This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa
File: 3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa (raw, json)
Hash identifier: 0Qps8lTeSMgPQLfJttu2yKlzv4oiNaigSM9UbRc5TRo=
Subject key identifier: 04:52:0E:48:B0:EF:1A:40:BD:44:72:74:87:E2:54:AF:C3:61:43:95
Certificate issuer: /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Certificate serial: 3D8245BB7237E22D34BB511918BFDF5B4692293F
Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa
Signing time: Thu 20 Nov 2025 22:56:46 +0000
ROA not before: Thu 20 Nov 2025 22:51:46 +0000
ROA not after: Thu 19 Nov 2026 22:56:46 +0000
asID: 52561
IP address blocks: 186.227.120.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 05:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:82:45:bb:72:37:e2:2d:34:bb:51:19:18:bf:df:5b:46:92:29:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Validity
Not Before: Nov 20 22:51:46 2025 GMT
Not After : Nov 19 22:56:46 2026 GMT
Subject: CN=04520E48B0EF1A40BD44727487E254AFC3614395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d7:c7:75:54:7d:dc:1b:57:56:60:d6:56:0a:
bc:a9:e5:87:e7:cf:9d:99:25:7a:b2:74:0a:2a:ae:
ef:f6:61:f1:05:d0:78:55:e6:44:d4:f9:29:26:61:
bc:db:13:c9:0f:9a:c8:32:09:95:e9:cc:03:0c:d2:
6f:bc:f8:9b:ab:0c:88:34:e3:1a:c1:bd:a1:26:da:
80:d7:31:21:6b:ae:9a:47:8f:be:32:a1:04:b4:76:
fa:29:cb:9d:5e:e0:c0:17:9c:28:16:bc:e6:a1:c6:
7c:bd:2f:c6:e8:4c:b1:1b:b1:ca:ba:a4:d2:0b:1e:
dd:3d:6b:44:85:d2:b8:00:ed:ee:39:8f:ab:bc:86:
dc:c1:90:19:ae:d2:7b:8e:cc:d3:0c:59:55:25:00:
2d:d6:42:dd:13:c9:c3:7f:be:c4:b6:a5:94:6c:0a:
69:2a:f9:47:eb:f9:22:b1:85:9d:5c:a0:2d:15:e3:
d3:02:25:68:5d:0a:7a:be:38:37:a4:57:23:87:81:
fd:22:a1:a3:a4:9a:32:12:e8:ae:ce:b6:d2:d8:d2:
1a:d0:95:95:74:7b:b3:3a:16:b7:a1:ea:ba:12:8f:
3e:b7:82:2f:d0:4e:d7:fd:7b:a5:d7:07:69:12:c4:
d7:8f:fd:e8:3c:1d:24:02:63:e2:27:0a:10:6a:47:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:0E:48:B0:EF:1A:40:BD:44:72:74:87:E2:54:AF:C3:61:43:95
X509v3 Authority Key Identifier:
keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.227.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:9f:de:b9:4d:df:a4:77:59:48:c6:23:3f:8f:9a:75:d9:d5:
c0:8e:5d:0f:3d:c1:1d:14:d8:03:26:97:e0:a8:26:07:1e:32:
05:5b:74:c3:fe:ac:61:7c:ce:5b:91:55:f2:54:79:a8:87:98:
89:40:9c:e7:52:50:ea:16:02:1b:29:a6:c0:78:2f:c3:e9:75:
a0:d0:c7:a3:b0:fb:8d:44:1d:a7:b2:ce:a4:eb:f1:84:c4:a3:
1d:e0:9a:7c:f4:4d:d7:b4:d3:1f:1b:8e:49:1b:0e:42:ff:38:
5b:ff:cd:9f:b4:18:ec:51:0c:76:5d:92:20:ad:7b:12:89:c3:
c7:20:98:35:45:44:ff:fc:8a:8e:47:1c:57:0e:3a:5b:60:e1:
fc:1f:ff:4f:f6:32:6f:eb:57:19:ad:12:e3:2c:f4:cf:5e:e2:
67:e9:d1:d0:63:b9:9c:27:3c:27:90:b4:b5:67:9b:66:03:45:
31:f5:5c:8f:a0:0e:de:1c:c8:d2:8b:c6:53:65:31:58:18:4d:
6b:c7:c1:de:33:01:50:f8:f8:be:d9:41:34:43:35:51:32:b7:
43:35:22:6d:00:f3:0b:31:34:73:7f:a6:e4:e3:46:f3:ca:a7:
8b:a5:45:58:1d:52:e2:53:fa:4f:98:40:5d:b6:74:18:25:28:
3f:cb:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:20 2025 by rpki-client