This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32322d3232203d3e203532363632.roa
File: 3138392e3131332e3132382e302f32322d3232203d3e203532363632.roa (raw, json)
Hash identifier: CRYbvOGp2jlwz3t/u+rAjE4WQCt/h/umeIR+xH+elnQ=
Subject key identifier: AF:A1:2D:A9:3C:89:A9:9E:04:D7:C1:15:24:A5:6A:E7:A1:75:AA:62
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 2D025C326893CDB84AD72C3E17B2D84345B3E110
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32322d3232203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:59 +0000
ROA not before: Tue 25 Nov 2025 17:12:59 +0000
ROA not after: Tue 24 Nov 2026 17:17:59 +0000
asID: 52662
IP address blocks: 189.113.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:02:5c:32:68:93:cd:b8:4a:d7:2c:3e:17:b2:d8:43:45:b3:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:59 2025 GMT
Not After : Nov 24 17:17:59 2026 GMT
Subject: CN=AFA12DA93C89A99E04D7C11524A56AE7A175AA62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:53:fa:f7:7b:8f:0f:9f:3f:a0:34:99:5d:
db:90:92:bb:be:57:75:d1:86:28:23:ab:83:9a:50:
48:1b:de:39:03:f1:75:71:10:cd:68:93:07:9f:2f:
80:d0:15:14:72:f6:fb:fe:f5:93:31:c3:52:8e:40:
f8:13:de:f4:ef:53:ee:fb:71:ea:ed:03:68:e8:52:
55:97:12:9a:2d:ac:fc:44:ac:0c:ad:34:11:50:74:
cb:ba:9c:45:bb:bb:11:3f:28:bf:75:43:07:1a:70:
1d:9b:d8:6b:b3:e4:99:14:73:df:01:b7:59:e2:d3:
ab:50:d3:17:33:c1:50:07:c3:4b:3c:72:00:3e:4d:
28:93:1e:d7:42:b5:8e:a9:36:85:5a:d3:3e:16:5a:
1b:6c:38:bd:cf:c6:43:5b:89:30:77:07:fd:cb:4b:
89:18:2b:68:fb:e8:ac:93:18:f4:31:28:3c:72:ba:
40:87:9c:2a:3a:4b:5c:a5:9c:03:e5:34:ed:7e:1b:
6e:49:6e:d5:08:9f:e0:54:9d:c1:3f:8e:5f:c7:6e:
9d:e2:53:9b:0f:99:85:d0:d1:80:10:c7:77:d5:f2:
dc:c1:53:68:36:04:9d:7a:9b:80:36:d1:16:41:f7:
1b:13:e0:65:6c:c4:07:7d:ac:0f:48:b9:18:75:00:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A1:2D:A9:3C:89:A9:9E:04:D7:C1:15:24:A5:6A:E7:A1:75:AA:62
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32322d3232203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:73:77:78:9e:50:79:65:66:9f:7c:c9:40:0d:aa:67:c4:63:
aa:6f:25:28:9c:ae:40:aa:20:d1:bd:e1:a2:78:9c:2b:d3:9d:
41:61:72:bc:16:61:5b:a7:3f:7c:d4:b5:3a:75:e9:5b:ab:47:
b2:d6:1d:4d:38:8f:3c:05:3d:01:d0:d5:bc:e8:05:bf:2c:5f:
4d:7d:fd:0c:5f:20:f9:60:82:cf:7f:a6:c7:b1:3b:2c:67:72:
c7:8e:f7:3a:a8:ad:a4:d5:b9:16:0e:7a:49:72:8e:d3:34:1b:
9f:e9:8c:f1:dd:3d:09:c4:41:59:78:2f:25:02:9c:f1:83:7d:
39:68:0d:b0:ba:4e:53:38:85:4c:2d:6b:14:07:d3:1b:57:15:
10:48:d6:22:75:d1:bb:03:9a:32:8d:41:aa:cb:6d:70:84:ef:
44:7d:8c:00:27:29:5a:9b:42:48:08:bf:a6:fb:45:e7:4d:f3:
29:df:82:43:be:41:78:cb:2f:51:8b:81:51:88:92:94:c5:c6:
b4:e3:7b:16:df:ec:3c:0f:50:e3:00:c2:ae:d0:c4:f7:b7:1b:
c1:96:5d:55:7c:a5:a9:6d:6f:74:b8:bf:37:ba:32:55:f9:eb:
cf:06:92:ea:65:f3:2c:a0:3e:a7:98:ff:9c:79:97:b2:32:af:
63:72:75:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULQJcMmiTzbhK1yw+F7LYQ0Wz4RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNTExMjUxNzEyNTlaFw0yNjExMjQxNzE3NTlaMDMxMTAvBgNV
BAMTKEFGQTEyREE5M0M4OUE5OUUwNEQ3QzExNTI0QTU2QUU3QTE3NUFBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYTlP693uPD58/oDSZXduQkru+
V3XRhigjq4OaUEgb3jkD8XVxEM1okwefL4DQFRRy9vv+9ZMxw1KOQPgT3vTvU+77
certA2joUlWXEpotrPxErAytNBFQdMu6nEW7uxE/KL91QwcacB2b2Guz5JkUc98B
t1ni06tQ0xczwVAHw0s8cgA+TSiTHtdCtY6pNoVa0z4WWhtsOL3PxkNbiTB3B/3L
S4kYK2j76KyTGPQxKDxyukCHnCo6S1ylnAPlNO1+G25JbtUIn+BUncE/jl/Hbp3i
U5sPmYXQ0YAQx3fV8tzBU2g2BJ16m4A20RZB9xsT4GVsxAd9rA9IuRh1ADrZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr6EtqTyJqZ4E18EVJKVq56F1qmIwHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9cYAwDQYJKoZIhvcNAQELBQADggEBAC5zd3ie
UHllZp98yUANqmfEY6pvJSicrkCqING94aJ4nCvTnUFhcrwWYVunP3zUtTp16Vur
R7LWHU04jzwFPQHQ1bzoBb8sX019/QxfIPlggs9/psexOyxncseO9zqoraTVuRYO
eklyjtM0G5/pjPHdPQnEQVl4LyUCnPGDfTloDbC6TlM4hUwtaxQH0xtXFRBI1iJ1
0bsDmjKNQarLbXCE70R9jAAnKVqbQkgIv6b7RedN8ynfgkO+QXjLL1GLgVGIkpTF
xrTjexbf7DwPUOMAwq7QxPe3G8GWXVV8paltb3S4vze6MlX5688Gkupl8yygPqeY
/5x5l7Iyr2Nydc8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:18:29 2025 by rpki-client