This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133312e302f32342d3234203d3e203532363632.roa
File: 3138392e3131332e3133312e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: RFcHb8ynnorik4xaNcL/RO3dICqWLd5cF5P7KEqM7LU=
Subject key identifier: 65:33:6D:AF:8B:A5:B0:8D:E0:6F:63:FA:BC:EC:90:9D:5D:81:F7:A9
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 2E2CFC4E326A862C5245D6CF8E3395E9C9AD4FE1
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133312e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:59 +0000
ROA not before: Tue 25 Nov 2025 17:12:59 +0000
ROA not after: Tue 24 Nov 2026 17:17:59 +0000
asID: 52662
IP address blocks: 189.113.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:2c:fc:4e:32:6a:86:2c:52:45:d6:cf:8e:33:95:e9:c9:ad:4f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:59 2025 GMT
Not After : Nov 24 17:17:59 2026 GMT
Subject: CN=65336DAF8BA5B08DE06F63FABCEC909D5D81F7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:48:8f:f2:9a:8c:30:a6:8b:3e:78:ee:39:
4a:fd:f5:29:1f:98:9b:06:36:1b:f4:a5:7a:0a:4e:
d4:e0:3a:e0:9b:c5:9d:2e:0c:b8:59:ed:cc:26:be:
68:40:6c:0a:de:7a:b8:24:d7:10:58:46:f3:92:1f:
c7:be:db:ff:55:99:11:a9:3b:89:98:85:02:1b:dd:
1d:93:5d:cf:65:52:4f:9f:a3:83:97:31:fb:ca:c6:
e8:a3:70:5a:72:f4:15:ad:73:58:cb:0d:38:ba:5e:
c3:54:28:cd:2b:4f:57:de:34:86:d7:b8:81:ef:fb:
19:9a:b2:cb:4b:20:5f:7f:c4:e4:0a:8d:bf:95:3f:
81:58:67:63:ac:60:59:9e:e6:fb:f3:bf:a5:f8:8b:
9c:1a:eb:f0:de:cd:d2:1d:47:01:6c:a2:ae:30:5a:
9a:a5:46:e7:6d:74:2e:a3:14:c0:d5:78:0e:e3:26:
53:88:d4:4d:e0:41:7a:aa:17:f2:25:1e:8c:4b:e3:
1f:28:61:f9:ff:75:19:94:fd:3d:9e:60:e0:00:00:
7e:99:7a:40:cb:86:69:fd:b2:53:f5:fb:30:34:b4:
d7:fc:5c:29:fe:34:ac:c0:f1:0b:0d:0b:bc:b1:d1:
d1:e6:1c:f9:95:5a:b9:0a:13:dd:2f:3f:b0:d5:e1:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:6D:AF:8B:A5:B0:8D:E0:6F:63:FA:BC:EC:90:9D:5D:81:F7:A9
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133312e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3a:27:dc:d4:17:65:35:bc:e9:3f:a7:fe:4a:82:6c:a3:49:
3c:ce:1e:f4:4c:ae:95:ed:5f:21:7c:5a:ab:51:5e:f6:90:71:
04:84:08:66:7c:fb:e6:c3:42:ca:c1:92:ad:bd:0b:81:30:b1:
73:e0:fa:60:a6:ae:38:54:fa:4d:4b:50:32:f0:a2:62:b4:e3:
a9:8d:f5:55:25:ca:25:c8:13:35:d0:a9:6a:0f:5c:85:13:c7:
4a:45:58:36:a1:43:92:64:c4:32:0a:ec:2c:9c:64:7d:d0:d8:
e6:8a:08:9e:6d:83:a8:56:53:a9:7a:0d:f7:27:9c:df:d2:0f:
e8:b6:27:ce:f9:ba:29:73:ed:3c:df:56:81:f9:51:6c:93:42:
95:0d:7b:45:cc:0d:a9:0e:77:eb:8e:d1:cf:75:af:e5:50:98:
88:e3:15:7b:be:4e:1b:a0:fe:0d:b4:21:3b:c7:cd:02:b1:5e:
c6:c3:c5:1c:15:d9:1b:7a:15:5f:e8:f8:14:12:4f:6b:88:d6:
3e:c1:c5:80:25:94:2f:0b:fc:10:33:4d:a1:8e:a8:58:16:b8:
84:e7:9a:f9:3b:d9:25:c2:62:be:25:ad:49:13:ba:12:ee:8f:
86:f2:0e:e9:6c:cf:ac:96:ce:60:43:dd:9b:68:04:c7:40:5b:
3b:0c:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:48 2025 by rpki-client