This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32332d3233203d3e203532393234.roa
File: 3138392e3132372e3133342e302f32332d3233203d3e203532393234.roa (raw, json)
Hash identifier: 4AymOpaqnZgoeDoPTGbOhyNKKP5N0JBBb4dOLInsLTg=
Subject key identifier: 54:65:FB:9C:82:67:D1:78:AA:56:D5:52:64:A6:CA:A6:78:47:28:BA
Certificate issuer: /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial: 34479ED5C0826598BBE586839FD38528D4C3DC6B
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32332d3233203d3e203532393234.roa
Signing time: Thu 13 Nov 2025 19:35:30 +0000
ROA not before: Thu 13 Nov 2025 19:30:30 +0000
ROA not after: Thu 12 Nov 2026 19:35:30 +0000
asID: 52924
IP address blocks: 189.127.134.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:47:9e:d5:c0:82:65:98:bb:e5:86:83:9f:d3:85:28:d4:c3:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Validity
Not Before: Nov 13 19:30:30 2025 GMT
Not After : Nov 12 19:35:30 2026 GMT
Subject: CN=5465FB9C8267D178AA56D55264A6CAA6784728BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:0d:a0:0a:35:3d:9c:0f:2b:83:64:af:63:
28:61:10:4c:40:5a:e3:f2:4e:4e:d1:e0:b9:02:e8:
fa:d7:10:04:a6:6d:20:2b:cf:d4:94:c6:11:c8:37:
82:52:b2:fe:e0:7a:ca:2b:9f:6b:08:2a:06:f6:49:
75:e8:b3:26:07:ef:64:04:3e:96:cd:f7:47:6d:48:
ee:35:d0:61:8a:17:d4:15:72:21:ae:9c:1e:30:a5:
5b:38:1e:fc:93:73:a6:19:4b:f0:dc:29:11:1d:42:
83:27:78:a5:98:57:93:03:8d:8a:37:07:b0:ba:01:
31:0d:23:41:de:cd:20:d5:1f:c9:bb:7b:f2:34:25:
ff:df:5d:4d:4c:4b:55:f6:e1:97:02:9a:57:52:dd:
87:be:e8:25:1f:46:c4:45:b5:1d:03:33:54:42:9a:
86:90:24:87:b8:31:aa:f0:e4:c4:98:0d:a9:4d:40:
41:19:3a:a7:3c:4f:cc:f1:80:ab:0b:59:36:2c:4a:
39:cc:28:c1:3d:0f:25:65:37:2a:9a:ce:54:22:c2:
c4:ca:cf:74:a2:1c:fd:00:ce:1f:1b:14:35:b4:de:
ba:9b:04:49:fc:4e:6d:a1:0c:82:d1:bb:e6:15:95:
4f:8a:f3:51:46:7c:0e:9d:b6:18:66:4c:6f:27:58:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:FB:9C:82:67:D1:78:AA:56:D5:52:64:A6:CA:A6:78:47:28:BA
X509v3 Authority Key Identifier:
keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32332d3233203d3e203532393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.134.0/23
Signature Algorithm: sha256WithRSAEncryption
74:e6:e1:1c:65:e8:4e:5e:8c:26:d1:98:2d:82:da:38:24:c4:
fb:fa:c2:94:e1:a9:d6:e6:6c:ff:a4:9b:25:8b:b4:b8:d2:9b:
b3:b5:7e:49:34:36:76:c0:fd:84:d8:24:f1:8c:38:28:3c:fb:
6a:ac:a6:f4:90:28:d0:9c:a5:ec:d8:03:c3:51:4a:6c:dc:6b:
11:1f:8a:7a:2e:7d:da:d1:ce:05:a6:99:d7:7f:c7:8e:74:2c:
56:cb:79:68:fd:31:38:a4:70:13:0f:0f:d2:3b:23:03:78:19:
c0:eb:37:48:dd:d5:fd:60:b9:08:d8:f5:93:68:d8:cf:38:ad:
20:a9:f2:5c:59:5b:3c:4b:f3:db:39:9f:e8:ec:6b:5d:fe:42:
9e:05:b4:b4:c0:3b:4f:60:96:53:ea:88:41:ca:22:04:6f:63:
d1:8e:b0:92:24:97:bf:77:92:9b:98:38:d0:5f:82:dd:e3:02:
9f:89:38:be:9e:17:ad:3d:58:6b:06:a4:bf:bb:e0:3f:0d:82:
2b:d8:f1:e0:fc:9e:c3:b5:90:a5:3c:7e:83:86:c9:69:9f:11:
f6:f2:c5:8f:df:b4:dc:4c:71:70:30:a8:5a:d4:fd:7a:80:ac:
fb:06:71:c9:e2:91:7b:5f:f6:0a:cc:25:85:e9:ec:4e:3c:3f:
38:ee:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:25 2025 by rpki-client