This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138362e3139342e33322e302f32302d3332203d3e203238323333.roa
File: 3138362e3139342e33322e302f32302d3332203d3e203238323333.roa (raw, json)
Hash identifier: TClqQvYHFgoPfRo2hBqh8KiVih9Os07/8hVM7a5o0qc=
Subject key identifier: A9:93:0E:B2:5A:E8:79:3C:68:FE:A4:90:76:9E:FB:D2:A4:45:B3:0B
Certificate issuer: /CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5
Certificate serial: 5F7D6CFE80BE1A25F8DF756996A8D2208E97D8B1
Authority key identifier: F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138362e3139342e33322e302f32302d3332203d3e203238323333.roa
Signing time: Tue 18 Nov 2025 18:58:16 +0000
ROA not before: Tue 18 Nov 2025 18:53:16 +0000
ROA not after: Tue 17 Nov 2026 18:58:16 +0000
asID: 28233
IP address blocks: 186.194.32.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.crl
rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 20:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7d:6c:fe:80:be:1a:25:f8:df:75:69:96:a8:d2:20:8e:97:d8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5
Validity
Not Before: Nov 18 18:53:16 2025 GMT
Not After : Nov 17 18:58:16 2026 GMT
Subject: CN=A9930EB25AE8793C68FEA490769EFBD2A445B30B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:d8:a2:72:e6:52:37:80:52:9d:d7:d1:65:
bc:4b:c1:4b:ec:13:0e:90:7c:2b:d3:42:e0:f2:42:
1d:f2:e4:93:38:fe:73:b6:9c:31:b4:18:9b:6d:72:
ca:39:09:a5:56:1b:5f:5b:81:46:e1:ed:21:ec:2f:
bf:0d:bc:dd:ae:47:45:f5:ca:4f:00:7b:5a:57:b5:
1e:dc:e5:fc:4d:20:e7:50:1a:21:42:3f:66:36:2f:
66:a8:31:94:f2:0a:a6:c8:ed:37:41:0a:76:5e:3c:
dd:ea:1e:de:13:a2:dc:61:cd:28:00:59:90:6c:2b:
ed:b2:0f:fd:12:2e:c9:b6:7a:8b:4b:fe:6d:cf:cb:
81:e7:85:d3:90:f1:4c:ae:d8:5d:c7:78:0e:44:55:
73:73:bd:64:78:f2:bd:aa:ab:ea:1b:b2:8c:14:55:
1d:74:8b:7c:d1:db:14:52:2c:d9:98:67:29:9f:41:
8e:ea:1c:0e:93:47:bd:c3:e6:c5:99:b5:82:42:cf:
e3:4a:ac:5a:74:db:33:a2:d7:a4:4d:f8:c2:dc:c3:
ec:cd:e8:f9:b0:e8:e3:3b:88:8f:29:50:6a:7b:df:
eb:73:75:e7:57:ed:a0:90:a4:ab:5d:d5:e6:39:47:
28:d7:c0:8e:20:17:4f:9a:23:a8:23:5b:21:f1:73:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:0E:B2:5A:E8:79:3C:68:FE:A4:90:76:9E:FB:D2:A4:45:B3:0B
X509v3 Authority Key Identifier:
keyid:F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138362e3139342e33322e302f32302d3332203d3e203238323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.194.32.0/20
Signature Algorithm: sha256WithRSAEncryption
02:12:ee:e9:46:16:42:e9:20:99:3b:82:ec:1e:db:21:1e:e1:
67:67:cf:06:fb:54:fe:41:5a:50:42:e9:8c:52:50:b4:62:73:
67:cc:32:5a:78:c5:95:cd:17:3f:32:0d:07:53:27:0f:e3:89:
6e:ff:1c:ef:e5:d6:d9:83:3d:5d:fd:e5:f9:6d:1f:bb:54:72:
73:df:a7:ed:55:65:96:ea:4b:03:1d:9b:51:7c:be:d0:73:ad:
3b:f3:31:17:71:7a:91:67:9c:f8:fc:ce:43:7f:6b:29:9e:b0:
11:fe:fe:2c:1b:3b:d8:72:cb:53:fc:46:e4:dc:c4:ea:d0:c3:
e5:d9:57:e8:33:a6:97:21:01:01:6a:6b:70:43:96:64:e4:69:
3f:aa:fa:ca:49:16:a5:c6:39:9f:23:36:41:c2:70:8d:30:64:
a8:07:63:2a:50:47:b8:b3:ee:91:27:f8:b7:1c:f6:22:94:61:
b6:46:7d:ee:18:52:6e:4f:32:86:47:18:8d:37:5b:a9:6c:f0:
45:71:87:d9:c6:fc:90:2d:78:88:78:86:67:9d:c8:f7:ca:44:
f6:5c:84:f2:74:1e:19:dc:e9:ac:30:80:0d:5f:fe:93:66:ec:
3d:18:a6:ec:40:9e:86:9a:18:a7:89:07:21:bd:6a:15:98:2c:
d4:75:f9:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX31s/oC+GiX433VplqjSII6X2LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU5RjA5MTdEQzI3ODQ4ODk2MTZDQTZFNUY4ODVEMjVE
MEUwRDFFNTAeFw0yNTExMTgxODUzMTZaFw0yNjExMTcxODU4MTZaMDMxMTAvBgNV
BAMTKEE5OTMwRUIyNUFFODc5M0M2OEZFQTQ5MDc2OUVGQkQyQTQ0NUIzMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfy9iicuZSN4BSndfRZbxLwUvs
Ew6QfCvTQuDyQh3y5JM4/nO2nDG0GJttcso5CaVWG19bgUbh7SHsL78NvN2uR0X1
yk8Ae1pXtR7c5fxNIOdQGiFCP2Y2L2aoMZTyCqbI7TdBCnZePN3qHt4TotxhzSgA
WZBsK+2yD/0SLsm2eotL/m3Py4HnhdOQ8Uyu2F3HeA5EVXNzvWR48r2qq+obsowU
VR10i3zR2xRSLNmYZymfQY7qHA6TR73D5sWZtYJCz+NKrFp02zOi16RN+MLcw+zN
6Pmw6OM7iI8pUGp73+tzdedX7aCQpKtd1eY5RyjXwI4gF0+aI6gjWyHxc4hhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqZMOslroeTxo/qSQdp770qRFswswHwYDVR0j
BBgwFoAU9Z8JF9wnhIiWFspuX4hdJdDg0eUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0gyeXAzUkpDVDl0R1RHNHhVblRON0JXMlI2ek1tczlkTnlHang1WFhz
RnQvMC9GNTlGMDkxN0RDMjc4NDg4OTYxNkNBNkU1Rjg4NUQyNUQwRTBEMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1OUYwOTE3REMyNzg0ODg5
NjE2Q0E2RTVGODg1RDI1RDBFMEQxRTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIMnlwM1JKQ1Q5dEdURzR4VW5UTjdCVzJSNnpNbXM5ZE55R2p4NVhYc0Z0LzAv
MzEzODM2MmUzMTM5MzQyZTMzMzIyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzIzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEusIgMA0GCSqGSIb3DQEBCwUAA4IBAQACEu7pRhZC
6SCZO4LsHtshHuFnZ88G+1T+QVpQQumMUlC0YnNnzDJaeMWVzRc/Mg0HUycP44lu
/xzv5dbZgz1d/eX5bR+7VHJz36ftVWWW6ksDHZtRfL7Qc6078zEXcXqRZ5z4/M5D
f2spnrAR/v4sGzvYcstT/Ebk3MTq0MPl2VfoM6aXIQEBamtwQ5Zk5Gk/qvrKSRal
xjmfIzZBwnCNMGSoB2MqUEe4s+6RJ/i3HPYilGG2Rn3uGFJuTzKGRxiNN1upbPBF
cYfZxvyQLXiIeIZnncj3ykT2XITydB4Z3OmsMIANX/6TZuw9GKbsQJ6GmhiniQch
vWoVmCzUdfmn
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:57 2025 by rpki-client