This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
File: 3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier: 9xv9gmzfO9NoJtk1BW70remD0QwTKEs+0p+Es1C5pKw=
Subject key identifier: BD:E8:28:C1:0F:52:03:AA:C6:88:5B:78:F0:0B:D2:90:71:26:63:7D
Certificate issuer: /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial: 4D15B4AE8057C7016497DB814CAEB8CA6C208727
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
Signing time: Mon 10 Nov 2025 13:47:36 +0000
ROA not before: Mon 10 Nov 2025 13:42:36 +0000
ROA not after: Mon 09 Nov 2026 13:47:36 +0000
asID: 265393
IP address blocks: 168.194.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 15:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:15:b4:ae:80:57:c7:01:64:97:db:81:4c:ae:b8:ca:6c:20:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Validity
Not Before: Nov 10 13:42:36 2025 GMT
Not After : Nov 9 13:47:36 2026 GMT
Subject: CN=BDE828C10F5203AAC6885B78F00BD2907126637D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:86:e4:c7:88:45:0a:8a:2f:26:61:ee:1d:
48:18:5a:f3:17:77:60:61:6b:ce:60:9b:e5:13:79:
df:3e:10:33:61:9d:10:93:e0:a2:59:44:5d:c4:5d:
5b:ea:29:22:e4:a5:3e:9a:9c:0b:1f:87:72:17:06:
f1:6b:96:a6:5d:80:bb:33:3d:00:54:d1:2d:ab:65:
4d:80:06:12:73:85:6c:ea:1c:5b:e6:d4:b5:4e:8d:
28:f3:90:76:94:31:51:d3:e0:20:da:09:a6:61:7e:
eb:6b:28:2f:9b:7f:82:9c:86:1d:15:5f:ac:51:dc:
30:16:e4:cd:1a:32:c1:9f:7f:cb:6f:2e:b4:70:c1:
04:c4:8f:50:36:b3:bd:f2:bf:f5:5e:8d:0d:b0:07:
5e:69:0b:43:e3:6d:f7:12:d2:c3:35:f6:f8:c1:09:
cb:e7:f9:10:35:87:a6:dc:24:ff:82:52:7d:c7:7f:
a8:7f:0f:79:ce:73:df:80:b4:bd:a0:d4:99:6d:14:
11:90:81:c3:30:5e:d8:eb:15:26:92:ff:d8:22:6b:
9e:93:ec:98:2d:38:5b:e4:36:a7:6b:9b:a1:1c:52:
47:ce:c8:cd:21:30:96:33:37:f0:92:fa:cf:f5:37:
79:e6:d8:90:5b:d1:b2:4d:e8:94:71:4d:71:12:ae:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:28:C1:0F:52:03:AA:C6:88:5B:78:F0:0B:D2:90:71:26:63:7D
X509v3 Authority Key Identifier:
keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.166.0/23
Signature Algorithm: sha256WithRSAEncryption
59:f2:9a:52:d2:01:fe:c5:b7:ec:ee:46:6e:b2:e1:a5:b5:1f:
a8:ad:9b:50:ec:4e:f4:9c:77:89:92:6a:63:f1:5f:df:e2:0b:
a2:42:ef:71:99:6b:90:2b:32:14:46:38:c9:ec:0c:72:b4:3b:
66:5e:2f:cb:af:1a:58:c3:ad:e6:45:1a:c7:8b:e5:5f:3f:45:
67:3b:f2:48:1f:e7:da:45:23:3a:4d:e3:2b:95:36:62:a7:e2:
f8:4b:f5:fd:98:ba:49:ba:87:72:74:4b:4d:25:a8:f1:8f:ef:
b3:85:4e:72:4a:f6:e5:2b:71:ef:56:b0:db:e9:40:4a:5e:b9:
58:17:75:43:79:83:9a:96:9c:9e:7b:c1:5e:58:8d:df:23:b5:
eb:9f:da:35:65:06:83:5c:7e:57:e4:cf:44:34:cb:a8:ab:ba:
c4:dc:5b:5c:b8:7e:25:08:ff:ed:d3:a2:13:fc:12:cc:50:e3:
53:e8:9b:40:7a:0b:f7:90:47:0f:c8:a1:ea:29:d5:85:af:b2:
82:5d:af:73:6f:05:a2:19:6d:db:5a:99:86:63:05:b9:67:76:
f6:c3:ad:26:77:05:60:70:2c:c6:6b:1c:16:c1:c0:55:20:9a:
b0:b0:0a:cc:a1:99:6d:66:56:9b:c4:4a:e9:d6:0a:62:18:0a:
b3:5c:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:48 2025 by rpki-client