This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa
File: 3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier: LZj2mDsiJNpKzD1q1DVs60M7rf2YP0xYLmiLGBPtgtM=
Subject key identifier: 6E:9D:7A:E6:15:4B:7F:3B:CE:82:88:0C:10:9C:8F:A5:6E:6C:03:E2
Certificate issuer: /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial: 283E6D8ACBB58EC8727DFD834F4186E82C6271FE
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa
Signing time: Mon 17 Nov 2025 17:12:54 +0000
ROA not before: Mon 17 Nov 2025 17:07:54 +0000
ROA not after: Mon 16 Nov 2026 17:12:54 +0000
asID: 263290
IP address blocks: 170.150.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3e:6d:8a:cb:b5:8e:c8:72:7d:fd:83:4f:41:86:e8:2c:62:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Validity
Not Before: Nov 17 17:07:54 2025 GMT
Not After : Nov 16 17:12:54 2026 GMT
Subject: CN=6E9D7AE6154B7F3BCE82880C109C8FA56E6C03E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:7d:c7:ef:7c:f6:2a:1d:5c:99:2b:a7:1b:
71:34:34:e4:e1:ac:7d:fa:ef:16:83:1c:1f:f8:c6:
3d:d6:6f:3b:02:65:e4:de:6b:a3:b6:14:5a:1c:0b:
37:9d:69:89:6f:9e:60:64:c8:2d:24:1f:d4:bc:5a:
95:b4:19:be:f5:b8:cb:8d:c8:06:bf:89:54:6e:fb:
fd:84:8c:e8:fe:e3:4e:e0:06:37:2a:0d:ec:c7:17:
7e:be:76:fd:5a:0e:78:9b:3b:2f:04:27:14:b6:bc:
6e:5e:06:ce:72:09:51:f5:30:55:ef:d5:a5:4a:6c:
3d:d3:bf:80:b2:8f:b7:57:9a:d0:8a:e7:76:20:34:
a9:7c:06:fd:48:25:f1:d1:50:d6:f6:ce:05:c0:8a:
2a:c8:2c:ff:e2:17:5b:12:b5:20:4a:b7:96:4d:0b:
5c:fd:8f:ce:b3:a7:2c:8e:9a:d9:5d:cd:3f:17:b4:
ce:43:da:81:ab:98:47:91:2b:ed:7b:92:fb:56:ee:
f2:65:d8:68:a4:67:c8:a3:f6:91:ef:38:91:1d:79:
20:64:60:3e:34:d9:5d:d4:36:35:42:6c:fc:b2:4d:
9a:d2:c0:d8:47:8d:89:56:a0:25:c6:f7:0a:70:bd:
73:10:34:8f:78:36:f8:38:3a:f5:89:1f:47:54:d1:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9D:7A:E6:15:4B:7F:3B:CE:82:88:0C:10:9C:8F:A5:6E:6C:03:E2
X509v3 Authority Key Identifier:
keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:05:b5:6e:1f:de:a0:da:a3:d0:29:58:89:28:a3:18:ed:2d:
65:fa:a9:f2:e2:4f:27:3e:3d:ef:03:c9:54:c3:51:82:57:6d:
57:4c:43:8e:5f:d8:14:b9:d6:52:33:6d:56:be:45:f1:78:80:
6e:bf:bc:75:e0:77:a1:55:85:0e:93:0c:92:a2:d4:8d:22:ce:
2f:14:46:2c:2d:13:b0:cb:ec:ea:0e:ee:a1:b6:40:57:df:9f:
d0:9e:98:62:6b:3c:b6:aa:45:45:6b:f8:51:ae:0e:5b:be:d4:
2a:40:e9:76:42:10:c8:c2:ee:be:d9:21:43:10:2d:38:4b:20:
0e:f2:eb:e7:2f:e6:08:70:26:be:46:af:1c:1e:2b:0f:26:b5:
d4:1f:e8:10:c5:06:b7:e0:2e:e5:1a:cd:a7:8b:f1:fc:59:af:
52:d3:62:53:3c:39:2e:3e:9f:e7:af:51:80:80:d3:41:13:ae:
f5:60:d9:cc:1a:f2:84:2c:34:01:aa:a9:8d:73:27:1c:d5:0f:
99:c1:19:ed:5a:5b:f1:d4:a6:83:60:1c:a1:9b:ab:d2:3c:f8:
a3:94:e0:26:8a:62:be:53:d8:26:45:29:61:4e:f4:f5:78:f7:
cc:46:c2:a5:ae:e4:f4:0a:63:4a:7d:df:1b:eb:2a:66:0b:09:
ba:c8:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:18 2025 by rpki-client