This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133322e302f32342d3234203d3e203532363632.roa
File: 3138392e3131332e3133322e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: eD6aRiwxRiB8Qrh72J8iVCQi4MENGrQr8k3BnTHsGfA=
Subject key identifier: 23:3F:47:F3:02:5A:FA:FF:60:BC:04:BA:57:45:BA:ED:16:8E:86:2D
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 1B515824895A601218B17DF9E5E38C46136A0A64
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133322e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:18:01 +0000
ROA not before: Tue 25 Nov 2025 17:13:01 +0000
ROA not after: Tue 24 Nov 2026 17:18:01 +0000
asID: 52662
IP address blocks: 189.113.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:51:58:24:89:5a:60:12:18:b1:7d:f9:e5:e3:8c:46:13:6a:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:13:01 2025 GMT
Not After : Nov 24 17:18:01 2026 GMT
Subject: CN=233F47F3025AFAFF60BC04BA5745BAED168E862D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:a0:c3:84:8e:d0:8f:85:90:3d:d2:88:e4:
5a:18:dd:f5:fe:3c:fb:b1:74:fd:93:54:4b:3d:7e:
ba:de:7a:be:25:70:f8:89:5a:b9:f4:1a:24:94:44:
f4:36:3b:26:ff:39:bc:ce:6a:72:83:50:70:f3:33:
fd:1f:52:ad:7a:65:d1:90:1a:73:69:7b:8f:6d:62:
6a:6b:0f:d1:88:5e:58:5c:6f:29:44:15:1f:80:b2:
15:4e:33:3c:0c:71:22:2c:6a:11:c2:96:65:21:1d:
40:59:07:ff:7f:ff:b4:75:bc:bf:8c:1c:d9:dd:4f:
e8:a8:33:3b:dc:3a:2a:a7:db:1d:c3:86:62:79:9d:
32:ee:0d:e6:c4:ba:a2:89:d6:99:a2:f3:e3:6b:25:
32:dc:1f:b5:49:97:6d:2c:b7:7d:26:dd:70:51:63:
e5:f5:ea:e8:81:1e:5a:5a:a9:f9:5e:26:69:99:f0:
0f:9b:7a:96:81:34:4c:e9:98:4f:d1:6d:a5:57:4c:
0c:e1:f6:88:92:be:76:28:9d:51:e1:2a:dc:03:5d:
a0:e4:f2:3d:57:a2:33:d3:84:e1:87:13:bc:26:e2:
53:6d:f4:2d:c9:34:ef:ab:4a:68:70:1b:b4:05:7c:
5b:03:ef:fb:5c:3c:dd:e3:fb:ac:ff:80:e8:12:13:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:47:F3:02:5A:FA:FF:60:BC:04:BA:57:45:BA:ED:16:8E:86:2D
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133322e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:27:5d:6f:c5:be:36:de:4d:27:49:60:d0:0c:d9:d9:e9:13:
d1:6e:13:7b:bb:b7:68:72:fd:cf:f6:0b:1c:66:14:dc:59:8a:
36:6f:49:72:53:59:80:c9:e2:0a:0f:7b:46:9c:08:8f:1d:4d:
85:78:b5:bf:b6:b1:6f:59:c4:bc:9f:0b:4c:64:8a:23:33:8f:
6d:86:5b:8c:b1:25:a5:18:e5:91:15:1c:cc:ce:9a:b5:4d:6f:
e2:48:2d:5d:a8:28:59:9e:7e:ed:bb:74:e2:53:15:91:04:a1:
ad:f2:d9:a3:01:e8:d0:3d:8f:7c:62:dd:f8:0b:ba:24:c2:33:
40:1f:60:70:f0:c3:08:a3:5e:29:66:ba:64:a8:57:f0:97:6b:
0e:13:21:67:e8:eb:80:18:68:fa:bb:fa:c2:27:e7:6c:92:bc:
ba:75:8b:02:d4:e1:f4:37:23:be:03:5d:ed:cf:89:38:fe:38:
fb:96:57:9c:c9:81:95:84:db:9d:16:29:b0:aa:db:22:64:c3:
4e:2a:f8:68:44:2b:5f:65:21:e6:dc:b4:77:fc:07:5f:79:ec:
41:78:9e:6c:55:f6:c5:ef:ec:f3:d8:f8:54:d1:a0:5c:94:5b:
a4:fe:19:9c:73:d2:77:a3:2e:b0:17:7e:8b:95:45:d2:35:c4:
66:c8:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:42 2025 by rpki-client