This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
File: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier: gKMoHy+rODKPUAf8QM5/Ap55BaDN4Q3v0d6D/qgH98o=
Subject key identifier: 56:87:20:59:34:23:79:8B:97:FF:34:01:BB:EC:1E:E5:CE:4D:0D:1E
Certificate issuer: /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial: 257C0E54BE4AFB4D2644E5D2456755802B08B5EC
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
Signing time: Mon 10 Nov 2025 19:11:03 +0000
ROA not before: Mon 10 Nov 2025 19:06:03 +0000
ROA not after: Mon 09 Nov 2026 19:11:03 +0000
asID: 271484
IP address blocks: 181.233.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 14:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7c:0e:54:be:4a:fb:4d:26:44:e5:d2:45:67:55:80:2b:08:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Validity
Not Before: Nov 10 19:06:03 2025 GMT
Not After : Nov 9 19:11:03 2026 GMT
Subject: CN=568720593423798B97FF3401BBEC1EE5CE4D0D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:ac:39:5e:49:dd:a5:18:2c:8a:cd:ce:60:
4a:67:a1:cf:d1:a9:23:54:c4:6f:c2:4a:6b:d2:b1:
cd:71:a9:f5:fd:1d:23:1e:ee:01:b6:ce:79:ed:ef:
8b:f2:35:af:2e:fc:3f:c6:27:65:b1:69:7d:10:fe:
f3:8f:53:09:c0:0c:ef:cb:9c:dd:89:33:87:81:14:
60:47:be:66:97:49:f6:0b:94:35:b2:1f:52:07:87:
b3:2c:78:33:1f:62:34:a6:4f:b7:b9:10:16:56:45:
c0:6d:f0:ff:42:85:d3:57:f9:ec:d8:76:07:b3:e0:
9f:e4:10:e5:31:81:0d:2c:08:bf:10:45:70:9e:0e:
e2:e3:b1:57:0e:c2:c0:0c:12:d6:d6:0a:89:38:d5:
8a:0a:68:24:88:53:d8:13:f9:f2:ce:1e:de:8e:e5:
e5:60:40:b5:94:d5:f0:b2:17:85:d5:69:db:ff:5e:
e4:d6:f2:52:8f:6b:23:f3:a4:57:34:93:23:5d:bd:
f3:59:d4:50:a8:12:a2:2e:fd:7a:8c:a3:f0:98:c8:
98:17:4a:41:2a:e5:de:7c:cb:20:52:45:a8:3e:d6:
79:33:9b:1b:7f:23:9b:bd:a8:48:a5:e3:4a:1d:41:
1b:fb:eb:e4:28:4d:3b:92:70:e6:8c:ab:a9:c5:e8:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:87:20:59:34:23:79:8B:97:FF:34:01:BB:EC:1E:E5:CE:4D:0D:1E
X509v3 Authority Key Identifier:
keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:11:9d:35:65:26:ba:bc:79:a8:74:14:a7:5d:b6:45:c2:fd:
31:30:d5:29:de:25:62:d2:ff:f6:21:f5:0d:4c:29:75:67:ca:
8c:9a:60:e5:f1:de:20:43:d7:25:f4:df:0d:e8:2a:0c:a4:59:
87:a8:7e:41:a0:ef:b1:9d:07:97:df:b6:08:01:77:d4:90:04:
d3:0f:85:e5:d2:02:7a:9a:af:fb:33:87:1a:58:74:7c:ec:36:
ec:e4:e9:39:04:94:b4:d8:53:b6:3b:bf:37:d6:65:31:5a:13:
46:e4:64:83:48:42:11:7f:c7:d0:60:e6:0b:e0:36:a1:fe:bd:
c2:ed:66:3b:5e:7f:b5:8b:87:e7:8a:ca:8b:77:ae:8a:d1:79:
4f:e9:96:e9:75:9b:b2:e7:ed:d8:02:05:40:e1:1e:48:f4:f8:
7c:b8:dc:b5:8f:e5:3f:32:15:39:8e:f5:ad:e3:d5:aa:10:09:
f2:ee:3e:51:a3:75:e6:53:0d:79:f5:ae:f6:2e:62:9b:6d:4a:
4f:5b:7a:0e:7b:17:59:96:42:54:41:28:a6:86:0b:b1:a5:4e:
df:90:aa:f4:03:47:5d:69:32:c4:ec:d7:97:79:dc:48:7a:09:
20:ac:88:72:32:6d:dc:35:d4:0a:07:cc:02:23:ab:c2:18:b0:
49:9e:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:26 2025 by rpki-client