This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134302e302f32342d3234203d3e203532363632.roa
File: 3138392e3131332e3134302e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier: bzFyDbFJ9AoswVBly17/MCYOT/OS9I3Ceox89m3F+es=
Subject key identifier: 7D:B8:AD:B3:27:D6:D1:37:92:34:3D:B1:99:F6:8A:37:1C:18:24:5C
Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial: 0FBEA2F65DA44CB7C6D3E89FE83DE18A155358D5
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134302e302f32342d3234203d3e203532363632.roa
Signing time: Tue 25 Nov 2025 17:17:58 +0000
ROA not before: Tue 25 Nov 2025 17:12:58 +0000
ROA not after: Tue 24 Nov 2026 17:17:58 +0000
asID: 52662
IP address blocks: 189.113.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:be:a2:f6:5d:a4:4c:b7:c6:d3:e8:9f:e8:3d:e1:8a:15:53:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Validity
Not Before: Nov 25 17:12:58 2025 GMT
Not After : Nov 24 17:17:58 2026 GMT
Subject: CN=7DB8ADB327D6D13792343DB199F68A371C18245C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:0c:6e:e3:9f:ea:d8:35:d8:54:62:5e:79:
df:bd:42:a0:1b:d4:60:16:59:08:cb:fb:b3:d0:df:
dc:23:44:20:4d:04:c3:02:09:f6:c9:7c:19:6a:f9:
ce:d7:2e:4b:e6:eb:10:34:13:19:13:b4:2a:e4:b8:
f3:12:7e:e5:78:c9:d5:4c:5d:c8:38:58:2e:38:27:
91:6e:bf:54:fd:97:3d:26:df:c5:3c:eb:4e:de:6a:
89:65:96:90:bc:07:f0:5f:84:e5:b5:99:32:21:cd:
c4:5c:80:0b:c2:6c:14:1f:4b:b8:b0:f1:e4:87:4a:
01:61:a7:e4:a8:55:ee:00:f9:82:49:46:e2:ba:ed:
73:5b:ce:a9:64:3c:18:c8:f6:c7:43:4f:da:a1:a6:
29:f0:c5:0f:35:a2:f9:39:ac:29:74:7a:2c:c3:28:
f6:47:fc:9d:d6:b3:83:d8:83:60:17:bd:b0:c4:de:
a9:14:ae:2c:6e:d6:57:eb:6b:a0:c4:f3:75:af:6b:
07:72:67:04:06:c0:2c:43:61:36:bd:e9:9d:9b:17:
ad:44:5a:85:79:36:14:b4:93:43:31:02:26:66:5f:
86:61:e8:af:fc:c9:fe:e9:52:e0:fb:06:a1:fd:06:
4b:86:3b:6a:47:96:65:25:4d:1b:95:49:b8:b0:6c:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B8:AD:B3:27:D6:D1:37:92:34:3D:B1:99:F6:8A:37:1C:18:24:5C
X509v3 Authority Key Identifier:
keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134302e302f32342d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.113.140.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:fb:ac:8d:72:b4:f5:cb:d9:17:8d:04:02:6a:28:29:13:ae:
f1:e1:5c:84:4f:87:3f:07:27:89:b3:aa:65:30:11:91:ae:24:
73:c6:c4:4a:aa:61:70:ea:b9:93:96:1e:0a:3e:ed:fb:a9:4f:
76:07:9c:81:0f:a0:41:2c:b8:a5:1b:b8:b6:d7:a2:35:67:fd:
e6:03:03:c9:21:3f:f8:a4:ff:c4:8c:67:2a:5d:98:70:e1:cf:
95:34:72:be:73:2b:c3:ee:4f:ca:8c:44:29:07:49:dd:4c:11:
78:ae:30:5b:e8:06:3c:24:16:84:af:b9:df:f1:6a:84:64:e8:
8e:06:09:94:54:b6:93:bd:7c:a8:42:21:d0:8c:bb:57:38:86:
ad:79:2d:8b:48:23:ed:bf:49:85:9f:cb:62:9c:cd:b2:ab:99:
8a:90:6b:f7:9b:40:97:76:53:26:2f:c2:a2:ea:6c:8a:b9:06:
30:11:47:b0:12:b6:d7:93:df:8d:63:ea:df:15:68:50:3e:3d:
eb:45:52:38:be:21:53:75:68:c6:5a:db:6e:e6:fb:44:9d:c8:
f7:cf:6b:78:ca:79:f7:1d:99:7f:97:4d:f0:69:7b:c2:27:23:
08:c0:12:a7:ab:e1:9a:19:ea:28:cb:b2:9d:0b:c9:fd:a6:15:
ee:64:9b:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD76i9l2kTLfG0+if6D3hihVTWNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNTExMjUxNzEyNThaFw0yNjExMjQxNzE3NThaMDMxMTAvBgNV
BAMTKDdEQjhBREIzMjdENkQxMzc5MjM0M0RCMTk5RjY4QTM3MUMxODI0NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXwxu45/q2DXYVGJeed+9QqAb
1GAWWQjL+7PQ39wjRCBNBMMCCfbJfBlq+c7XLkvm6xA0ExkTtCrkuPMSfuV4ydVM
Xcg4WC44J5Fuv1T9lz0m38U8607eaolllpC8B/BfhOW1mTIhzcRcgAvCbBQfS7iw
8eSHSgFhp+SoVe4A+YJJRuK67XNbzqlkPBjI9sdDT9qhpinwxQ81ovk5rCl0eizD
KPZH/J3Ws4PYg2AXvbDE3qkUrixu1lfra6DE83WvawdyZwQGwCxDYTa96Z2bF61E
WoV5NhS0k0MxAiZmX4Zh6K/8yf7pUuD7BqH9BkuGO2pHlmUlTRuVSbiwbK1hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfbitsyfW0TeSND2xmfaKNxwYJFwwHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9cYwwDQYJKoZIhvcNAQELBQADggEBAMP7rI1y
tPXL2ReNBAJqKCkTrvHhXIRPhz8HJ4mzqmUwEZGuJHPGxEqqYXDquZOWHgo+7fup
T3YHnIEPoEEsuKUbuLbXojVn/eYDA8khP/ik/8SMZypdmHDhz5U0cr5zK8PuT8qM
RCkHSd1MEXiuMFvoBjwkFoSvud/xaoRk6I4GCZRUtpO9fKhCIdCMu1c4hq15LYtI
I+2/SYWfy2KczbKrmYqQa/ebQJd2UyYvwqLqbIq5BjARR7AStteT341j6t8VaFA+
PetFUji+IVN1aMZa227m+0SdyPfPa3jKefcdmX+XTfBpe8InIwjAEqer4ZoZ6ijL
sp0Lyf2mFe5km4s=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:16 2025 by rpki-client