This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
File: 3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier: +lsjrk2UIScYi8SDIHluwvVTWNsZRS6AIaGL7QvTJZc=
Subject key identifier: CD:AA:5D:0B:A7:C3:E0:F5:63:AD:4D:A0:F2:A9:D4:45:56:21:F2:F7
Certificate issuer: /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial: 3B94C5E4400B95CB5B7F5ECA80C3DC7B8CE6EB6F
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
Signing time: Mon 10 Nov 2025 19:11:07 +0000
ROA not before: Mon 10 Nov 2025 19:06:07 +0000
ROA not after: Mon 09 Nov 2026 19:11:07 +0000
asID: 271484
IP address blocks: 181.233.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 14:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:94:c5:e4:40:0b:95:cb:5b:7f:5e:ca:80:c3:dc:7b:8c:e6:eb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Validity
Not Before: Nov 10 19:06:07 2025 GMT
Not After : Nov 9 19:11:07 2026 GMT
Subject: CN=CDAA5D0BA7C3E0F563AD4DA0F2A9D4455621F2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:2f:d0:c9:a1:31:b1:16:78:45:e6:f0:42:
8e:71:25:d3:6a:dd:fb:ba:99:f9:a6:67:86:e6:65:
3d:21:95:b3:91:71:bc:eb:f9:5c:e7:55:5c:5f:6c:
c1:78:ce:5b:d0:f7:7f:7b:fd:83:cf:47:83:a2:57:
31:c6:5a:30:f0:da:b0:aa:c8:3e:03:44:84:1e:3c:
0f:68:18:9a:02:1b:b2:21:e2:e2:26:bf:57:2d:b9:
20:1d:3b:b7:be:b1:cc:45:6b:b9:c3:14:76:89:cd:
ad:13:7e:32:3e:23:8f:80:37:bf:90:5c:39:53:5f:
3a:c8:95:47:58:32:eb:1b:3d:c0:44:43:a7:c7:5b:
f4:f2:18:44:b4:e6:ec:f2:75:b7:5c:88:fb:6d:3f:
e8:78:30:3f:bb:18:99:2f:3d:c6:d6:54:a3:09:1e:
e4:d8:c6:b7:2c:de:0d:77:e2:e1:1c:0e:ca:0e:dd:
e1:cb:84:5b:76:70:70:7b:ca:0a:7f:8d:52:7c:d8:
2e:28:f7:29:8d:b2:b5:c9:1b:19:a3:d5:c9:15:8b:
64:8a:3a:bd:e5:ce:84:15:18:42:63:64:c0:a3:a2:
be:d6:9d:32:04:a4:14:67:f3:1e:86:58:c5:08:cc:
bf:0b:02:c4:0e:b9:99:9c:a6:cb:c1:95:c1:c4:3a:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:5D:0B:A7:C3:E0:F5:63:AD:4D:A0:F2:A9:D4:45:56:21:F2:F7
X509v3 Authority Key Identifier:
keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:78:6f:e5:12:ee:41:59:7c:96:36:2a:48:c8:b0:61:52:98:
38:1d:65:06:aa:75:35:38:fe:10:db:b6:9d:25:8b:f0:c5:d3:
41:32:97:5c:eb:4c:5c:f8:a3:18:b1:7e:80:0e:e5:f1:e5:60:
a9:cc:cc:d9:cd:f5:6f:94:90:cd:9f:c6:e2:ef:0b:0c:f2:82:
0f:60:78:0f:d0:79:59:ce:71:73:f8:8e:86:d7:c4:90:84:b4:
c2:14:26:c5:84:35:df:33:33:e3:ea:ef:0b:f8:18:5c:03:7f:
70:6e:a8:07:50:70:fc:47:a8:90:8c:9b:00:67:a9:8a:bb:da:
cb:a9:f5:c3:12:3e:da:89:5b:af:c0:62:d7:b8:bd:91:25:30:
ae:f7:3e:37:e1:e7:22:2b:27:bf:47:ca:71:e2:a8:b6:79:9f:
55:c4:95:8e:71:d0:64:cd:4d:74:38:4b:fd:0b:2a:7b:bc:a3:
57:b9:3a:64:4d:6c:4a:1f:9e:31:90:28:a2:b2:e2:14:78:b4:
b7:55:ea:29:d1:05:ee:94:e4:be:12:00:0f:82:a7:ec:f6:22:
d7:81:14:81:82:9b:df:bc:e6:b1:22:38:2e:8b:65:d4:78:cf:
c5:a6:c8:84:88:7f:97:a4:da:2c:d3:f4:5e:ca:1f:37:8a:d1:
fc:dc:d1:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO5TF5EALlctbf17KgMPce4zm628wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRDE3MUY1MEU1M0U2NDg3RkU5QUM2MTI5OTdGNjE2
RTExMUY1OTAeFw0yNTExMTAxOTA2MDdaFw0yNjExMDkxOTExMDdaMDMxMTAvBgNV
BAMTKENEQUE1RDBCQTdDM0UwRjU2M0FENERBMEYyQTlENDQ1NTYyMUYyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwi/QyaExsRZ4RebwQo5xJdNq
3fu6mfmmZ4bmZT0hlbORcbzr+VznVVxfbMF4zlvQ9397/YPPR4OiVzHGWjDw2rCq
yD4DRIQePA9oGJoCG7Ih4uImv1ctuSAdO7e+scxFa7nDFHaJza0TfjI+I4+AN7+Q
XDlTXzrIlUdYMusbPcBEQ6fHW/TyGES05uzydbdciPttP+h4MD+7GJkvPcbWVKMJ
HuTYxrcs3g134uEcDsoO3eHLhFt2cHB7ygp/jVJ82C4o9ymNsrXJGxmj1ckVi2SK
Or3lzoQVGEJjZMCjor7WnTIEpBRn8x6GWMUIzL8LAsQOuZmcpsvBlcHEOkbnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzapdC6fD4PVjrU2g8qnURVYh8vcwHwYDVR0j
BBgwFoAUKi0XH1DlPmSH/prGEpl/YW4RH1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC8yQTJEMTcxRjUwRTUzRTY0ODdGRTlBQzYxMjk5N0Y2MTZFMTExRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMkQxNzFGNTBFNTNFNjQ4
N0ZFOUFDNjEyOTk3RjYxNkUxMTFGNTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16REwDQYJKoZIhvcNAQELBQADggEBAKl4b+US
7kFZfJY2KkjIsGFSmDgdZQaqdTU4/hDbtp0li/DF00Eyl1zrTFz4oxixfoAO5fHl
YKnMzNnN9W+UkM2fxuLvCwzygg9geA/QeVnOcXP4jobXxJCEtMIUJsWENd8zM+Pq
7wv4GFwDf3BuqAdQcPxHqJCMmwBnqYq72sup9cMSPtqJW6/AYte4vZElMK73Pjfh
5yIrJ79HynHiqLZ5n1XElY5x0GTNTXQ4S/0LKnu8o1e5OmRNbEofnjGQKKKy4hR4
tLdV6inRBe6U5L4SAA+Cp+z2IteBFIGCm9+85rEiOC6LZdR4z8WmyISIf5ek2izT
9F7KHzeK0fzc0QA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:05 2025 by rpki-client