This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa
File: 3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: qBHkovhkKuLQ/jlsVlyA8VIZDS6gEcfjgtJygTW9fdM=
Subject key identifier: E4:D9:E0:EA:36:3B:B8:63:7E:4B:A6:3C:E9:6C:58:EB:5C:55:90:5F
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 180F2754599051F7F912B6AF33CF0A23972F9907
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:58 +0000
ROA not before: Tue 25 Nov 2025 17:12:58 +0000
ROA not after: Tue 24 Nov 2026 17:17:58 +0000
asID: 52662
IP address blocks: 189.113.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0f:27:54:59:90:51:f7:f9:12:b6:af:33:cf:0a:23:97:2f:99:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:58 2025 GMT
Not After : Nov 24 17:17:58 2026 GMT
Subject: CN=E4D9E0EA363BB8637E4BA63CE96C58EB5C55905F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:21:a2:aa:e7:96:3d:bf:b3:64:f2:f9:d2:
a8:b5:c9:93:67:b5:42:b1:60:28:b8:6b:ae:cf:a5:
98:9d:59:ba:d7:f0:23:c9:40:95:65:2e:6e:df:d4:
40:ad:07:e2:52:3d:6d:6d:2d:8c:88:09:44:4c:ca:
94:88:64:e3:e8:87:e7:e5:94:bc:2e:24:1a:37:7b:
a7:87:80:31:98:e9:9d:c7:69:26:ca:1c:35:13:4b:
60:e0:66:51:c7:34:37:f2:0a:69:e7:f7:2c:5f:c4:
d0:86:cb:ff:6d:b0:c6:5e:a8:4c:05:9c:e2:94:3d:
9f:d6:16:cb:c7:f8:2d:f9:b8:df:dd:22:36:f1:1f:
64:c2:eb:74:5d:a2:e1:4b:ec:76:e1:12:27:36:79:
fe:5f:9e:6e:c7:95:69:4a:ad:e4:94:9f:16:d9:f0:
b0:32:70:d9:77:05:81:8f:19:2a:74:cd:1d:3e:38:
91:9e:f1:c9:35:8b:91:ec:4b:3e:1a:73:74:c7:2a:
02:23:5b:cc:79:76:07:36:46:8b:3b:e4:83:46:32:
72:b3:99:6f:c5:44:80:c5:ca:7a:0b:fe:d9:b6:8d:
e9:9d:bb:c8:b7:98:be:f4:90:30:90:19:fe:90:18:
bb:b4:21:70:29:03:45:20:f8:63:a4:8d:36:92:9b:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:E0:EA:36:3B:B8:63:7E:4B:A6:3C:E9:6C:58:EB:5C:55:90:5F
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.133.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f2:2f:92:3b:7a:34:8a:76:57:bd:11:45:74:79:1e:5d:03:
e1:81:63:e2:10:cf:99:a2:e8:bf:2b:ad:b1:15:d9:ae:46:06:
1e:39:c2:5f:51:f5:e1:3f:5d:7b:09:f5:5a:8f:9b:b3:77:01:
9f:d7:64:c8:f6:d8:07:6f:89:16:c2:2a:80:8e:41:fc:5d:c3:
7c:c9:43:6d:8b:9d:85:b9:b1:44:9e:99:7d:34:21:83:37:e3:
2e:22:5a:8b:ca:8b:40:d3:ed:3e:9a:2b:fb:86:8c:0e:8e:cb:
e6:9a:b4:5e:76:15:05:68:a9:5f:27:6f:05:3e:0b:07:63:4e:
d1:e4:4a:80:35:da:bf:fa:80:f9:8e:7f:07:4b:6e:0c:ed:cb:
6f:e5:9b:9b:87:27:bb:ff:88:cd:af:cd:0c:f5:ee:24:b0:40:
a9:21:a2:f5:ab:8d:e8:bf:5e:3a:ef:be:0b:e8:70:2b:e5:9e:
e1:bd:00:dd:99:7e:f4:74:44:45:71:f4:b1:5f:e8:ef:86:6a:
de:80:f8:8f:95:5d:5e:11:3e:82:c3:ae:ef:93:3a:35:1e:11:
3b:19:3d:aa:13:b4:26:a8:af:0a:35:bd:97:84:e9:42:39:88:
af:cf:82:c3:85:fe:b1:da:be:85:2c:c2:9f:db:fc:cc:67:e0:
46:98:7c:45
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGA8nVFmQUff5EravM88KI5cvmQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNTExMjUxNzEyNThaFw0yNjExMjQxNzE3NThaMDMxMTAvBgNV
BAMTKEU0RDlFMEVBMzYzQkI4NjM3RTRCQTYzQ0U5NkM1OEVCNUM1NTkwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBSGiqueWPb+zZPL50qi1yZNn
tUKxYCi4a67PpZidWbrX8CPJQJVlLm7f1ECtB+JSPW1tLYyICURMypSIZOPoh+fl
lLwuJBo3e6eHgDGY6Z3HaSbKHDUTS2DgZlHHNDfyCmnn9yxfxNCGy/9tsMZeqEwF
nOKUPZ/WFsvH+C35uN/dIjbxH2TC63RdouFL7HbhEic2ef5fnm7HlWlKreSUnxbZ
8LAycNl3BYGPGSp0zR0+OJGe8ck1i5HsSz4ac3THKgIjW8x5dgc2Ros75INGMnKz
mW/FRIDFynoL/tm2jemdu8i3mL70kDCQGf6QGLu0IXApA0Ug+GOkjTaSm19BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5Nng6jY7uGN+S6Y86WxY61xVkF8wHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9cYUwDQYJKoZIhvcNAQELBQADggEBAGHyL5I7
ejSKdle9EUV0eR5dA+GBY+IQz5mi6L8rrbEV2a5GBh45wl9R9eE/XXsJ9VqPm7N3
AZ/XZMj22AdviRbCKoCOQfxdw3zJQ22LnYW5sUSemX00IYM34y4iWovKi0DT7T6a
K/uGjA6Oy+aatF52FQVoqV8nbwU+CwdjTtHkSoA12r/6gPmOfwdLbgzty2/lm5uH
J7v/iM2vzQz17iSwQKkhovWrjei/XjrvvgvocCvlnuG9AN2ZfvR0REVx9LFf6O+G
at6A+I+VXV4RPoLDru+TOjUeETsZPaoTtCaorwo1vZeE6UI5iK/PgsOF/rHavoUs
wp/b/Mxn4EaYfEU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:24 2025 by rpki-client