This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/3137372e31312e3136382e302f32312d3332203d3e203532393033.roa
File: 3137372e31312e3136382e302f32312d3332203d3e203532393033.roa (raw, json)
Hash identifier: wRPSEoYxS6wUcAEt8Sz8lDg1n4zmxGB7njj1uR05ZRs=
Subject key identifier: EB:6A:CD:66:BD:90:35:17:B3:AF:30:DE:62:DF:A4:6F:EB:3D:8B:4E
Certificate issuer: /CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4
Certificate serial: 415D988A36316570E3C50323794C8286DC3629F4
Authority key identifier: 8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/3137372e31312e3136382e302f32312d3332203d3e203532393033.roa
Signing time: Mon 10 Nov 2025 11:46:48 +0000
ROA not before: Mon 10 Nov 2025 11:41:48 +0000
ROA not after: Mon 09 Nov 2026 11:46:48 +0000
asID: 52903
IP address blocks: 177.11.168.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl
rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5d:98:8a:36:31:65:70:e3:c5:03:23:79:4c:82:86:dc:36:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4
Validity
Not Before: Nov 10 11:41:48 2025 GMT
Not After : Nov 9 11:46:48 2026 GMT
Subject: CN=EB6ACD66BD903517B3AF30DE62DFA46FEB3D8B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:d9:b7:a0:46:24:16:8c:11:cf:84:cd:a1:
34:14:91:30:dd:96:51:94:8b:57:29:85:19:30:d1:
7a:cc:ff:b7:71:5e:38:f9:67:1f:be:dd:ad:6d:57:
9a:28:5f:81:43:37:3c:7e:bb:32:1b:c2:eb:d1:66:
45:41:29:65:21:66:d4:9a:f3:67:8f:b5:0b:9d:5f:
58:93:9d:b6:88:5f:f5:24:2c:ed:3c:bd:52:1a:ab:
4c:87:9a:0a:b0:4a:4f:26:a5:4a:0a:0e:18:8f:02:
15:76:d5:88:0d:47:c9:73:2e:97:b0:e2:a9:f0:23:
e5:ff:0f:d2:08:0d:d2:02:9b:b4:79:3a:63:99:da:
4b:c7:c0:76:c2:ee:a5:5d:da:8b:0f:8e:ab:10:1e:
59:e4:8a:70:b0:75:ec:7c:a9:c6:f2:93:a4:6d:f5:
62:93:53:51:04:30:e4:74:f9:0a:33:94:f0:b9:7f:
a3:ea:ee:b3:2e:25:42:a2:6d:31:d7:51:5b:3c:4a:
8f:1a:71:05:2d:59:e1:c4:de:b0:a3:04:3f:39:96:
e7:e8:02:ab:7f:73:20:9e:08:e5:20:4c:ed:a9:f1:
51:e9:c3:e2:35:b0:20:3c:83:4d:50:18:22:b7:59:
8c:de:0e:eb:96:77:d0:02:31:c4:b6:13:4c:e4:4e:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:CD:66:BD:90:35:17:B3:AF:30:DE:62:DF:A4:6F:EB:3D:8B:4E
X509v3 Authority Key Identifier:
keyid:8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/3137372e31312e3136382e302f32312d3332203d3e203532393033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.168.0/21
Signature Algorithm: sha256WithRSAEncryption
d9:16:64:27:39:33:41:f1:4a:88:ff:37:2d:20:58:82:73:c4:
73:db:69:21:67:24:b3:af:1e:fe:35:5e:4b:4e:49:9f:b4:af:
41:7d:fd:d1:63:b6:28:65:09:03:06:f6:9f:c1:49:50:e9:de:
e5:05:aa:25:51:26:d9:de:61:d3:c7:5d:36:20:99:18:99:1a:
db:6d:66:2b:f9:c1:bc:c8:df:23:45:99:d2:a4:56:aa:0d:11:
f4:74:5c:f3:9f:76:1f:ed:9e:7c:45:59:45:65:0c:c3:8c:2a:
b8:9d:60:5a:8f:67:8d:56:ed:ef:fd:41:0d:ec:39:2e:44:19:
f8:93:42:62:59:4a:78:63:b0:14:25:cc:5c:33:9d:7f:11:5f:
5a:42:de:06:09:5d:09:fb:61:1f:9d:cf:e8:4b:d4:fe:a7:47:
27:5f:a9:c9:05:89:dd:06:51:66:56:45:a3:9b:ca:0e:49:57:
f4:26:61:8a:bd:2c:99:2a:f2:2f:5c:48:21:b4:4a:b5:45:ef:
d3:0f:8c:76:8e:49:6e:22:ee:7f:ac:a6:de:62:aa:33:27:b9:
6d:e1:9a:26:22:3d:8a:c4:d0:bc:e3:ab:f4:ca:03:dd:04:d7:
a9:a7:c6:64:26:1b:35:74:85:41:8d:1a:27:b2:50:d1:7c:74:
ed:4e:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:09 2025 by rpki-client