This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32342d3234203d3e203532363632.roa
File: 3137372e36372e32362e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: bmX5bZuNaTrDtMpJmoCBoP0fxUqo1TsT07TJI/+YNaY=
Subject key identifier: 29:C9:57:1C:3E:99:C1:36:18:6C:57:B1:96:A5:A4:E5:FE:19:E5:14
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 445D58FB4B4FAE5349942B58802E4655DF1F460A
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:53 +0000
ROA not before: Tue 25 Nov 2025 17:12:53 +0000
ROA not after: Tue 24 Nov 2026 17:17:53 +0000
asID: 52662
IP address blocks: 177.67.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5d:58:fb:4b:4f:ae:53:49:94:2b:58:80:2e:46:55:df:1f:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:53 2025 GMT
Not After : Nov 24 17:17:53 2026 GMT
Subject: CN=29C9571C3E99C136186C57B196A5A4E5FE19E514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:9e:63:7b:c9:0c:7f:ea:80:b5:82:04:83:
e2:54:23:33:7e:0f:75:f9:c5:e1:9f:8e:2f:41:bb:
8a:7e:0c:ed:27:bd:9b:20:23:3e:aa:d0:48:27:ea:
10:00:a5:79:a0:8a:65:65:0a:b5:93:f4:22:18:04:
5f:fb:02:33:8c:c1:ba:34:6c:37:fe:e7:bc:6e:5e:
78:89:be:09:35:ca:a3:1e:2e:99:72:fa:02:fe:3e:
3f:99:f3:b3:80:09:e3:b6:47:d8:4c:d4:11:8d:9e:
74:49:93:0f:24:8e:9e:12:d8:f9:92:7e:0c:67:86:
7e:05:61:97:85:e3:5c:bd:ae:49:2f:70:e7:a2:08:
69:24:b5:05:98:51:11:be:f9:9d:aa:2d:eb:aa:19:
db:96:2f:75:8b:c7:d7:85:4d:47:7e:7c:b9:7b:74:
78:0a:18:31:52:94:05:bf:73:b0:75:e0:1d:ad:25:
75:47:5c:80:17:21:6d:6a:30:2e:fa:eb:08:34:76:
ec:94:42:51:cc:05:94:7f:c9:25:c3:ed:4a:a2:ff:
b5:f2:8b:e5:40:f2:9f:d6:34:81:b2:a0:66:c5:0a:
56:b1:64:ec:3c:2e:cc:ec:6e:81:84:ea:c1:61:0b:
9c:8b:d4:4f:6d:8a:b0:39:b1:c3:8a:cb:dd:45:6a:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:57:1C:3E:99:C1:36:18:6C:57:B1:96:A5:A4:E5:FE:19:E5:14
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.26.0/24
Signature Algorithm: sha256WithRSAEncryption
27:11:a0:3b:b9:d9:16:e4:8e:1a:3c:03:2a:28:c1:c9:94:d8:
cd:bc:0b:ce:b9:06:67:02:5c:3e:11:0e:4a:30:ac:90:3c:ad:
a7:fe:17:6f:7e:fc:bd:d7:d9:a1:b6:f3:bd:a4:84:95:c9:d0:
d0:a8:3b:8b:f0:9c:56:ad:0a:3e:35:1a:7a:04:7c:8f:38:d8:
c9:da:53:b2:e1:bf:cb:e3:4d:17:80:fe:b3:fb:68:fa:b6:a8:
5e:72:1c:5c:1b:86:65:a8:79:ed:af:74:99:0b:0d:12:c8:a8:
96:13:78:45:ae:a3:1c:cd:61:65:d0:32:bf:bd:c8:68:16:db:
ef:c0:b0:ad:79:62:da:d0:60:fe:65:b5:7b:ac:dc:22:5f:2e:
7b:65:74:0d:71:00:3c:48:fb:d0:4f:15:d6:76:c6:b7:2e:47:
8c:5b:44:b4:b8:93:67:7c:34:b5:e4:0f:1a:90:c9:36:d6:08:
43:6d:19:f3:91:15:0a:37:60:2b:5c:9a:79:6d:03:2e:63:a6:
e5:c3:59:60:60:8f:34:8a:75:01:59:e3:dd:b9:e6:0c:3f:3a:
7c:8d:d6:f5:37:8f:44:9a:03:27:77:72:7d:3b:e9:63:cf:3d:
54:11:9b:fc:26:ed:a5:35:7e:b2:cf:82:04:d2:46:7b:12:3c:
2c:0e:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:11 2025 by rpki-client