This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa
File: 3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier: k9Ynt++xrZ/a4K20iVllsc5IMbZtQIFjGOelh5NvO1M=
Subject key identifier: D5:CF:E3:66:54:B0:30:82:B3:92:0E:15:BE:E9:F3:EA:8E:5D:5A:0B
Certificate issuer: /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Certificate serial: 641F8530E8C297066B410BA2BB9FABDCE40DCAF7
Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa
Signing time: Mon 29 Dec 2025 17:40:45 +0000
ROA not before: Mon 29 Dec 2025 17:35:45 +0000
ROA not after: Mon 28 Dec 2026 17:40:45 +0000
asID: 28202
IP address blocks: 179.189.160.0/19 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 01:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1f:85:30:e8:c2:97:06:6b:41:0b:a2:bb:9f:ab:dc:e4:0d:ca:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Validity
Not Before: Dec 29 17:35:45 2025 GMT
Not After : Dec 28 17:40:45 2026 GMT
Subject: CN=D5CFE36654B03082B3920E15BEE9F3EA8E5D5A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:e1:32:db:0f:f9:3b:09:f2:6d:39:db:67:
dd:53:ae:56:5e:e6:16:11:22:cc:2b:84:fb:93:30:
ad:16:0b:4a:84:cb:90:2c:8d:d0:d9:44:8a:2f:5b:
8c:77:7d:3d:17:31:d6:b3:10:56:8a:22:94:86:06:
91:03:7f:e3:68:26:05:8e:2f:bd:00:87:4a:c6:05:
8d:f5:d3:a9:82:1f:71:61:cf:88:3d:e2:f6:d4:01:
dd:9f:33:76:9f:3a:7e:74:c8:51:be:8a:98:f1:e5:
f5:ac:30:f2:09:19:a4:8d:54:8c:55:de:07:74:72:
ee:a8:ac:8a:38:d2:82:de:98:3d:c3:b6:d7:c9:f9:
05:7a:9b:45:5a:5f:77:61:bf:c9:7d:55:0e:be:70:
03:92:71:0e:a6:8a:8b:82:a8:85:e4:b8:18:b4:54:
22:1f:00:71:0b:2d:d0:ad:e5:cc:c0:0c:d6:7c:b0:
88:21:c3:27:c8:59:59:d2:87:2a:e6:fb:87:21:02:
8d:53:67:63:7c:63:ad:dc:6d:a0:25:61:88:02:fc:
6b:44:f8:29:89:32:9b:e6:ea:f6:e0:25:d6:7e:c0:
06:b3:1b:0c:c2:c6:2b:af:18:e2:e9:5d:8f:ac:15:
9e:78:37:87:70:99:d5:67:21:1c:36:49:3c:85:d1:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:E3:66:54:B0:30:82:B3:92:0E:15:BE:E9:F3:EA:8E:5D:5A:0B
X509v3 Authority Key Identifier:
keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.189.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:88:f5:ef:55:58:2d:c1:4b:b5:3c:fc:11:86:3c:fb:c4:96:
3b:6a:e8:76:5f:87:25:c8:eb:fb:c6:99:72:33:9a:d0:15:6c:
0b:f1:4a:66:39:da:08:68:45:d6:e4:02:2c:48:35:79:a7:3b:
d6:81:39:7e:3f:2f:b0:d0:d5:a8:1f:03:aa:9e:20:66:53:51:
9d:bd:4b:e6:b2:92:70:9b:8c:42:34:4d:2a:a1:8b:fc:38:b0:
3f:f0:da:9b:59:85:b5:1d:57:6e:08:b9:3f:8f:44:c2:94:e8:
77:08:c2:4d:98:f1:22:53:8f:e2:7d:d6:1e:f0:41:6a:dc:1c:
08:18:33:08:84:a7:99:c6:ce:38:0d:7a:3a:c8:9e:72:80:dd:
bd:14:f2:85:d1:b5:9e:5d:de:5d:4b:b3:bb:88:a5:48:76:44:
e1:31:bd:16:94:8b:27:12:4a:71:ad:55:6e:16:fd:45:c1:c5:
24:4d:44:2c:b5:e9:61:42:eb:0a:bd:f5:43:8d:70:54:1d:a7:
d9:7e:b2:8c:8b:de:9d:90:90:dc:d1:30:97:61:b9:4d:88:04:
12:12:52:0d:13:2b:5d:ec:83:3b:27:21:3f:2f:56:e7:96:4b:
2c:26:c8:6b:10:18:97:8d:4b:53:67:a0:fe:cf:c2:f9:d2:db:
7a:58:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:14 2026 by rpki-client