This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e3132302e36342e302f31382d3235203d3e203238323032.roa
File: 3138372e3132302e36342e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier: j4KyK9NjW3GUibWGvauQL2zES3f5lYR3x4XJOM5qkjI=
Subject key identifier: F4:58:3A:AE:29:6B:62:51:A8:94:27:F4:50:F2:E0:28:EF:CA:F9:42
Certificate issuer: /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Certificate serial: 3DFA2B14313BA87AE802ECCAC0D22AE82C6F8014
Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e3132302e36342e302f31382d3235203d3e203238323032.roa
Signing time: Mon 29 Dec 2025 17:40:46 +0000
ROA not before: Mon 29 Dec 2025 17:35:46 +0000
ROA not after: Mon 28 Dec 2026 17:40:46 +0000
asID: 28202
IP address blocks: 187.120.64.0/18 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 01:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fa:2b:14:31:3b:a8:7a:e8:02:ec:ca:c0:d2:2a:e8:2c:6f:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Validity
Not Before: Dec 29 17:35:46 2025 GMT
Not After : Dec 28 17:40:46 2026 GMT
Subject: CN=F4583AAE296B6251A89427F450F2E028EFCAF942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:1d:3f:9d:a8:cd:e5:c4:0d:2b:ca:32:4b:
12:27:5f:fe:b3:61:fb:d0:88:03:aa:e6:91:f3:78:
6d:37:88:d9:e8:29:67:17:13:9b:58:1c:be:32:08:
00:2a:8c:e6:59:7c:a2:af:44:9a:61:ae:83:89:51:
7a:6c:ff:53:45:5a:74:12:58:65:7f:4d:33:ff:ec:
69:2c:44:b9:74:1a:ac:b7:e8:69:b2:84:28:14:36:
90:f7:7c:b2:17:24:2e:7d:01:8c:e3:a0:b2:42:a0:
62:2c:08:eb:cf:6b:89:1e:de:73:87:d8:47:1a:47:
96:d0:17:62:d0:c0:5e:74:7b:2b:3b:bf:60:df:01:
c4:0d:06:c4:f7:06:a3:5d:08:df:16:08:f2:08:9a:
8e:28:6c:ba:c6:ae:6c:08:22:03:df:3a:f1:d1:2c:
5b:61:30:19:bc:5f:ab:6c:ce:ed:8a:af:47:7a:0f:
4d:2f:ae:ce:b7:e7:63:69:94:5f:66:a8:05:74:e1:
b5:7f:35:11:ef:35:4e:f2:d3:ba:e8:d9:82:39:c6:
4b:7d:c9:76:c0:39:64:3d:9c:18:b2:85:32:ba:88:
40:ea:98:17:8b:e4:66:7d:87:e4:be:0c:fa:85:bb:
56:24:cc:14:ff:ed:2f:ea:c0:0d:30:b1:f9:c2:9b:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:58:3A:AE:29:6B:62:51:A8:94:27:F4:50:F2:E0:28:EF:CA:F9:42
X509v3 Authority Key Identifier:
keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e3132302e36342e302f31382d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.120.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:65:63:31:a2:79:32:09:52:e8:8b:c5:ae:2e:f4:61:fd:fb:
43:c1:b5:5b:9e:e9:25:47:bf:74:e0:4a:11:65:ba:b2:c8:bc:
5b:65:23:d9:a9:17:6d:b6:72:ee:bd:0b:11:9c:4a:46:97:4e:
79:e5:0f:b2:b9:a3:ac:eb:9a:d7:29:79:a3:ec:e3:cb:d7:19:
cc:97:34:c4:13:66:21:ae:5f:56:af:10:24:d0:ad:d1:91:eb:
6b:23:be:0a:74:6b:1e:76:36:e4:76:d4:2b:21:04:ae:d3:ff:
ef:1c:df:ad:7f:ce:79:f7:2b:2f:cb:d1:3d:ab:6a:94:a7:5b:
e1:77:e7:07:ed:15:8d:b8:a9:f9:4b:cc:67:ae:24:9b:e4:19:
9b:c4:aa:ad:9c:db:a6:48:62:2f:05:88:f4:7a:f0:a2:b7:e6:
e7:5e:ba:f8:53:ae:cb:b4:b1:cc:09:f2:d0:a7:0a:f8:a7:f3:
5f:d4:95:cb:e3:fa:61:f2:c6:79:d9:0a:2c:ae:86:9e:24:47:
a4:5e:cd:4c:5c:fe:a7:7a:78:f7:1e:a8:92:43:10:73:1f:1d:
35:53:0b:24:ce:f0:97:5c:b6:25:2d:dc:41:65:c6:db:0f:70:
f0:a5:b7:27:75:e4:11:4f:de:57:67:0b:52:66:3b:cd:d7:92:
cf:0f:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:39 2026 by rpki-client