This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa
File: 3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier: ZtO47TYqSzG1Wl4snmXsmW1ipHgHNj3CY4EgxIJRIoI=
Subject key identifier: B7:75:8C:45:41:40:22:37:B6:77:DC:8E:18:3D:93:B9:04:C6:54:71
Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Certificate serial: 21F8A3EE5A9B011E8A75FE3B5683583CCD267EB3
Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa
Signing time: Mon 10 Nov 2025 18:38:35 +0000
ROA not before: Mon 10 Nov 2025 18:33:35 +0000
ROA not after: Mon 09 Nov 2026 18:38:35 +0000
asID: 263059
IP address blocks: 186.232.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 11:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f8:a3:ee:5a:9b:01:1e:8a:75:fe:3b:56:83:58:3c:cd:26:7e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Validity
Not Before: Nov 10 18:33:35 2025 GMT
Not After : Nov 9 18:38:35 2026 GMT
Subject: CN=B7758C4541402237B677DC8E183D93B904C65471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:e3:c5:ff:fc:21:37:be:49:7d:c7:4e:e8:
0f:3f:1f:97:00:74:2b:90:77:dd:14:60:62:6f:20:
c0:54:32:db:c2:b0:88:54:cb:30:32:e2:70:6b:b0:
25:b5:eb:14:e4:30:4a:bb:ca:4b:aa:32:ae:ea:a9:
67:4e:3c:51:ba:5b:6d:59:3d:d3:47:69:49:94:d9:
c4:db:24:00:e9:b4:55:8e:13:d4:50:00:4b:01:d9:
60:3e:a1:5b:92:e7:8e:02:a7:20:e8:ce:39:fc:45:
b0:e5:06:09:a6:09:19:fd:99:48:b8:d5:a6:8d:c7:
b8:fa:d8:75:01:c9:98:1d:8b:8c:23:57:df:56:5b:
16:96:71:00:0b:10:2d:79:4c:57:23:88:d4:e9:94:
a6:69:23:a8:1f:75:5f:35:bb:c5:46:e8:d9:59:d1:
32:a3:ca:c4:43:f9:11:42:91:12:a3:f1:f1:82:ab:
e6:62:dd:41:24:b4:c1:d4:bb:0d:42:a7:9e:48:69:
bf:0c:8a:90:c9:50:ef:0b:a0:22:67:2f:a1:39:09:
3b:d3:9c:da:cd:3e:26:25:d4:7e:64:1e:ae:2c:d7:
a6:de:69:d3:41:71:6c:45:6e:bc:43:65:b2:91:65:
bf:ec:82:20:dd:16:76:04:2a:94:a7:d8:65:1c:e1:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:75:8C:45:41:40:22:37:B6:77:DC:8E:18:3D:93:B9:04:C6:54:71
X509v3 Authority Key Identifier:
keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32342d3234203d3e20323633303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.232.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d1:c2:30:30:cf:4e:44:71:02:6e:74:f8:f7:26:52:6c:00:
1b:5e:d9:2c:a0:65:57:4d:24:30:d5:51:5b:cb:1e:79:eb:5f:
a2:02:08:f5:39:2d:b9:75:cd:4d:85:c4:be:be:92:aa:ce:5d:
44:08:2f:3d:45:2c:d8:39:a0:a3:cd:0a:9a:36:20:1b:93:46:
b4:b3:38:c2:ed:3b:5e:ff:be:18:8c:a8:b2:bf:82:85:f1:4c:
b8:1e:b1:89:fc:0b:1e:9c:3b:e1:0b:9b:f7:8d:7c:8f:b4:25:
57:b8:5e:43:fb:cf:8f:ba:03:08:f3:3f:73:62:d8:ab:b6:9f:
fb:7a:09:fb:d9:4c:c1:09:0c:75:f2:51:39:e1:f0:e1:4a:2f:
98:a4:da:3c:87:c9:75:ee:91:42:38:cb:ba:71:3a:9f:0d:0c:
1c:31:bb:1e:e9:b7:2f:45:86:08:f4:42:38:ef:b6:0b:de:00:
9e:db:b1:00:ff:14:ae:70:55:1d:ac:af:17:c5:e2:fb:9f:6c:
c4:db:f5:2e:a3:75:06:bf:e1:1a:5b:01:62:2f:61:87:10:9d:
99:31:02:77:6f:26:04:d8:4b:5b:34:21:82:ff:33:4d:c6:27:
ac:54:59:64:00:96:c9:a2:25:52:30:2a:eb:dd:34:de:35:a5:
e6:c0:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:39:11 2025 by rpki-client