This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
File: 3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier: htzHUUh4GtVoA10oDEZa0ofp3Cw8wDhlfcq+ZUyPRso=
Subject key identifier: 1B:AC:39:CC:63:72:3D:21:81:4A:F1:7E:16:FF:5E:5C:5F:32:3B:34
Certificate issuer: /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial: 363A0530AB6899D962252B8A67109069CC202218
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
Signing time: Mon 10 Nov 2025 13:47:33 +0000
ROA not before: Mon 10 Nov 2025 13:42:33 +0000
ROA not after: Mon 09 Nov 2026 13:47:33 +0000
asID: 265393
IP address blocks: 168.194.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 15:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3a:05:30:ab:68:99:d9:62:25:2b:8a:67:10:90:69:cc:20:22:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Validity
Not Before: Nov 10 13:42:33 2025 GMT
Not After : Nov 9 13:47:33 2026 GMT
Subject: CN=1BAC39CC63723D21814AF17E16FF5E5C5F323B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:5f:2d:fe:22:43:ac:00:62:9d:2a:f1:a6:
dc:20:48:7d:49:87:a1:e2:f0:cb:f5:61:7d:49:4f:
9e:02:2a:41:33:c8:2c:98:ff:3d:7d:92:0a:28:a7:
c6:48:e9:38:bb:3c:11:0b:41:1f:b4:cc:d3:7a:4e:
9e:f1:c4:f6:5e:e9:f8:47:ab:1c:84:de:28:8a:06:
d1:a2:70:bd:4e:9e:d9:40:35:2b:c0:74:67:68:33:
0d:77:16:7a:cf:6c:6c:f1:b6:5e:50:db:ec:b1:f2:
42:6d:91:5e:dd:ea:16:7a:5d:1b:d7:16:fd:28:4f:
0e:4a:25:37:8c:49:20:2e:0e:6a:9e:3d:c2:a1:55:
8e:df:96:bb:33:a6:99:5f:96:b5:6f:b9:b6:ab:66:
5a:50:ae:a4:a4:64:4a:f4:c5:38:8c:46:16:45:99:
b8:64:07:da:7b:84:3e:a6:1c:0a:35:e9:de:1b:ca:
73:19:86:fc:56:1f:e8:0f:5c:bf:b4:bc:36:74:58:
91:23:61:7c:89:5a:bc:af:f0:60:57:80:e3:fa:d9:
67:84:af:97:c3:64:04:d3:ec:f5:34:44:34:e5:83:
8a:a2:59:7f:7c:b3:9d:72:7e:06:1e:70:1d:89:4c:
65:89:3f:31:e4:6c:92:e0:31:60:3c:3a:ca:c9:97:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AC:39:CC:63:72:3D:21:81:4A:F1:7E:16:FF:5E:5C:5F:32:3B:34
X509v3 Authority Key Identifier:
keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.164.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f2:07:44:6d:2a:cb:b7:a5:50:0f:07:0b:d8:95:01:9c:2f:
00:b4:9f:e1:45:4b:6a:e5:83:57:37:1d:ae:b7:09:36:1a:f0:
87:b6:76:71:15:27:13:22:46:06:d0:18:a7:75:5d:77:b4:23:
3c:a9:a9:eb:ea:d6:67:7d:54:10:8a:96:cd:7a:90:a2:06:90:
b9:0a:f3:38:45:bf:84:b7:66:cb:6b:b3:00:5b:2b:5a:95:2c:
b2:04:dd:a2:ab:00:66:59:3e:42:b1:a1:00:31:86:99:5f:5e:
47:2d:88:1c:99:81:e7:4c:7f:b1:de:95:3c:31:0c:f0:ce:72:
97:05:03:51:4f:67:da:ef:15:ec:c3:5e:f5:54:ab:3b:67:67:
f1:94:c4:4e:0f:ec:9a:77:c3:4e:b0:3a:06:2a:df:49:73:23:
f4:52:4b:72:74:03:d1:7b:c7:92:2c:dc:1e:98:62:ff:d3:35:
74:7c:dc:2b:43:fd:d1:e6:1f:a3:7c:df:8a:89:93:04:a8:02:
f9:32:1b:eb:75:41:f1:22:dc:5a:2e:d6:04:93:36:91:a3:f8:
ce:55:e7:83:c2:4d:77:e9:54:de:66:24:2e:23:5d:ae:42:bf:
6d:da:e4:2d:9c:76:3a:6a:4e:1f:d7:57:02:fe:ad:0f:f4:b9:
64:98:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:43 2025 by rpki-client