This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132392e302f32342d3234203d3e203532363632.roa
File: 3138392e3131332e3132392e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: C3ondLiEDRvhSvnnaHzj2km6LWdTL+lCTkmL3zrA5RA=
Subject key identifier: D4:D1:D2:97:90:86:7A:E4:DB:B3:E1:D4:0A:22:4E:87:BB:3F:31:C9
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 342B65163E5AA77494840E3509B76F40A5311744
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132392e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:55 +0000
ROA not before: Tue 25 Nov 2025 17:12:55 +0000
ROA not after: Tue 24 Nov 2026 17:17:55 +0000
asID: 52662
IP address blocks: 189.113.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:2b:65:16:3e:5a:a7:74:94:84:0e:35:09:b7:6f:40:a5:31:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:55 2025 GMT
Not After : Nov 24 17:17:55 2026 GMT
Subject: CN=D4D1D29790867AE4DBB3E1D40A224E87BB3F31C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:73:d3:15:40:27:ad:b4:62:37:f9:84:21:
8a:16:79:96:81:2c:34:9f:97:b1:fa:62:56:d2:b6:
c1:c1:d7:b3:d7:03:59:3c:78:f9:26:e3:b9:38:e1:
23:a8:1a:c2:a0:ed:40:7f:a5:b5:26:8a:ff:62:21:
70:c9:96:98:0b:32:99:7f:81:c8:37:fc:ac:76:a3:
54:0d:4f:2e:8e:55:80:40:58:b4:c4:67:74:87:11:
53:b7:0c:df:a0:23:a5:84:78:fb:a1:a4:d9:38:71:
d7:3d:2d:d1:a8:63:35:8d:9e:b6:4f:4e:c7:d2:f3:
0d:96:b1:02:69:61:8e:1a:76:98:e1:cf:81:f5:17:
91:4a:f6:56:97:b1:55:ea:b4:ac:c1:5c:6e:4c:4e:
05:3a:4a:c6:0e:33:24:8d:ad:18:ed:52:d9:64:81:
f1:69:e1:37:a6:96:a1:e3:ce:b4:ec:d9:cc:a9:79:
2a:8c:4e:eb:bb:3a:78:d1:0c:c2:47:ba:c2:52:62:
53:31:b5:28:05:b6:c5:e4:d7:c7:cb:c0:12:16:d3:
ac:d0:d1:83:25:96:ee:d6:c3:15:3d:65:56:34:52:
f0:ce:fa:f4:00:dd:ba:b1:64:66:79:0a:50:1c:ab:
6a:b8:b9:24:73:af:00:4c:8c:b5:cd:88:1e:9d:6a:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:D2:97:90:86:7A:E4:DB:B3:E1:D4:0A:22:4E:87:BB:3F:31:C9
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132392e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c2:c8:de:a2:ba:b9:7f:84:b5:a0:fc:31:8c:66:1f:61:fe:
ed:6f:d7:df:b0:71:70:a6:ce:3d:dd:4a:f3:6a:3c:90:5e:87:
0e:75:d7:e0:0c:79:91:88:d1:10:3c:cd:69:47:91:86:9b:f4:
03:3b:91:9c:dc:1d:1f:84:8a:c9:c5:01:7d:a3:ac:a7:69:43:
88:fc:ae:ce:2a:3a:91:e9:0e:34:60:69:93:92:1c:8a:58:03:
51:66:75:81:3a:ec:63:58:87:12:f4:36:39:59:e9:0d:c1:0c:
c4:bb:4c:52:36:aa:46:e3:17:9d:dd:4d:3d:b4:5e:2e:4c:fb:
55:77:cc:81:23:5d:0f:23:30:3c:88:0b:99:90:c7:b0:72:45:
41:97:40:a4:9a:ec:5e:67:60:62:f8:a9:eb:5d:02:26:12:5f:
0a:7d:5b:73:6b:73:3a:83:b3:32:62:06:90:77:96:f2:ab:b6:
b8:3c:38:f7:5f:10:da:ac:14:01:b5:e8:1c:9c:3f:0b:18:02:
2f:4d:77:1a:71:4a:ed:e1:ba:d3:45:c6:dc:82:59:da:31:f3:
5b:5e:92:ed:56:83:ca:45:b1:f1:b8:34:a5:30:8b:e5:e2:0f:
c6:6a:4a:19:b3:87:5b:fd:38:7a:33:18:9a:cd:79:ce:c8:71:
91:6b:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:54 2025 by rpki-client