This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa
File: 3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa (raw, json)
Hash identifier: WD2chNcwbg2S0mjWpkaYDFB2ew5LZCsUkfIVEmMzl2k=
Subject key identifier: FD:63:C0:67:45:06:18:65:3F:25:D1:16:5B:B9:4C:6B:59:8D:6B:3D
Certificate issuer: /CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
Certificate serial: 34525EE6E19D3AB64DD0BB0A0350E0819F161249
Authority key identifier: 54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa
Signing time: Sat 01 Nov 2025 01:02:38 +0000
ROA not before: Sat 01 Nov 2025 00:57:38 +0000
ROA not after: Sat 31 Oct 2026 01:02:38 +0000
asID: 264075
IP address blocks: 143.208.20.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:52:5e:e6:e1:9d:3a:b6:4d:d0:bb:0a:03:50:e0:81:9f:16:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
Validity
Not Before: Nov 1 00:57:38 2025 GMT
Not After : Oct 31 01:02:38 2026 GMT
Subject: CN=FD63C067450618653F25D1165BB94C6B598D6B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:28:7f:34:4a:87:5e:4b:05:ed:6a:69:63:
5d:c0:b7:58:a8:e1:b2:e7:ab:45:c7:d5:60:57:52:
b2:94:1e:52:ac:4b:54:10:e0:f3:82:f5:58:f4:a8:
79:1a:ae:e0:d1:ca:0a:12:2a:85:5f:47:ef:a8:a7:
54:e2:3b:9c:4a:d9:c4:ab:06:5b:c9:1f:30:c8:a9:
84:6b:a4:24:16:6a:0c:87:ce:4d:9d:39:c2:01:56:
de:b9:fb:71:ea:32:43:6a:4d:d2:ff:b6:58:26:9d:
cd:0a:12:24:44:07:bb:b2:5f:d4:36:ef:0b:4c:4f:
c6:cf:24:a2:59:c8:cb:fe:1f:7a:9e:9f:70:57:75:
3d:9f:9b:dd:95:73:a3:e6:6c:b2:7b:df:ce:93:9c:
62:0f:55:63:71:a0:02:ea:74:4e:9a:b0:b5:11:e8:
e6:ab:a6:05:7f:49:d5:e3:d5:c4:29:0d:5d:1f:18:
4a:79:bc:82:2b:bc:19:8e:f2:97:13:3d:98:2b:8c:
32:41:a4:62:21:0d:b9:54:41:53:57:ec:5b:f2:ed:
07:a9:9d:34:93:dd:c4:e6:a5:d5:18:9d:c1:82:b2:
9c:90:bf:be:25:d9:36:1e:06:03:ca:e5:2d:5f:bc:
5b:aa:42:cd:51:e6:9b:91:ce:85:e1:c2:d1:fb:6b:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:63:C0:67:45:06:18:65:3F:25:D1:16:5B:B9:4C:6B:59:8D:6B:3D
X509v3 Authority Key Identifier:
keyid:54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.20.0/22
Signature Algorithm: sha256WithRSAEncryption
53:32:db:47:b0:ec:2a:fd:42:84:43:8e:6a:b6:ec:44:07:a7:
60:fb:99:4f:2b:2f:c1:77:d4:cb:1f:02:dd:2b:9b:2e:25:12:
8a:52:52:06:30:41:e5:be:34:e1:a7:f7:c8:50:c3:a6:e3:bb:
0d:43:10:32:c0:df:37:21:81:2f:39:32:af:76:d0:c4:60:db:
a6:e3:83:81:b9:b1:b5:03:e4:32:69:70:a2:9b:02:85:72:11:
1d:3a:e5:df:bf:92:ae:86:95:5f:3f:d9:8e:ad:33:93:06:35:
ed:e1:bd:d9:70:5b:6b:4e:89:d1:14:8e:81:33:49:de:eb:3b:
03:3b:5e:db:86:72:44:ed:2c:e3:aa:f5:fa:23:de:9e:10:d0:
41:3b:39:3b:a1:df:14:71:d3:bf:79:75:1d:12:1c:7c:b8:44:
0e:04:73:b0:03:73:39:98:05:1a:a3:1f:00:4f:f1:31:06:e8:
9f:cc:3b:95:e7:44:81:51:28:c2:63:3b:8c:09:4a:26:4a:23:
1d:cb:94:bd:58:aa:7e:19:1b:31:bb:92:6c:4a:9a:a7:0a:01:
f4:94:a0:99:ae:8a:43:1e:d7:0a:a7:69:94:68:42:1e:b9:e5:
54:ab:c2:bf:16:77:6c:0e:48:e1:36:68:31:94:ee:29:6f:5b:
68:f2:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:49 2025 by rpki-client