This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32342d3234203d3e203532363632.roa
File: 3138392e3131332e3133362e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: wm8OqkDur4LC0Bl1yr1GYEtGR4SQrO8xFu1J4aX6u2E=
Subject key identifier: 1D:2E:98:9B:EA:41:20:1D:68:1D:56:81:AF:1A:C3:81:3E:58:DB:6B
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 1EAA9A3A8B70300938525A94CF01F7FB612C9573
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:59 +0000
ROA not before: Tue 25 Nov 2025 17:12:59 +0000
ROA not after: Tue 24 Nov 2026 17:17:59 +0000
asID: 52662
IP address blocks: 189.113.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:aa:9a:3a:8b:70:30:09:38:52:5a:94:cf:01:f7:fb:61:2c:95:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:59 2025 GMT
Not After : Nov 24 17:17:59 2026 GMT
Subject: CN=1D2E989BEA41201D681D5681AF1AC3813E58DB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:cf:7f:d0:0e:35:65:d4:37:c5:a5:ee:7c:
d6:8a:84:f6:35:8a:c4:48:e2:42:69:fc:ae:dd:b8:
9f:53:a9:0b:c0:77:ef:3d:44:ac:a5:e2:fd:38:03:
a9:b7:e1:d8:0b:0e:81:58:4a:99:d1:39:3c:18:c8:
fa:ad:df:f1:25:d8:3e:94:67:11:ed:28:a7:7e:a7:
c7:33:5c:51:e8:fe:77:19:93:ad:4b:78:fd:d4:3c:
92:18:56:30:b5:d0:e0:9e:27:ec:f4:07:31:3c:82:
87:73:ce:d4:1c:0f:e0:2e:37:bd:0d:19:ad:74:20:
cb:68:87:04:c4:0d:62:c9:6c:56:38:ae:4d:15:de:
33:cf:a1:5d:f2:9b:40:d2:0c:4d:0b:c8:7f:28:2b:
d4:e8:c0:83:13:e3:90:d1:24:f7:5b:4e:e4:47:47:
21:e7:51:ea:1e:ab:b1:43:86:48:82:c7:5b:33:30:
f4:84:33:77:50:06:b3:ce:8f:0f:d4:c8:0f:2f:4b:
03:1a:dc:52:fa:7a:50:61:2a:d3:15:df:cc:b3:63:
11:68:f1:49:2d:44:5e:e3:17:93:22:f0:1d:b9:55:
cb:74:19:0a:5b:1e:b0:46:25:7e:9b:ac:55:e7:4b:
8f:16:d6:a3:cd:6b:b1:ee:6f:eb:5f:b3:49:5d:00:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2E:98:9B:EA:41:20:1D:68:1D:56:81:AF:1A:C3:81:3E:58:DB:6B
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.136.0/24
Signature Algorithm: sha256WithRSAEncryption
68:79:6a:a5:b4:a4:9c:ff:77:e0:93:d1:a7:31:53:4b:ad:5e:
c6:5f:f1:02:ca:f2:76:a9:d6:75:56:0d:d7:29:f7:f0:3b:1e:
55:cd:bf:9a:c1:0a:24:0e:e4:2c:87:f1:d5:3e:6d:b3:9d:cf:
63:fb:fe:34:7c:e0:bc:bf:b0:ea:0c:e2:12:a0:83:09:4b:6e:
c4:d6:1e:ff:5d:f8:1b:a6:66:9c:f0:b7:8e:36:08:a2:dc:0f:
86:e9:12:d9:e7:2d:a7:01:b2:35:d4:2d:d5:4d:3b:78:47:0e:
ed:3f:c7:c2:d8:e5:ea:5b:ae:8c:b9:4c:31:ad:3d:41:ed:c2:
9f:9c:7b:fb:6b:bd:79:5a:b9:a6:9b:d5:1d:c9:da:6c:54:1f:
95:aa:f6:59:29:be:26:ef:fb:62:2b:a5:23:d8:46:0a:e8:18:
31:73:79:b9:e2:28:3a:ee:98:f2:32:15:09:60:63:dd:5c:de:
0b:f5:6e:17:be:88:c2:59:6d:a4:53:2d:c8:62:b3:21:fd:a1:
2e:55:51:8a:a1:66:43:a3:7a:7c:0e:66:87:ef:95:e4:b1:03:
35:0e:c4:87:9a:63:f3:4c:4a:72:e4:28:29:04:69:97:0c:63:
ea:90:53:2c:b3:3e:1c:8b:ea:8f:e9:a0:d0:4c:6a:f0:ad:0b:
ad:48:d8:2a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHqqaOotwMAk4UlqUzwH3+2EslXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNTExMjUxNzEyNTlaFw0yNjExMjQxNzE3NTlaMDMxMTAvBgNV
BAMTKDFEMkU5ODlCRUE0MTIwMUQ2ODFENTY4MUFGMUFDMzgxM0U1OERCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAs9/0A41ZdQ3xaXufNaKhPY1
isRI4kJp/K7duJ9TqQvAd+89RKyl4v04A6m34dgLDoFYSpnROTwYyPqt3/El2D6U
ZxHtKKd+p8czXFHo/ncZk61LeP3UPJIYVjC10OCeJ+z0BzE8godzztQcD+AuN70N
Ga10IMtohwTEDWLJbFY4rk0V3jPPoV3ym0DSDE0LyH8oK9TowIMT45DRJPdbTuRH
RyHnUeoeq7FDhkiCx1szMPSEM3dQBrPOjw/UyA8vSwMa3FL6elBhKtMV38yzYxFo
8UktRF7jF5Mi8B25Vct0GQpbHrBGJX6brFXnS48W1qPNa7Hub+tfs0ldAJinAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHS6Ym+pBIB1oHVaBrxrDgT5Y22swHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9cYgwDQYJKoZIhvcNAQELBQADggEBAGh5aqW0
pJz/d+CT0acxU0utXsZf8QLK8nap1nVWDdcp9/A7HlXNv5rBCiQO5CyH8dU+bbOd
z2P7/jR84Ly/sOoM4hKggwlLbsTWHv9d+BumZpzwt442CKLcD4bpEtnnLacBsjXU
LdVNO3hHDu0/x8LY5epbroy5TDGtPUHtwp+ce/trvXlauaab1R3J2mxUH5Wq9lkp
vibv+2IrpSPYRgroGDFzebniKDrumPIyFQlgY91c3gv1bhe+iMJZbaRTLchisyH9
oS5VUYqhZkOjenwOZofvleSxAzUOxIeaY/NMSnLkKCkEaZcMY+qQUyyzPhyL6o/p
oNBMavCtC61I2Co=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:26 2025 by rpki-client