This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139342e302f32342d3234203d3e20323632383535.roa
File: 3137372e31322e3139342e302f32342d3234203d3e20323632383535.roa (raw, json)
Hash identifier: AGTqjYTu6L6hecnsCjOXDUjglCra/ewYK1zwNz1KD4U=
Subject key identifier: CA:85:56:D4:21:5B:DF:94:D6:2A:9E:BD:1A:B6:F4:05:73:34:C0:5C
Certificate issuer: /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Certificate serial: 73AD5BED4A463A1F082575B19619C482CE1DA02F
Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139342e302f32342d3234203d3e20323632383535.roa
Signing time: Fri 07 Nov 2025 12:14:43 +0000
ROA not before: Fri 07 Nov 2025 12:09:43 +0000
ROA not after: Fri 06 Nov 2026 12:14:43 +0000
asID: 262855
IP address blocks: 177.12.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ad:5b:ed:4a:46:3a:1f:08:25:75:b1:96:19:c4:82:ce:1d:a0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Validity
Not Before: Nov 7 12:09:43 2025 GMT
Not After : Nov 6 12:14:43 2026 GMT
Subject: CN=CA8556D4215BDF94D62A9EBD1AB6F4057334C05C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:85:a0:69:2c:20:2d:63:cf:b5:8b:ed:ef:
f9:63:9e:e2:64:28:60:e9:93:17:0f:7a:50:39:a9:
6f:10:45:19:50:7a:54:ea:b4:d9:a7:d4:73:6f:3b:
c6:77:1b:d9:9c:d6:4e:56:c2:48:85:cd:5e:74:eb:
8d:63:97:77:a7:f4:8e:b9:26:c0:fc:a0:7e:5c:50:
05:97:d1:60:0c:9b:76:24:77:69:ff:e9:60:9f:74:
04:ee:d6:c3:c3:e5:63:1d:b4:58:5d:0e:7a:cd:3b:
e8:d8:97:9d:5c:ec:da:a1:f3:10:90:00:09:d9:1f:
40:4a:ab:f9:d8:50:20:f0:a2:88:5c:54:2d:92:06:
f3:a1:bb:81:70:bb:e8:19:4d:3a:20:51:d6:54:9b:
b3:db:ef:a8:6f:1b:3a:80:42:71:34:71:79:4b:60:
c5:7f:38:92:4f:fa:f9:6a:49:5c:2e:d4:64:f5:0c:
a5:08:47:f3:a8:66:f0:c8:46:14:ab:b0:4b:95:91:
c3:96:7c:22:dc:9e:1c:ed:67:86:3b:4b:32:58:8f:
9a:11:4a:90:ba:70:57:db:3c:f8:f0:3a:fb:9d:5e:
27:16:b9:20:f7:f6:ed:c1:50:b7:e7:03:1f:fe:b8:
d4:f9:72:21:b5:64:0b:6a:77:1f:22:fe:db:d7:b6:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:56:D4:21:5B:DF:94:D6:2A:9E:BD:1A:B6:F4:05:73:34:C0:5C
X509v3 Authority Key Identifier:
keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139342e302f32342d3234203d3e20323632383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.194.0/24
Signature Algorithm: sha256WithRSAEncryption
14:81:9a:9d:03:a4:d4:ee:64:29:95:c1:22:da:5b:45:02:ca:
a6:d2:50:44:6d:20:25:fa:e4:24:6c:46:d2:f5:ee:99:d1:ee:
95:2b:0b:78:03:b2:59:88:c3:8d:cb:b4:09:e9:69:d1:0c:85:
8e:9e:c4:c6:d1:b4:40:e2:d5:21:a5:ea:42:8d:71:0e:70:de:
68:e0:66:29:8b:79:5c:c1:11:bd:0d:b9:0a:16:24:e6:8b:b8:
50:37:e4:9d:f9:a1:41:7d:16:0d:2a:1d:5e:c3:81:eb:cc:21:
94:12:3a:05:36:81:78:15:a2:45:cd:45:c6:94:61:96:5c:61:
27:70:ae:eb:d2:2a:3d:8b:ef:05:8e:64:1c:d0:67:25:27:27:
8e:31:67:a5:e5:4d:7a:1a:c7:ca:92:11:c0:ae:42:33:01:16:
bb:5b:54:d5:96:f1:1d:31:36:8e:46:7e:ed:ca:8c:35:2c:a0:
c1:e0:c5:79:27:f3:aa:8d:a7:38:a6:bb:6a:1b:d5:18:29:99:
e8:70:bc:21:20:9a:e2:38:9f:46:9f:32:15:07:f4:d4:bb:0a:
31:1c:fc:13:62:a6:4d:0f:b7:b2:88:3e:33:e9:1e:15:d3:cc:
05:b4:98:97:4f:d6:c7:c5:3a:15:d1:81:22:e0:bb:4b:cf:2b:
1a:b3:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:40:58 2025 by rpki-client