This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa
File: 3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa (raw, json)
Hash identifier: JzShgOhCoABd5LYspzpggCizQSMmI49uldbP3DF6WFA=
Subject key identifier: 17:5D:3D:C6:12:83:EE:6C:5E:35:1D:6B:8D:25:41:C1:6F:47:7C:E1
Certificate issuer: /CN=9473382722118249A58E8AC63C1F00AEE6F38EC5
Certificate serial: 47FCE3055827185A6A6A1EC39245AE2D7B7C8B82
Authority key identifier: 94:73:38:27:22:11:82:49:A5:8E:8A:C6:3C:1F:00:AE:E6:F3:8E:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa
Signing time: Wed 19 Nov 2025 12:53:39 +0000
ROA not before: Wed 19 Nov 2025 12:48:39 +0000
ROA not after: Wed 18 Nov 2026 12:53:39 +0000
asID: 271671
IP address blocks: 168.232.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.crl
rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 01:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fc:e3:05:58:27:18:5a:6a:6a:1e:c3:92:45:ae:2d:7b:7c:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9473382722118249A58E8AC63C1F00AEE6F38EC5
Validity
Not Before: Nov 19 12:48:39 2025 GMT
Not After : Nov 18 12:53:39 2026 GMT
Subject: CN=175D3DC61283EE6C5E351D6B8D2541C16F477CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:2e:29:70:7f:a4:08:c6:43:d9:f2:04:f6:
87:1c:72:55:56:6c:01:eb:f4:c7:7a:c6:e1:96:c7:
a7:10:e1:1a:ab:ea:a9:fa:0a:c8:a5:51:f2:36:d9:
3d:21:7e:f2:30:05:5f:c0:f0:3e:39:4d:87:5a:f7:
60:db:25:7a:37:85:c1:2e:fd:76:00:cd:3a:3f:0a:
02:eb:3c:b2:3e:81:ad:1e:7d:8e:8b:56:9c:15:56:
9e:a6:3d:4f:8d:06:0d:94:f6:b4:c8:13:26:17:cb:
8c:64:8b:e1:b7:69:2b:3c:6e:7f:93:91:44:92:66:
c8:4d:76:ef:f8:1b:d4:93:96:13:63:fc:14:7d:a4:
60:a1:00:b3:21:c6:14:46:13:e1:6b:92:89:40:2b:
80:08:05:81:c1:34:62:56:fa:73:76:01:f2:93:4f:
f8:0f:1c:5f:07:9c:69:cd:3b:58:fc:ab:50:dd:b6:
f3:da:b6:4e:26:32:ac:34:bc:dc:fc:a0:62:c5:fa:
95:35:1e:f5:ae:c2:a7:dc:ad:47:50:ec:28:cc:5a:
c7:49:62:e6:a2:de:6e:a6:20:56:38:fc:84:82:18:
50:65:00:b7:35:9f:62:d3:00:77:be:92:cf:9b:c0:
95:98:11:b4:aa:4c:83:c3:4c:66:c3:92:fe:86:cc:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:3D:C6:12:83:EE:6C:5E:35:1D:6B:8D:25:41:C1:6F:47:7C:E1
X509v3 Authority Key Identifier:
keyid:94:73:38:27:22:11:82:49:A5:8E:8A:C6:3C:1F:00:AE:E6:F3:8E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
65:79:8d:22:5b:73:fe:4e:8a:ef:38:96:a1:71:f4:af:2e:d6:
ca:6f:47:97:d5:4a:7a:6c:27:0d:0b:ba:a5:f7:cf:89:f1:16:
13:f2:d8:1d:d3:69:54:3c:dc:f5:7d:ee:5d:0a:99:41:2b:99:
ec:e8:06:de:02:4e:52:cd:73:f5:a6:3e:69:2c:4b:b3:15:3e:
ba:24:39:be:76:54:08:c6:8c:ed:91:8e:10:06:0e:b8:b0:b4:
46:3f:5f:e4:56:0b:d8:de:04:6c:21:a0:5d:68:a7:85:16:f4:
28:c0:87:95:a8:ce:5e:4a:a5:94:2e:f3:f1:a6:8c:72:96:1c:
8e:a0:da:3c:fc:e2:13:d8:e7:f2:db:ad:28:b5:65:77:e4:28:
d8:c0:7b:71:fb:ec:40:52:9e:92:50:63:b4:5b:7a:b5:20:ac:
01:35:cd:f7:f1:d9:5b:1c:47:c2:7a:9f:73:80:c7:ef:92:15:
f3:7d:4b:3a:8e:78:e6:ad:c0:39:ec:d2:88:fd:ef:e9:a3:fc:
62:8c:9a:c6:d0:2a:1f:e1:9a:86:43:c7:75:6d:88:d3:25:a5:
f6:23:67:ee:bd:b6:e5:a5:31:62:4a:86:52:3b:4a:47:c5:7b:
5d:b5:81:55:af:49:65:6c:09:18:c4:dd:03:04:e0:44:24:7b:
52:9d:97:61
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR/zjBVgnGFpqah7DkkWuLXt8i4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ3MzM4MjcyMjExODI0OUE1OEU4QUM2M0MxRjAwQUVF
NkYzOEVDNTAeFw0yNTExMTkxMjQ4MzlaFw0yNjExMTgxMjUzMzlaMDMxMTAvBgNV
BAMTKDE3NUQzREM2MTI4M0VFNkM1RTM1MUQ2QjhEMjU0MUMxNkY0NzdDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXy4pcH+kCMZD2fIE9occclVW
bAHr9Md6xuGWx6cQ4Rqr6qn6CsilUfI22T0hfvIwBV/A8D45TYda92DbJXo3hcEu
/XYAzTo/CgLrPLI+ga0efY6LVpwVVp6mPU+NBg2U9rTIEyYXy4xki+G3aSs8bn+T
kUSSZshNdu/4G9STlhNj/BR9pGChALMhxhRGE+FrkolAK4AIBYHBNGJW+nN2AfKT
T/gPHF8HnGnNO1j8q1DdtvPatk4mMqw0vNz8oGLF+pU1HvWuwqfcrUdQ7CjMWsdJ
Yuai3m6mIFY4/ISCGFBlALc1n2LTAHe+ks+bwJWYEbSqTIPDTGbDkv6GzCvFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUF109xhKD7mxeNR1rjSVBwW9HfOEwHwYDVR0j
BBgwFoAUlHM4JyIRgkmljorGPB8ArubzjsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlhbzJuc0FXNGZnR1lyTmM3THhFWkRNN2JyNzFvUVc1YmZWb0JrTG05
TGcvMC85NDczMzgyNzIyMTE4MjQ5QTU4RThBQzYzQzFGMDBBRUU2RjM4RUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0NzMzODI3MjIxMTgyNDlB
NThFOEFDNjNDMUYwMEFFRTZGMzhFQzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpYW8ybnNBVzRmZ0dZck5jN0x4RVpETTdicjcxb1FXNWJmVm9Ca0xtOUxnLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjoeDANBgkqhkiG9w0BAQsFAAOCAQEAZXmN
Iltz/k6K7ziWoXH0ry7Wym9Hl9VKemwnDQu6pffPifEWE/LYHdNpVDzc9X3uXQqZ
QSuZ7OgG3gJOUs1z9aY+aSxLsxU+uiQ5vnZUCMaM7ZGOEAYOuLC0Rj9f5FYL2N4E
bCGgXWinhRb0KMCHlajOXkqllC7z8aaMcpYcjqDaPPziE9jn8tutKLVld+Qo2MB7
cfvsQFKeklBjtFt6tSCsATXN9/HZWxxHwnqfc4DH75IV831LOo545q3AOezSiP3v
6aP8YoyaxtAqH+GahkPHdW2I0yWl9iNn7r225aUxYkqGUjtKR8V7XbWBVa9JZWwJ
GMTdAwTgRCR7Up2XYQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:41 2025 by rpki-client