This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa
File: 3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa (raw, json)
Hash identifier: nP/kQj4ExAFNRH6D4oBVROA94HHdeISGjbPmntvQJNQ=
Subject key identifier: DC:52:7F:EB:2A:36:43:2B:F4:D9:4B:EA:50:8F:2E:BC:26:4D:59:1A
Certificate issuer: /CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Certificate serial: 617BE1D3359891B49D36189DAB0C6B31D2420BAD
Authority key identifier: D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa
Signing time: Wed 03 Dec 2025 17:37:25 +0000
ROA not before: Wed 03 Dec 2025 17:32:25 +0000
ROA not after: Wed 02 Dec 2026 17:37:25 +0000
asID: 61649
IP address blocks: 131.100.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 17:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7b:e1:d3:35:98:91:b4:9d:36:18:9d:ab:0c:6b:31:d2:42:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Validity
Not Before: Dec 3 17:32:25 2025 GMT
Not After : Dec 2 17:37:25 2026 GMT
Subject: CN=DC527FEB2A36432BF4D94BEA508F2EBC264D591A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:0b:db:29:13:dc:52:0e:92:a2:fd:d3:ca:
b8:1a:ce:be:f4:61:30:cb:05:93:59:92:4a:d5:f3:
43:04:ca:1a:87:50:85:05:68:77:17:4a:42:71:d5:
f5:fc:90:71:5e:9f:a8:89:db:dc:a1:53:c5:5e:ec:
32:da:71:db:00:5c:e3:dc:0c:2c:30:fe:71:36:7d:
f9:af:6c:04:d6:3b:e2:24:26:3c:b1:e4:28:d4:fe:
e2:5d:9b:f2:d0:ba:86:1a:43:47:70:2d:d5:8e:eb:
91:a8:d2:13:24:13:60:0b:e9:bf:9c:b1:77:ff:03:
56:22:fc:2a:b8:8a:6a:3a:ca:c1:79:6b:86:cd:ba:
a7:95:19:62:d9:55:c0:d0:ea:51:ba:53:0e:4b:f0:
14:18:89:e7:53:7e:75:fd:68:57:5b:24:b7:43:5a:
36:04:ef:65:06:49:c9:26:bd:a2:c0:be:cf:d5:80:
bf:98:51:17:c0:81:59:73:38:33:f3:b4:63:45:ff:
34:4c:a4:f8:c9:65:17:fa:59:f5:8e:79:ab:f1:af:
7b:d6:11:9f:b4:a2:9d:17:aa:6a:a5:a5:89:26:49:
f5:31:16:b0:48:55:fb:1a:66:49:00:53:bb:4d:fa:
2f:19:d4:46:f7:9e:3a:53:30:7e:6c:a6:22:d5:2e:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:7F:EB:2A:36:43:2B:F4:D9:4B:EA:50:8F:2E:BC:26:4D:59:1A
X509v3 Authority Key Identifier:
keyid:D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.188.0/22
Signature Algorithm: sha256WithRSAEncryption
33:7f:90:50:a9:d7:7c:c8:5e:99:99:5b:8a:e6:4f:e5:98:b8:
31:56:c4:7c:57:32:af:ba:8f:2a:10:d6:39:2b:59:2d:69:84:
1a:09:be:f7:87:f0:55:22:92:fd:5b:78:c5:8e:a4:89:2b:2b:
36:73:4a:df:72:ca:ad:81:62:2c:9f:c2:c6:31:a3:c2:a2:7c:
c9:6d:3b:74:64:31:ee:67:a6:87:c6:d4:04:64:8e:44:2f:92:
97:94:d9:a5:dc:d6:d0:01:1d:e4:89:4c:83:50:ad:a4:da:c8:
44:c2:f9:a8:35:a2:8e:c9:9b:aa:29:44:26:fd:1a:62:d3:6d:
2a:17:69:48:f2:b6:ff:3e:fc:11:0d:c0:a7:5d:6c:63:5b:15:
ed:bc:c8:3a:cc:d1:18:61:34:29:08:84:3e:34:6d:b5:78:90:
ef:bc:e9:a8:18:7c:64:5a:b1:5d:b3:d1:ad:8a:67:49:e3:43:
76:e0:11:7b:5d:b3:d8:db:af:df:e6:d2:64:4e:cd:07:76:f4:
f1:11:bf:c9:03:14:14:21:93:36:59:64:9c:26:dd:d9:4f:ad:
df:f2:a0:83:60:fe:e0:a8:36:3b:58:2b:38:7b:9c:6a:06:5c:
58:44:73:96:44:c6:3c:d4:c9:84:e3:9a:3e:3a:00:55:e3:99:
af:71:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:17 2025 by rpki-client