:01:f2:d5:60:a3:5f:4b:98:eb:0d:3a:f5:57:a5:0e:67:1d:
b7:66:56:21:32:e4:f7:65:09:5a:ce:21:37:52:0f:1b:a5:eb:
8c:09:83:1e:ec:1c:05:6c:fe:00:15:8f:73:81:79:3f:73:ab:
38:89:07:d8:97:f0:e8:96:9f:d6:36:48:c5:64:4e:37:44:2d:
67:b5:01:ce:5f:be:67:63:c2:c4:6b:c0:3e:57:2a:59:88:ff:
02:83:fc:32:30:2f:0c:b2:17:35:b2:1d:dc:9c:68:80:44:7b:
be:12:f7:a3:c6:b4:b4:f7:d6:8b:3a:21:4f:e3:f4:ad:f5:dd:
eb:41:1b:e6:ea:37:f5:0c:38:8a:50:f8:38:31:b2:ea:6c:ba:
20:28:92:7d:87:ea:3b:d2:27:e4:3f:48:50:e7:9b:70:02:01:
9e:de:ca:74:96:c2:77:52:5e:7e:6c:33:f0:5a:ca:65:94:9c:
07:56:79:53:26:5c:bd:b6:57:08:df:94:8c:87:ad:2b:25:4e:
bf:11:f1:26:56:44:e9:44:c0:2f:ec:81:74:15:6e:da:a1:a2:
dc:c9:24:a5:fc:28:52:0d:55:b3:77:e6:4d:98:7f:f4:9f:2b:
62:4f:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:05 2025 by rpki-client