This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa
File: 3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa (raw, json)
Hash identifier: +YGfYXVXEcm5L3mWBrrv7wGprkhO969viMkdy2B7JzI=
Subject key identifier: 3D:B6:10:79:FB:EF:0A:9E:4E:DD:54:C5:D1:F2:01:B7:22:39:AA:D2
Certificate issuer: /CN=5E9CEC440C325459B3067A402A845FD05A2D92AA
Certificate serial: 2B9CC2C3F02F0D539AAB392C294A06E031AA7EA7
Authority key identifier: 5E:9C:EC:44:0C:32:54:59:B3:06:7A:40:2A:84:5F:D0:5A:2D:92:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa
Signing time: Wed 12 Nov 2025 18:18:15 +0000
ROA not before: Wed 12 Nov 2025 18:13:15 +0000
ROA not after: Wed 11 Nov 2026 18:18:15 +0000
asID: 266460
IP address blocks: 170.82.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.crl
rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9c:c2:c3:f0:2f:0d:53:9a:ab:39:2c:29:4a:06:e0:31:aa:7e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E9CEC440C325459B3067A402A845FD05A2D92AA
Validity
Not Before: Nov 12 18:13:15 2025 GMT
Not After : Nov 11 18:18:15 2026 GMT
Subject: CN=3DB61079FBEF0A9E4EDD54C5D1F201B72239AAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:ca:d1:ff:a4:54:9c:e9:44:bc:0e:11:ea:
f5:ac:58:d5:f8:d2:75:e3:e4:34:88:f1:2b:b3:49:
bf:93:d0:94:18:28:b0:5c:f5:96:cf:1e:3e:e7:39:
dd:c1:59:24:b9:78:fc:ac:a3:07:b7:fa:e8:03:18:
f0:eb:f8:b2:50:10:2f:d3:91:99:07:8d:62:84:95:
4f:52:20:3e:86:d7:ef:ae:c5:33:1b:a6:04:f1:f3:
c0:20:fe:d8:8f:83:35:19:1d:44:e6:88:46:d6:3a:
f9:0f:06:b2:66:3b:17:92:46:28:0d:2c:e5:5a:c3:
6e:25:f3:c7:66:8f:f3:14:f7:7b:46:71:ac:ab:e8:
be:b9:c3:39:f6:67:f2:47:8c:98:4e:10:e3:f1:09:
18:48:5a:71:39:91:23:f1:13:a6:41:54:3b:69:ae:
6d:8c:e3:73:51:47:79:30:29:50:e2:ea:c1:f1:65:
aa:d7:5c:60:5b:59:af:54:10:9a:ff:7c:ed:d3:83:
30:49:6b:08:a5:70:42:7d:03:0b:42:98:c0:b6:ca:
07:c9:ab:a3:c2:d9:21:8a:58:23:2a:cf:30:b6:5e:
e3:ee:88:99:aa:3f:58:00:a0:d2:ae:d7:92:ed:bd:
bf:d5:c0:90:1b:a2:04:7e:2d:f0:e6:ee:33:cd:aa:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B6:10:79:FB:EF:0A:9E:4E:DD:54:C5:D1:F2:01:B7:22:39:AA:D2
X509v3 Authority Key Identifier:
keyid:5E:9C:EC:44:0C:32:54:59:B3:06:7A:40:2A:84:5F:D0:5A:2D:92:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.252.0/23
Signature Algorithm: sha256WithRSAEncryption
24:40:22:4a:ec:db:21:b2:2f:4e:b0:76:d2:57:a4:4c:7f:dc:
70:1d:11:46:cc:98:f5:5a:08:24:f6:4a:f2:89:f9:38:a1:ed:
b7:b9:58:27:aa:e3:22:09:17:20:f3:76:16:c0:4c:86:cb:e3:
28:e1:83:71:37:47:4f:6f:b2:de:e9:87:8d:fc:2c:12:da:b5:
ad:12:25:12:e8:c3:9c:53:f2:bf:7d:df:ef:ff:33:a4:b2:e6:
7b:6b:b6:2f:d9:fd:bd:4c:06:25:a7:ad:20:c0:41:af:62:e4:
f2:43:bd:13:da:ed:65:ff:44:1c:fb:cd:83:0c:80:ce:84:47:
58:cb:ca:92:60:f3:1a:43:41:2b:09:a0:05:69:e1:40:22:18:
2f:a6:29:db:05:f7:e0:ca:c6:b9:98:89:70:43:43:43:49:8f:
a1:d7:cc:81:04:ac:3d:e8:96:d8:18:96:30:83:77:07:93:8e:
44:42:40:f3:f4:b0:95:19:d6:d2:42:28:03:4e:85:87:05:b5:
74:24:1b:60:b9:d5:bb:f8:33:de:50:37:66:1f:87:aa:92:77:
dd:4a:4a:6f:94:96:2b:e3:71:41:dc:c5:9e:91:3f:b7:6b:e9:
53:b4:41:dd:ea:78:1a:56:67:24:0e:34:80:83:6f:6c:62:6f:
54:50:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:58:44 2025 by rpki-client