This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
File: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier: kjDBciUNdeEEmdMggoVI5Q4cW8oAlTukevRHcnYSoXw=
Subject key identifier: B0:AA:51:38:FE:0B:D4:47:33:6D:1D:CB:92:4A:D3:36:BF:88:CB:B0
Certificate issuer: /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Certificate serial: 1CEFB38A37E7E5F7895FCEAE2A2BB424720D5EBA
Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
Signing time: Mon 29 Dec 2025 17:40:44 +0000
ROA not before: Mon 29 Dec 2025 17:35:44 +0000
ROA not after: Mon 28 Dec 2026 17:40:44 +0000
asID: 28202
IP address blocks: 187.44.0.0/18 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 01:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ef:b3:8a:37:e7:e5:f7:89:5f:ce:ae:2a:2b:b4:24:72:0d:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Validity
Not Before: Dec 29 17:35:44 2025 GMT
Not After : Dec 28 17:40:44 2026 GMT
Subject: CN=B0AA5138FE0BD447336D1DCB924AD336BF88CBB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:8e:fe:f2:9e:98:1b:01:e6:94:fd:0d:16:
2c:3d:01:7a:fa:3b:57:46:d8:78:80:e7:7a:b5:fd:
b4:cd:31:53:ca:1f:f1:01:4c:d6:66:af:bc:b7:e5:
4f:e8:25:4c:99:3b:5c:33:e6:84:0d:a1:86:fc:45:
c8:74:ec:fa:4d:0f:28:60:b7:11:fb:28:4f:0e:e6:
49:d4:c7:34:5c:92:d2:88:d0:e2:0a:62:ec:aa:20:
84:7c:93:f3:c9:46:62:0c:28:44:34:2b:04:cf:c9:
cf:bc:33:24:ff:b3:ec:c3:b9:73:b2:06:59:87:f4:
26:4b:85:64:e5:de:d4:6b:51:6a:e2:70:34:4a:2d:
bf:07:92:aa:f2:80:df:37:bb:19:d3:07:6f:8e:04:
7e:90:e6:b4:bc:ef:3c:22:7b:6f:38:d4:ac:44:72:
e4:98:f1:ac:54:ad:01:e5:7e:9c:68:c5:08:4c:0a:
0a:6a:0b:e2:44:2b:07:2a:1e:a7:d7:2c:1f:2c:ca:
4f:7a:e8:e2:ac:93:38:a1:93:6b:fd:7b:43:e2:c4:
2d:1a:19:40:cd:27:c8:a6:09:7f:11:7d:d2:c8:34:
19:03:f4:a3:61:2b:6c:f2:3d:f0:42:32:61:08:4b:
76:88:03:d8:02:1e:8e:c5:e0:d0:81:e5:0e:f6:16:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AA:51:38:FE:0B:D4:47:33:6D:1D:CB:92:4A:D3:36:BF:88:CB:B0
X509v3 Authority Key Identifier:
keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.44.0.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:90:83:5f:18:c3:20:29:ba:85:15:75:08:74:c6:ad:0c:d3:
70:bd:0f:e5:f6:04:da:de:61:dc:8f:94:8b:77:f6:f2:ab:dc:
1b:6c:88:41:1e:69:7d:92:95:c6:e8:b2:e6:bb:b3:ad:47:06:
49:3f:d3:cd:83:c4:4a:70:46:a6:3c:5d:f0:f7:b1:75:3d:20:
13:71:64:7f:ba:01:39:43:a6:5c:ce:ab:b6:52:ce:f0:5a:92:
89:29:ea:4d:88:aa:48:bc:b3:c4:c7:33:14:37:d4:de:91:a6:
fd:3f:2b:85:91:02:2a:5c:0f:31:a3:f2:83:da:20:5e:29:7e:
45:3c:43:7f:09:56:f8:14:4b:2f:dc:d7:65:32:75:b2:54:a1:
c8:56:ae:af:bf:33:f8:c5:a2:46:ff:3d:01:f7:59:9d:6b:ab:
4c:5d:c0:54:40:15:7c:42:14:0e:f5:f7:b2:c8:2e:0d:8e:fa:
2f:76:45:3c:4e:42:d7:07:b5:83:b6:ff:6d:5a:db:9b:e5:b3:
9e:ac:85:f0:93:7b:07:07:aa:54:ef:27:dd:05:74:14:b0:c3:
a2:04:d6:c8:12:7a:f9:3a:28:bb:ca:12:05:32:82:54:18:df:
27:fd:e5:a8:18:2b:01:91:cc:5b:c1:fe:60:ae:21:4f:1a:69:
5b:5c:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:47 2026 by rpki-client