This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa
File: 3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier: Bh9A9kR+ax6XLaLep4i6aWAp2mnqVpeKUqGad1uP02s=
Subject key identifier: E6:05:BA:52:30:DA:C8:1F:18:34:03:1E:D4:BA:F9:0E:22:D1:1B:AF
Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Certificate serial: 4A4AB883740DFC8AA53FF46BDCA43406C753347F
Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa
Signing time: Mon 10 Nov 2025 18:38:38 +0000
ROA not before: Mon 10 Nov 2025 18:33:38 +0000
ROA not after: Mon 09 Nov 2026 18:38:38 +0000
asID: 263059
IP address blocks: 186.232.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 11:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4a:b8:83:74:0d:fc:8a:a5:3f:f4:6b:dc:a4:34:06:c7:53:34:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Validity
Not Before: Nov 10 18:33:38 2025 GMT
Not After : Nov 9 18:38:38 2026 GMT
Subject: CN=E605BA5230DAC81F1834031ED4BAF90E22D11BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:20:1d:1e:2a:0a:96:96:ea:9c:a0:af:af:
4d:7a:a2:88:2f:fa:ed:32:c0:49:3d:92:7d:dd:2b:
d3:7f:79:6f:ab:b4:e5:4f:79:f6:ba:5d:ce:b8:15:
5c:4f:9c:a7:58:3e:34:d5:19:e9:82:45:6a:bf:a2:
a8:9b:e3:04:54:5a:b8:ae:24:49:17:b0:41:a9:d2:
78:31:06:c7:ee:c8:1d:a1:40:9a:47:09:ed:f1:c0:
5c:ad:06:e8:20:4f:72:a3:c1:f5:c3:13:a8:8f:33:
df:b1:7c:6e:e5:61:d4:62:e5:64:03:a1:62:91:d4:
45:c5:7e:f2:f3:88:2e:91:5c:6e:a1:30:5e:40:ff:
c7:8f:fe:aa:64:d7:a0:f1:83:21:44:76:12:1b:5a:
1a:c4:11:41:29:03:13:43:18:4a:36:76:0b:2e:02:
13:18:51:5b:3e:00:81:d4:e2:1e:f5:89:cd:82:77:
b5:41:d5:04:41:a7:f8:f5:ae:5a:f4:b2:43:73:e5:
e3:5c:d8:57:51:0d:64:da:d5:69:22:e6:33:62:f9:
5e:2c:04:a2:a0:29:6f:1c:47:8c:5f:b7:da:94:6b:
11:0c:0e:99:a9:53:37:f9:d7:db:93:68:09:91:68:
a2:dc:9d:30:36:f9:1e:a3:35:2d:e8:ee:c5:15:9b:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:BA:52:30:DA:C8:1F:18:34:03:1E:D4:BA:F9:0E:22:D1:1B:AF
X509v3 Authority Key Identifier:
keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.232.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:53:6e:a0:a8:ae:1a:c0:94:ab:16:99:a3:51:2e:3f:28:ca:
bf:fb:85:bf:69:65:08:c5:be:dc:cb:7a:49:07:e9:34:c2:38:
5e:3e:3e:91:01:ad:77:74:ee:17:fa:b5:03:bb:8f:9f:f9:42:
2b:01:6d:80:44:6d:c2:2e:e5:95:22:ac:c5:f9:bc:98:91:58:
24:ec:b7:b4:44:1b:94:50:d9:e5:3b:03:4c:d9:82:2a:5d:29:
e9:91:ea:5d:2b:54:2b:d6:94:9f:c6:a4:38:f3:ea:ba:93:34:
d6:4a:4d:52:b8:7d:fd:bc:7e:21:87:35:c2:76:31:74:22:ff:
59:dc:25:63:bf:09:3f:bf:ec:9e:29:4b:c0:98:33:be:7c:5d:
25:62:fd:f7:54:f4:5a:3d:3a:f8:0d:3c:56:aa:5e:b3:fe:7c:
d7:c8:46:a5:d6:3f:b2:15:f0:96:79:51:2e:73:00:8a:5b:7b:
e7:e7:26:4a:59:a8:bb:ea:98:7b:19:00:c4:4a:0f:f4:bd:e1:
96:9c:34:84:87:16:b2:96:c0:5f:a4:29:c8:dd:65:88:b6:70:
1b:59:2d:11:6c:9c:4d:8c:a0:4d:88:ae:03:23:7c:96:09:83:
82:e0:44:5d:02:70:8b:71:5c:91:08:87:a8:e7:7e:73:a5:ce:
b6:8a:ff:f6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSkq4g3QN/IqlP/Rr3KQ0BsdTNH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG
QjdEMzlGMDAeFw0yNTExMTAxODMzMzhaFw0yNjExMDkxODM4MzhaMDMxMTAvBgNV
BAMTKEU2MDVCQTUyMzBEQUM4MUYxODM0MDMxRUQ0QkFGOTBFMjJEMTFCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RSAdHioKlpbqnKCvr016oogv
+u0ywEk9kn3dK9N/eW+rtOVPefa6Xc64FVxPnKdYPjTVGemCRWq/oqib4wRUWriu
JEkXsEGp0ngxBsfuyB2hQJpHCe3xwFytBuggT3KjwfXDE6iPM9+xfG7lYdRi5WQD
oWKR1EXFfvLziC6RXG6hMF5A/8eP/qpk16DxgyFEdhIbWhrEEUEpAxNDGEo2dgsu
AhMYUVs+AIHU4h71ic2Cd7VB1QRBp/j1rlr0skNz5eNc2FdRDWTa1Wki5jNi+V4s
BKKgKW8cR4xft9qUaxEMDpmpUzf519uTaAmRaKLcnTA2+R6jNS3o7sUVmwLhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5gW6UjDayB8YNAMe1Lr5DiLRG68wHwYDVR0j
BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE
MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzEzODM2MmUzMjMzMzIyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALronTANBgkqhkiG9w0BAQsFAAOCAQEAKlNu
oKiuGsCUqxaZo1EuPyjKv/uFv2llCMW+3Mt6SQfpNMI4Xj4+kQGtd3TuF/q1A7uP
n/lCKwFtgERtwi7llSKsxfm8mJFYJOy3tEQblFDZ5TsDTNmCKl0p6ZHqXStUK9aU
n8akOPPqupM01kpNUrh9/bx+IYc1wnYxdCL/WdwlY78JP7/snilLwJgzvnxdJWL9
91T0Wj06+A08Vqpes/5818hGpdY/shXwlnlRLnMAilt75+cmSlmou+qYexkAxEoP
9L3hlpw0hIcWspbAX6QpyN1liLZwG1ktEWycTYygTYiuAyN8lgmDguBEXQJwi3Fc
kQiHqOd+c6XOtor/9g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:26 2025 by rpki-client