This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32342d3234203d3e203532363632.roa
File: 3138392e3131332e3132382e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: UcSFOwyq3Iloi1PJJK1z1nw+AlCpko8cwVQxckNHW7Q=
Subject key identifier: 00:33:3F:D1:D4:92:A6:FD:A4:35:F6:A7:3C:8F:7A:40:96:8A:E0:E8
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 6FEABEBDDF35F269AC6EEB227CFC46A4F669F13A
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:56 +0000
ROA not before: Tue 25 Nov 2025 17:12:56 +0000
ROA not after: Tue 24 Nov 2026 17:17:56 +0000
asID: 52662
IP address blocks: 189.113.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ea:be:bd:df:35:f2:69:ac:6e:eb:22:7c:fc:46:a4:f6:69:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:56 2025 GMT
Not After : Nov 24 17:17:56 2026 GMT
Subject: CN=00333FD1D492A6FDA435F6A73C8F7A40968AE0E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:8e:d3:4a:22:54:ff:70:27:a7:1e:ae:43:
2e:2b:70:a6:59:0c:d2:f3:9c:5c:58:48:3f:37:36:
90:db:95:03:4a:06:0d:51:06:4b:c7:ec:0b:9b:15:
77:21:d9:13:06:13:45:48:f0:de:67:e9:16:bd:5c:
ba:9a:21:12:d9:1d:b5:63:c1:8f:93:c6:00:92:6b:
9c:31:9c:3c:c2:a2:c2:55:b5:22:c8:6a:ba:c1:6c:
cf:56:cb:8b:a6:2e:4f:15:1d:ad:ad:3b:ec:18:40:
94:28:6d:4b:21:02:5f:2d:a9:dc:bc:a0:b3:dd:f7:
58:df:2d:38:33:df:f4:83:bc:96:42:2c:e0:97:01:
da:f2:49:96:78:b9:7c:9d:9d:ad:0e:9f:b8:e8:16:
d5:ed:d1:cb:6f:43:c9:63:ef:cf:c2:aa:55:e8:dc:
36:9d:71:30:31:12:c9:4f:a9:8a:f3:20:ba:40:3e:
ce:e9:d4:54:4f:00:e0:fd:19:60:b1:39:78:98:ae:
7b:d6:01:dd:9c:b2:74:ba:bb:d2:04:83:55:96:5a:
83:d2:67:c8:78:1f:34:61:53:27:07:5f:61:b8:f4:
37:9c:52:f3:3d:1e:25:2b:6a:90:88:bf:38:d2:08:
cc:5b:a3:b6:0c:d8:de:ad:cc:11:fe:a0:b9:19:73:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:3F:D1:D4:92:A6:FD:A4:35:F6:A7:3C:8F:7A:40:96:8A:E0:E8
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ed:47:3f:40:56:ed:e6:eb:2f:db:d7:ce:04:4e:cd:fd:50:
00:d8:a5:25:76:f9:8c:6c:73:e2:6a:46:f7:b3:13:52:73:f1:
e9:50:fe:50:aa:5f:59:f0:d5:03:ce:0f:3a:bd:fb:14:ef:e7:
62:cf:9d:13:8b:a0:62:35:ee:da:41:24:27:ed:3c:f6:6b:91:
b8:b7:6d:24:0b:3e:cb:32:13:45:e4:c3:84:62:16:22:57:ec:
d5:46:1e:a6:e5:30:5b:c6:2e:5f:16:96:6d:3f:f7:3a:80:2f:
30:d9:9b:d1:81:92:8c:09:22:d2:87:1d:3a:f5:36:f8:44:eb:
c7:22:e2:45:2d:33:35:19:45:c7:bc:bb:c6:07:ed:8b:f9:8d:
85:e3:94:8c:2b:07:b3:a1:04:74:e3:5e:0d:2a:57:6d:5c:b6:
a1:8c:54:97:d7:94:1d:e5:05:44:e5:9b:c0:18:74:ba:4e:0e:
70:d8:d1:46:b1:7e:d3:da:ec:9e:ec:26:ad:b1:6a:7b:eb:a6:
c3:7f:9a:b6:2d:63:7a:bf:f2:33:eb:f1:7d:19:38:50:e6:42:
32:9d:c4:27:44:4f:20:e7:76:f8:51:f2:1d:51:c5:45:ff:a0:
b1:e8:b5:43:2a:29:33:ac:c8:f8:a1:a9:a4:2e:fd:1d:dc:43:
d7:b6:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:56 2025 by rpki-client