This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS265079.roa
File: AS265079.roa (raw, json)
Hash identifier: X8Cj+B/AFRYaBo4Ojdh7Qr7G6PqPMt4Ooai4q6eEAdg=
Subject key identifier: 54:AD:A7:24:91:CC:84:49:95:1B:D1:43:13:40:17:C5:09:8D:47:6D
Certificate issuer: /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial: 4251519DB66A4FCA29F967D3BC7BBEF8F4F55771
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS265079.roa
Signing time: Wed 02 Jul 2025 11:40:02 +0000
ROA not before: Wed 02 Jul 2025 11:35:02 +0000
ROA not after: Wed 01 Jul 2026 11:40:02 +0000
asID: 265079
IP address blocks: 170.233.136.0/22 maxlen: 24
2804:3274::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:51:51:9d:b6:6a:4f:ca:29:f9:67:d3:bc:7b:be:f8:f4:f5:57:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Validity
Not Before: Jul 2 11:35:02 2025 GMT
Not After : Jul 1 11:40:02 2026 GMT
Subject: CN=54ADA72491CC8449951BD143134017C5098D476D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:dc:61:13:ef:fe:1e:fe:c7:f9:01:1f:75:
ff:1e:a1:29:18:9c:d9:58:d8:0c:c5:58:59:e1:da:
91:35:ce:8b:a8:83:55:1c:fa:2a:a7:d6:92:fe:f2:
24:df:44:b5:56:3a:da:bf:16:54:f9:0a:d4:fa:51:
24:17:fe:39:b8:73:bc:e3:3d:71:38:09:4f:57:a9:
88:e3:02:d8:6a:1d:98:5b:b1:0f:9c:3a:05:e2:85:
8b:f3:a8:e3:97:5a:44:38:ec:0d:4f:3a:4e:7d:cd:
e5:e9:c4:50:60:ff:f1:7d:13:35:c3:14:20:11:40:
33:9c:b5:32:71:90:42:b2:00:9f:b5:7f:93:48:4f:
b4:8a:40:8e:a9:aa:90:97:b5:ac:33:a3:44:53:72:
01:48:1a:76:22:c2:f4:1b:5e:7a:a6:b2:38:bd:dd:
14:c1:8d:3d:7b:f5:1d:2e:4a:32:55:85:5f:ce:02:
79:39:0d:3d:b6:2f:df:c1:6b:a6:4e:c3:fa:31:89:
21:6c:7f:d2:7c:c3:e7:55:b0:f6:d8:1f:6e:47:23:
76:11:0d:37:26:7b:c1:c9:26:61:1e:d7:c6:3f:c8:
93:1b:58:40:a6:2f:65:4b:2b:82:fa:ea:cd:cc:80:
c1:b3:86:94:49:f2:78:29:40:e7:6b:b1:34:2b:fa:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AD:A7:24:91:CC:84:49:95:1B:D1:43:13:40:17:C5:09:8D:47:6D
X509v3 Authority Key Identifier:
keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS265079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.136.0/22
IPv6:
2804:3274::/32
Signature Algorithm: sha256WithRSAEncryption
a3:5a:ac:e9:b1:eb:c2:4c:14:4c:8d:8c:2d:17:10:fc:7e:13:
20:5e:20:f8:fe:f0:5e:30:3d:71:7e:7b:f5:ed:62:3c:0f:8c:
43:74:9d:b3:5c:c8:0c:5e:7e:0c:50:4e:97:be:70:f6:59:59:
f2:bc:41:23:a1:f2:21:70:c0:d1:36:13:09:09:40:a5:7d:b7:
01:58:e4:db:98:a8:b8:c4:c0:65:c6:d3:41:82:db:78:53:1e:
f1:df:d4:eb:d7:23:b5:e5:f6:50:20:62:5e:fa:62:b6:76:4d:
25:0b:80:89:a2:92:5f:33:a3:85:12:1d:d4:1e:c5:c8:5a:15:
d2:a7:61:c9:ba:01:80:67:5c:6e:f3:0d:00:8c:e4:75:ee:5f:
ee:50:17:c7:cb:9d:a5:fa:be:af:7e:d4:84:cb:a7:ec:0d:3b:
e1:3d:4a:6c:12:04:96:67:3d:05:68:31:9e:6b:1d:6f:b2:ee:
82:43:92:23:63:84:70:d6:8f:65:03:99:35:4b:c2:e6:82:01:
0f:d9:2f:65:f2:03:5b:34:9f:f2:0e:a1:02:31:6e:2d:9d:f4:
54:db:eb:6c:a1:d4:9b:38:c9:fd:22:d0:b7:3f:86:1e:f0:07:
63:33:21:cf:aa:45:65:b0:68:de:d5:67:a2:bb:ea:ab:7a:36:
23:ca:77:ad
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUQlFRnbZqT8op+WfTvHu++PT1V3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQyMDZDMTBGNTg3MDg0RTMyNjZDOTdFREEwRjY1NjQz
Mjk5RTFCODAeFw0yNTA3MDIxMTM1MDJaFw0yNjA3MDExMTQwMDJaMDMxMTAvBgNV
BAMTKDU0QURBNzI0OTFDQzg0NDk5NTFCRDE0MzEzNDAxN0M1MDk4RDQ3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuE9xhE+/+Hv7H+QEfdf8eoSkY
nNlY2AzFWFnh2pE1zouog1Uc+iqn1pL+8iTfRLVWOtq/FlT5CtT6USQX/jm4c7zj
PXE4CU9XqYjjAthqHZhbsQ+cOgXihYvzqOOXWkQ47A1POk59zeXpxFBg//F9EzXD
FCARQDOctTJxkEKyAJ+1f5NIT7SKQI6pqpCXtawzo0RTcgFIGnYiwvQbXnqmsji9
3RTBjT179R0uSjJVhV/OAnk5DT22L9/Ba6ZOw/oxiSFsf9J8w+dVsPbYH25HI3YR
DTcme8HJJmEe18Y/yJMbWECmL2VLK4L66s3MgMGzhpRJ8ngpQOdrsTQr+kgfAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUVK2nJJHMhEmVG9FDE0AXxQmNR20wHwYDVR0j
BBgwFoAU1CBsEPWHCE4yZsl+2g9lZDKZ4bgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMy9ENDIwNkMxMEY1ODcwODRFMzI2NkM5N0VEQTBGNjU2NDMyOTlFMUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MjA2QzEwRjU4NzA4NEUz
MjY2Qzk3RURBMEY2NTY0MzI5OUUxQjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8zL0FTMjY1
MDc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCqumIMA0EAgACMAcDBQAoBDJ0MA0GCSqGSIb3DQEBCwUA
A4IBAQCjWqzpsevCTBRMjYwtFxD8fhMgXiD4/vBeMD1xfnv17WI8D4xDdJ2zXMgM
Xn4MUE6XvnD2WVnyvEEjofIhcMDRNhMJCUClfbcBWOTbmKi4xMBlxtNBgtt4Ux7x
39Tr1yO15fZQIGJe+mK2dk0lC4CJopJfM6OFEh3UHsXIWhXSp2HJugGAZ1xu8w0A
jOR17l/uUBfHy52l+r6vftSEy6fsDTvhPUpsEgSWZz0FaDGeax1vsu6CQ5IjY4Rw
1o9lA5k1S8LmggEP2S9l8gNbNJ/yDqECMW4tnfRU2+tsodSbOMn9ItC3P4Ye8Adj
MyHPqkVlsGje1Weiu+qrejYjynet
-----END CERTIFICATE-----
Generated at Mon Dec 22 03:09:22 2025 by rpki-client