This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3230342e302f32342d3234203d3e20323632383535.roa
File: 3137372e31322e3230342e302f32342d3234203d3e20323632383535.roa (raw, json)
Hash identifier: QMcYNuTqwz0Td79ZFL2+XofabRX7Q2MaYyYxjgK0nx0=
Subject key identifier: 37:2D:68:64:91:20:FD:5C:96:70:73:78:C1:2B:83:DC:D4:71:51:F9
Certificate issuer: /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Certificate serial: 108FA85BDE7DFA0C16A4AFD9A4C2C0A8439F4451
Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3230342e302f32342d3234203d3e20323632383535.roa
Signing time: Fri 07 Nov 2025 12:15:14 +0000
ROA not before: Fri 07 Nov 2025 12:10:14 +0000
ROA not after: Fri 06 Nov 2026 12:15:14 +0000
asID: 262855
IP address blocks: 177.12.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8f:a8:5b:de:7d:fa:0c:16:a4:af:d9:a4:c2:c0:a8:43:9f:44:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Validity
Not Before: Nov 7 12:10:14 2025 GMT
Not After : Nov 6 12:15:14 2026 GMT
Subject: CN=372D68649120FD5C96707378C12B83DCD47151F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:4e:1b:69:bf:63:46:34:c5:15:f4:43:0b:
33:01:ea:40:37:63:4a:7c:09:b2:ab:be:d6:78:ba:
6f:41:44:7d:83:8a:d5:ec:38:65:30:5f:23:e6:01:
30:05:87:6e:a7:a0:1e:f0:96:14:fc:45:94:bc:32:
18:e2:4f:53:a7:10:9e:fb:a8:d6:31:3c:74:90:01:
f2:af:d1:bb:58:07:07:55:71:bd:34:14:54:67:d1:
47:61:1a:3c:08:cc:31:29:2b:4c:fc:49:82:e4:4a:
d2:81:c3:ad:24:be:7b:3f:fa:72:83:21:21:67:ce:
57:f4:69:8f:dd:e1:67:bd:d6:a1:39:52:b8:39:cf:
3c:66:bd:ab:93:04:84:35:21:36:90:e1:ae:fc:3f:
d5:7f:8d:00:2b:84:19:1a:07:a1:b6:9f:cf:fd:c8:
44:7d:91:28:31:a7:56:70:57:94:4d:13:06:d9:51:
00:8b:5c:a7:57:49:69:87:bb:4b:82:0b:02:92:54:
d1:da:fe:e1:c8:9b:97:44:b6:d6:49:62:d7:74:74:
bc:52:b7:95:bc:dd:b1:bf:92:34:d5:02:89:f9:7a:
e5:9a:65:7b:47:31:d4:9b:54:3c:ee:7d:19:56:f8:
8c:08:85:47:cd:b2:95:94:e8:1d:d0:ce:e6:d4:0e:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:68:64:91:20:FD:5C:96:70:73:78:C1:2B:83:DC:D4:71:51:F9
X509v3 Authority Key Identifier:
keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3230342e302f32342d3234203d3e20323632383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.204.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c4:d2:c0:26:c6:a7:59:f1:56:41:d7:d2:76:21:f6:45:86:
f7:7a:b8:cf:ff:01:37:f4:4f:16:c3:ea:07:51:a0:f0:25:30:
42:8d:4f:aa:85:d3:92:b3:96:b0:42:a0:04:21:d8:3b:16:35:
12:51:84:e0:56:58:dc:de:c4:cc:66:5d:35:58:86:1b:e2:87:
b8:5d:19:52:f9:9d:cb:84:b4:1b:a7:c0:4f:0b:1b:71:9c:e6:
a4:ae:9f:c3:46:74:01:7a:0d:a0:dc:b6:f5:52:f2:8c:17:f9:
dd:ea:cc:73:71:05:85:2a:32:54:6f:54:cb:50:72:c7:d3:61:
a9:6a:e8:d2:ee:24:28:29:35:9b:5a:e2:49:96:e6:c0:d5:62:
1f:c0:6b:ee:cd:d4:b7:72:b7:6e:e4:8a:3e:55:ac:90:fd:4e:
04:fb:c8:5e:61:f5:f0:fb:ee:d1:fc:4b:17:24:e5:97:30:98:
67:eb:00:ce:fa:1e:41:7c:98:be:96:cc:9d:60:57:71:09:40:
94:8a:ff:89:ad:ba:8f:38:3c:fc:29:fa:8c:93:22:5c:f0:8f:
7f:e6:13:89:23:7b:3d:2b:8a:8c:3e:15:64:2e:81:7d:c6:e8:
aa:91:e1:85:0b:e1:2e:f6:81:fb:63:d8:1c:a7:12:25:03:4e:
3a:d2:05:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:40:58 2025 by rpki-client