This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133342e302f32332d3233203d3e203532363632.roa
File: 3138392e3131332e3133342e302f32332d3233203d3e203532363632.roa (raw, json)
Hash identifier: M9tmvfqWhNEYDQpI5nRg4LdPcFf0pfov/FVlGXTc5ZI=
Subject key identifier: 06:D7:3A:16:5E:2B:B0:E8:AA:8E:A0:21:EB:86:48:53:5E:BB:35:88
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 19ACE1F95F2455EBD68F7CEC1F75EB710578567C
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133342e302f32332d3233203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:59 +0000
ROA not before: Tue 25 Nov 2025 17:12:59 +0000
ROA not after: Tue 24 Nov 2026 17:17:59 +0000
asID: 52662
IP address blocks: 189.113.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ac:e1:f9:5f:24:55:eb:d6:8f:7c:ec:1f:75:eb:71:05:78:56:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:59 2025 GMT
Not After : Nov 24 17:17:59 2026 GMT
Subject: CN=06D73A165E2BB0E8AA8EA021EB8648535EBB3588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:ff:15:ab:95:66:4a:70:25:a4:fc:91:cf:
c3:6c:4a:bc:fd:e0:b3:8f:29:fc:32:7b:26:c5:65:
d3:8e:33:e0:ef:86:a3:a3:29:b8:43:d7:e0:1a:cd:
64:f1:41:56:21:0d:37:39:e3:16:e0:6f:26:94:ea:
ab:91:4e:c5:07:e5:a0:d3:d9:ae:46:f4:f8:bc:82:
c7:35:38:02:1f:1d:ff:8f:35:32:b7:05:cd:73:9f:
ba:8b:40:cb:7e:f1:17:bf:47:77:12:29:a2:62:e8:
ad:15:c2:a8:19:2b:47:5f:6e:bc:dd:81:02:89:4b:
c7:9d:c9:66:a9:72:b9:ce:5e:3b:e5:3f:ef:a4:dc:
74:e1:d7:82:40:63:69:08:8b:e8:f2:66:c2:34:ca:
34:80:12:23:b4:b8:f7:11:44:db:0b:3c:6d:ec:12:
bb:45:68:45:8c:f4:e6:66:a8:98:4a:7e:35:95:f9:
0d:5e:49:6d:43:95:30:f5:8a:92:b4:6c:a1:1b:0f:
fe:27:98:cb:1f:96:e9:79:96:42:e4:9e:c3:1d:ec:
27:e7:d1:2a:8b:5c:d6:4d:a5:c8:38:64:f2:1c:a4:
c0:67:af:79:da:02:a8:13:2d:68:44:8a:9c:85:3f:
ac:e9:d8:27:bc:56:d1:c9:1f:a8:f1:ba:01:13:8f:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:3A:16:5E:2B:B0:E8:AA:8E:A0:21:EB:86:48:53:5E:BB:35:88
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133342e302f32332d3233203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.134.0/23
Signature Algorithm: sha256WithRSAEncryption
99:75:7f:63:e4:10:8e:a6:e3:15:fe:34:1e:25:c2:2a:70:57:
21:2e:39:b9:3d:cb:fe:aa:18:ba:42:98:79:59:ae:9c:0c:98:
65:49:94:95:ac:0b:f1:24:c4:25:b3:24:e2:4c:15:50:13:2a:
3f:ca:93:59:47:53:bc:d9:2f:d7:b4:76:f1:3f:55:0e:36:25:
f2:ad:be:c5:66:2a:39:29:0f:22:38:b0:f6:1a:16:a1:33:cb:
e9:c7:06:78:7b:6f:cb:8c:bd:42:e0:dc:ab:f8:7f:7b:16:97:
3a:e2:d5:ec:0d:82:fe:86:88:f9:bd:5d:93:00:19:87:d4:48:
f5:9c:ea:e7:d0:87:9e:a0:97:45:b5:a9:6b:a1:55:4f:ac:35:
dc:40:50:e9:45:20:29:45:85:83:aa:45:f1:5f:3c:85:b5:7b:
d2:b2:7d:68:18:09:bd:72:77:84:73:23:ab:34:ec:81:b4:cc:
e8:b7:de:1f:08:0b:e1:79:4f:1b:cf:48:c6:b8:f6:65:ba:f3:
06:98:1e:fd:72:53:81:00:87:38:d1:cb:a4:68:d8:d8:be:92:
21:c7:20:21:37:99:d7:08:bb:35:43:7b:8d:db:ff:c3:2e:2c:
da:91:cf:71:2d:a2:b5:f0:dc:a2:fa:59:2e:db:6b:b9:e2:df:
cb:52:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:51 2025 by rpki-client