This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32342d3234203d3e203532393234.roa
File: 3138392e3132372e3133342e302f32342d3234203d3e203532393234.roa (raw, json)
Hash identifier: Ha41o4QLeFOxogSCav13/UtfazH51Vfl8BIvIjl5t8E=
Subject key identifier: 5B:B7:59:04:45:EC:28:5A:6D:0F:98:57:9E:6C:EB:FB:DB:03:40:3B
Certificate issuer: /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial: 6FE2EC844D7AD2C4A4FA3AEC8619EF9AC97B2046
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32342d3234203d3e203532393234.roa
Signing time: Thu 13 Nov 2025 19:35:24 +0000
ROA not before: Thu 13 Nov 2025 19:30:24 +0000
ROA not after: Thu 12 Nov 2026 19:35:24 +0000
asID: 52924
IP address blocks: 189.127.134.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e2:ec:84:4d:7a:d2:c4:a4:fa:3a:ec:86:19:ef:9a:c9:7b:20:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Validity
Not Before: Nov 13 19:30:24 2025 GMT
Not After : Nov 12 19:35:24 2026 GMT
Subject: CN=5BB7590445EC285A6D0F98579E6CEBFBDB03403B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:67:d1:56:96:10:7d:1e:c5:ed:b6:74:76:
17:bb:46:9b:2f:17:8e:35:93:d9:e2:a8:3d:46:f1:
40:69:0e:8c:56:fc:c1:a5:92:95:83:8c:af:0c:80:
df:08:ac:83:bd:6c:11:68:36:aa:60:a4:b7:f6:f4:
49:06:9e:4a:a7:42:87:4c:72:d1:03:ca:a4:98:26:
6f:03:56:e5:f0:47:ec:b1:8d:b8:e6:ee:25:6e:96:
e7:88:e3:08:8b:ed:7a:f3:e5:41:24:01:56:b1:0d:
fc:1f:83:2e:17:97:55:e0:01:1f:39:79:29:ee:03:
42:7d:a0:9f:60:ed:a2:41:c8:7b:92:10:d5:db:ee:
10:31:6c:d6:ab:fc:e1:4b:2b:df:74:66:9a:f5:3d:
b5:e2:dd:ee:83:44:14:75:19:84:46:03:59:74:18:
aa:87:9d:21:7e:9e:57:91:79:0d:0b:7a:b3:fc:f7:
f3:ab:d8:e4:e3:b5:71:34:f6:19:fb:03:4d:57:8e:
a5:5f:0b:42:5f:e7:e7:f7:45:a3:00:84:1a:b5:41:
32:4c:c2:d1:7c:1e:a1:4d:e6:5b:9a:1d:40:8e:e9:
fb:08:aa:e8:bd:c6:d2:7c:d4:ee:07:2f:6a:c5:11:
3d:49:f2:c4:10:85:79:d4:d9:b6:d6:8d:15:50:fc:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B7:59:04:45:EC:28:5A:6D:0F:98:57:9E:6C:EB:FB:DB:03:40:3B
X509v3 Authority Key Identifier:
keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32342d3234203d3e203532393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.134.0/24
Signature Algorithm: sha256WithRSAEncryption
51:82:af:28:56:87:99:f7:1b:61:be:bd:e3:68:36:e7:17:74:
28:ef:96:e3:a6:05:6d:b5:a3:8c:46:2f:af:70:36:19:42:23:
d1:88:a9:c3:80:77:e5:ae:7e:b0:3d:28:20:54:3b:d8:51:0e:
04:4f:fe:57:19:87:d3:f0:75:5b:cc:88:64:a8:5a:f8:b1:1a:
c5:e5:ab:e0:6b:12:96:5b:8c:69:7c:fe:ea:92:33:60:3f:cd:
b5:c6:29:bd:3e:a2:61:cf:66:51:a3:86:16:7f:0e:b7:16:49:
af:60:6d:15:c0:e8:79:7a:23:e3:7f:01:f0:26:1a:64:14:09:
b9:ea:25:16:40:fa:57:7e:88:1b:0f:2f:8c:58:dc:9d:5d:33:
31:fa:22:af:38:f5:0d:22:ec:0d:9a:3a:36:88:64:53:11:10:
fe:c8:8d:c6:7f:9c:15:f7:24:30:c5:ab:2b:03:27:ce:79:18:
e2:16:d6:5a:46:63:56:8f:54:9b:c1:48:6c:01:c1:99:d7:31:
97:35:85:4d:bb:50:b5:b3:cf:53:4d:eb:8d:2e:6f:6e:f5:5e:
48:f3:f9:c3:22:ba:18:cb:a1:2e:0c:01:68:7b:8f:3c:20:12:
35:ca:b7:4b:b3:c2:b5:c0:59:38:3c:87:22:e7:75:dd:6e:d9:
b5:f4:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:18:15 2025 by rpki-client