This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa
File: 3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa (raw, json)
Hash identifier: h98CGJXalibsAC+M3HHTkeretTiKXBluC4yD1RVmY6Y=
Subject key identifier: EC:49:A8:12:85:ED:9C:D3:48:A1:99:88:09:EA:A4:01:5A:69:F4:88
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 559F47154F104ABD64E7C1CE08E68FD1178D7854
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:55 +0000
ROA not before: Tue 25 Nov 2025 17:12:55 +0000
ROA not after: Tue 24 Nov 2026 17:17:55 +0000
asID: 52662
IP address blocks: 189.113.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9f:47:15:4f:10:4a:bd:64:e7:c1:ce:08:e6:8f:d1:17:8d:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:55 2025 GMT
Not After : Nov 24 17:17:55 2026 GMT
Subject: CN=EC49A81285ED9CD348A1998809EAA4015A69F488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:41:0b:ab:48:00:ca:25:ef:40:5d:09:13:
ad:b0:b2:a4:74:55:3e:51:f2:d9:db:df:99:5d:ec:
34:c7:44:09:fc:1e:74:44:3f:7d:7b:9d:e5:e3:17:
33:3d:77:19:3c:4e:d0:e5:ba:f0:41:a1:9f:cc:00:
f0:38:4a:31:d1:8c:38:32:c6:7e:7f:cb:b7:56:83:
a5:2c:43:17:9f:46:29:20:ef:85:dc:b7:5e:07:ca:
34:11:7e:8d:74:a9:0c:e3:d8:ab:f4:0b:fe:27:98:
e5:8e:e4:46:4e:73:18:3e:f3:c5:b3:c7:23:c2:59:
75:3b:1f:2d:db:6d:8f:d4:3a:3e:91:41:38:a1:4c:
95:1b:36:ee:f1:94:36:04:27:1d:f3:34:e0:9c:c5:
83:28:8f:e3:61:07:9a:80:b4:b4:5c:8e:e2:eb:cd:
66:f5:4b:b1:dd:00:dd:99:42:05:32:58:ba:84:89:
e5:27:eb:db:a4:56:8b:cc:ef:8e:39:2f:43:a8:47:
16:a5:90:37:3c:6f:c4:eb:4b:7c:fa:e9:d3:d6:d8:
7e:da:71:14:f2:28:06:ad:96:d2:06:78:8c:06:2f:
f7:47:75:0e:c7:d1:e9:c7:b6:95:af:c6:34:a9:a1:
39:0a:aa:ef:f2:34:8e:6d:cd:ec:2e:42:bd:05:a7:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:A8:12:85:ED:9C:D3:48:A1:99:88:09:EA:A4:01:5A:69:F4:88
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:62:84:6e:ef:cc:6a:6f:18:0e:a4:af:fd:1c:3e:a3:1f:2f:
24:84:17:00:32:2f:a8:9c:19:63:15:7f:b6:49:50:8f:ef:9f:
c1:72:6c:69:9d:b1:4a:91:7e:cc:70:71:dc:d3:4d:cf:98:cf:
42:ce:8c:19:7d:33:4a:32:ec:44:1a:6f:cb:98:00:90:90:6d:
01:ee:19:68:a5:ef:b3:d4:47:75:78:c6:bd:80:77:08:ef:ac:
f6:90:fc:ad:8e:76:aa:70:d0:e2:93:6a:b7:09:f8:07:a4:86:
c6:c7:63:6d:9d:5c:f9:bf:c0:b2:12:19:b8:53:a7:c1:c9:11:
41:b4:13:bf:c2:11:cc:6e:4d:76:5d:85:42:c9:b2:ab:de:71:
7e:41:4a:b9:15:2e:f0:6b:8a:3a:aa:ea:ed:ab:44:27:00:d4:
b4:da:ed:a1:30:d8:5c:65:c5:a4:9b:10:52:2a:96:dd:bb:22:
48:e9:f5:f6:53:a1:99:b3:c5:f1:7f:46:22:c0:b9:b1:24:a8:
cc:f7:66:7b:4d:07:9d:8a:e5:00:53:97:22:b5:3b:9d:38:f2:
e3:ca:80:1d:d9:c7:f2:d1:20:ba:e7:1f:93:96:8b:af:c4:2b:
d7:97:a6:e8:d1:b0:24:0b:ab:8e:f4:1a:87:ac:49:e8:94:ce:
19:d4:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:14 2025 by rpki-client