This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa
File: 3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa (raw, json)
Hash identifier: 82185v5Vdk8fX6C+dbcgxh2Qvq+kL2BL7mMGnXX6c2Y=
Subject key identifier: AB:71:51:CE:74:0A:DA:7A:1C:F4:8F:F7:C6:B0:AF:27:F9:E1:07:3E
Certificate issuer: /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial: 0B8DC34C55139F7BC204716313BAF3C28FA40311
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa
Signing time: Fri 28 Nov 2025 13:35:10 +0000
ROA not before: Fri 28 Nov 2025 13:30:10 +0000
ROA not after: Fri 27 Nov 2026 13:35:10 +0000
asID: 266446
IP address blocks: 170.82.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 01:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:8d:c3:4c:55:13:9f:7b:c2:04:71:63:13:ba:f3:c2:8f:a4:03:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Validity
Not Before: Nov 28 13:30:10 2025 GMT
Not After : Nov 27 13:35:10 2026 GMT
Subject: CN=AB7151CE740ADA7A1CF48FF7C6B0AF27F9E1073E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:5b:08:7e:b9:f5:59:60:03:05:e2:37:3e:
fc:97:4a:f2:aa:e0:54:f1:a0:92:f5:3c:12:0c:be:
8b:8b:4b:f3:29:09:13:e3:70:34:74:e2:8f:55:ef:
a9:db:b6:01:6b:75:87:6c:f3:5f:bb:ad:4c:21:65:
96:a4:7e:69:a5:41:68:84:fd:97:78:09:27:2d:3d:
ec:32:13:e4:63:f7:29:74:a3:97:e3:82:9a:5b:b3:
97:ed:ec:fc:a0:ae:86:3a:07:1d:04:5f:96:2d:bf:
7b:92:5e:81:a7:76:56:21:4d:33:61:cd:da:67:30:
71:d5:48:75:46:eb:63:13:d0:85:d4:7e:0a:72:12:
d8:57:a8:c5:92:58:89:14:a3:10:f8:b3:6c:4b:16:
d2:d2:b4:1a:b2:15:f3:2d:31:c5:42:a3:94:35:89:
c6:f8:fd:54:26:8e:68:3d:5c:7b:23:11:c2:e9:7e:
98:a3:71:78:11:a8:d1:34:e5:3e:34:58:18:27:8a:
d3:97:7f:9d:5e:2e:81:ae:bd:f4:eb:ea:a9:ff:ad:
7e:ab:58:34:75:01:1d:e7:18:8a:23:37:ba:f7:bc:
a9:69:39:89:99:4b:6f:80:22:35:53:cd:83:6c:37:
23:fa:ef:80:9e:b8:93:b1:11:e5:e9:a3:c8:3a:23:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:51:CE:74:0A:DA:7A:1C:F4:8F:F7:C6:B0:AF:27:F9:E1:07:3E
X509v3 Authority Key Identifier:
keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.195.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6e:8f:eb:23:ac:cd:a7:eb:18:44:69:c8:f0:84:cc:08:9f:
7d:41:f3:53:e7:1b:69:d0:00:91:55:4d:fe:0d:b4:5b:4c:ce:
e7:f7:a2:ce:1d:c6:e7:ce:76:5f:5e:23:ae:1b:79:13:01:5e:
fa:36:32:dc:8d:80:55:01:27:e5:8b:45:f0:17:70:a8:f1:7e:
e5:08:d1:21:c0:35:d8:10:18:53:e1:4c:0f:a9:22:7e:4c:17:
17:7a:fc:35:88:31:52:8b:7c:cc:9d:89:cd:d1:76:05:7e:7c:
38:2d:5d:a4:6e:4d:3d:e7:a7:5a:a2:95:3b:d1:f4:b8:94:27:
18:c8:4f:a9:82:42:3d:05:4e:fd:f6:a1:d5:b7:2c:2e:81:83:
e1:ca:d7:7f:b5:2f:20:c7:88:45:f2:75:89:a3:11:85:44:ce:
b1:99:c1:3b:32:51:6a:ce:df:01:d4:ab:6c:6b:bf:9e:83:74:
41:e5:e2:ea:df:7c:31:cd:de:c2:11:02:18:2d:d0:b9:9b:c4:
62:ac:66:7e:ad:1d:8d:44:82:1c:a2:0f:84:cc:2e:c5:ea:37:
e4:57:64:a9:17:3b:2f:d0:2a:70:98:d6:3b:6b:da:a2:aa:96:
10:0f:25:06:cb:fe:bd:c3:c2:e3:fc:f3:9b:cb:d8:13:97:1c:
b4:e5:85:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC43DTFUTn3vCBHFjE7rzwo+kAxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBRjRBMDExNDcwNUU3OTMwNDBERjIwQjNFODc5RTU5
NzRDN0M4RDAeFw0yNTExMjgxMzMwMTBaFw0yNjExMjcxMzM1MTBaMDMxMTAvBgNV
BAMTKEFCNzE1MUNFNzQwQURBN0ExQ0Y0OEZGN0M2QjBBRjI3RjlFMTA3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcFsIfrn1WWADBeI3PvyXSvKq
4FTxoJL1PBIMvouLS/MpCRPjcDR04o9V76nbtgFrdYds81+7rUwhZZakfmmlQWiE
/Zd4CSctPewyE+Rj9yl0o5fjgppbs5ft7PygroY6Bx0EX5Ytv3uSXoGndlYhTTNh
zdpnMHHVSHVG62MT0IXUfgpyEthXqMWSWIkUoxD4s2xLFtLStBqyFfMtMcVCo5Q1
icb4/VQmjmg9XHsjEcLpfpijcXgRqNE05T40WBgnitOXf51eLoGuvfTr6qn/rX6r
WDR1AR3nGIojN7r3vKlpOYmZS2+AIjVTzYNsNyP674CeuJOxEeXpo8g6I7IbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq3FRznQK2noc9I/3xrCvJ/nhBz4wHwYDVR0j
BBgwFoAU+q9KARRwXnkwQN8gs+h55ZdMfI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4
d2EvMC9GQUFGNEEwMTE0NzA1RTc5MzA0MERGMjBCM0U4NzlFNTk3NEM3QzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQUY0QTAxMTQ3MDVFNzkz
MDQwREYyMEIzRTg3OUU1OTc0QzdDOEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzUXRwNXFiOGZyTlhFNG9HNVhmY1FzSlJTTnJZYlVCYVVUN1Jka3NUOHdhLzAv
MzEzNzMwMmUzODMyMmUzMTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUsMwDQYJKoZIhvcNAQELBQADggEBABluj+sj
rM2n6xhEacjwhMwIn31B81PnG2nQAJFVTf4NtFtMzuf3os4dxufOdl9eI64beRMB
Xvo2MtyNgFUBJ+WLRfAXcKjxfuUI0SHANdgQGFPhTA+pIn5MFxd6/DWIMVKLfMyd
ic3RdgV+fDgtXaRuTT3np1qilTvR9LiUJxjIT6mCQj0FTv32odW3LC6Bg+HK13+1
LyDHiEXydYmjEYVEzrGZwTsyUWrO3wHUq2xrv56DdEHl4urffDHN3sIRAhgt0Lmb
xGKsZn6tHY1EghyiD4TMLsXqN+RXZKkXOy/QKnCY1jtr2qKqlhAPJQbL/r3DwuP8
85vL2BOXHLTlhe0=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:07 2025 by rpki-client