This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa
File: 3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa (raw, json)
Hash identifier: j8MIyRH+pMLdFRJ7pSL/iej1bQUwiDY9wwhWEvl1lj8=
Subject key identifier: 7D:0D:72:D5:FB:51:C4:4C:09:9E:1B:15:54:E2:B5:91:C3:F1:2E:3D
Certificate issuer: /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial: 2F2D3E81E5DC56D12D305B5AEBB5533389287915
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa
Signing time: Tue 18 Nov 2025 12:32:14 +0000
ROA not before: Tue 18 Nov 2025 12:27:14 +0000
ROA not after: Tue 17 Nov 2026 12:32:14 +0000
asID: 265093
IP address blocks: 170.233.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 11:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2d:3e:81:e5:dc:56:d1:2d:30:5b:5a:eb:b5:53:33:89:28:79:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Validity
Not Before: Nov 18 12:27:14 2025 GMT
Not After : Nov 17 12:32:14 2026 GMT
Subject: CN=7D0D72D5FB51C44C099E1B1554E2B591C3F12E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:f9:7c:9e:fa:ab:4f:e2:e8:fa:59:5b:71:
aa:c2:84:22:01:53:d9:e7:d3:04:1e:35:f4:34:af:
ff:da:15:35:f6:97:ba:15:7e:aa:9c:f7:e3:e6:1a:
d3:86:29:49:e4:ff:71:aa:b7:2a:61:d1:1d:8c:d5:
77:9a:00:eb:31:a8:a3:84:4f:6c:41:d5:f2:e5:7c:
aa:73:b0:ca:08:9c:f8:52:ec:d7:c4:31:e7:c5:64:
df:e9:4e:1a:43:d8:68:cd:9e:1e:9f:83:65:a5:1b:
91:5a:f7:5d:15:93:27:53:4a:a7:ec:46:57:18:ba:
d6:2a:6e:0f:82:39:aa:e6:d4:06:21:81:f9:8c:80:
5e:cb:7c:18:a8:57:31:01:d4:ea:4e:e9:84:b5:e9:
a7:51:37:3c:82:7c:a1:5d:40:11:a9:32:83:70:0c:
b3:9c:ff:e5:aa:df:20:ac:cd:23:db:77:ba:d7:87:
64:c0:0a:f1:08:04:d2:e2:62:7c:19:84:70:04:16:
1f:53:83:bc:a1:dd:0f:43:3f:5c:26:c4:df:9e:10:
6f:50:e8:1b:4b:a3:2e:c8:0e:09:65:53:83:75:de:
14:fa:bf:5f:69:25:db:65:0e:5e:b8:01:90:45:00:
1c:25:e2:70:61:bb:4a:5b:c6:07:c9:ea:8c:bc:5f:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0D:72:D5:FB:51:C4:4C:09:9E:1B:15:54:E2:B5:91:C3:F1:2E:3D
X509v3 Authority Key Identifier:
keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.107.0/24
Signature Algorithm: sha256WithRSAEncryption
06:95:70:c0:07:da:82:f3:49:08:d0:30:e7:87:b2:be:f9:1e:
0d:1f:00:9b:83:5e:16:13:e6:0a:e3:22:1e:fb:f3:69:4b:1e:
00:a4:48:e3:10:1d:3b:4c:88:c4:3a:67:2e:03:82:fa:fa:c6:
fe:63:e9:64:21:e0:54:a7:40:c7:d3:b3:c3:d7:23:03:6f:78:
4a:03:28:82:67:0a:d7:df:b0:7d:67:d1:7a:07:11:30:28:10:
7f:51:0e:12:21:a1:fa:35:df:78:c0:49:57:6f:a9:f4:97:5a:
09:c0:12:41:1d:21:d7:55:c2:87:74:85:13:75:bb:f4:d9:e2:
a9:7d:ba:e7:9d:83:17:d6:b7:f1:ae:fb:cb:3a:22:b7:8d:45:
f1:89:d5:d7:38:76:5b:ee:61:5f:72:c4:2f:b6:aa:fa:28:f7:
89:c8:3a:57:8c:55:69:e5:22:85:77:51:f6:f3:f3:ff:75:e5:
89:2a:27:d6:76:d7:c5:fb:a8:45:34:09:6d:70:46:20:5b:55:
b6:40:10:12:59:bd:41:9e:6d:8c:5f:54:18:8a:78:7d:13:e7:
70:53:68:02:06:9f:50:b3:be:b3:13:b1:5b:0d:0a:a8:a2:f9:
85:28:2d:0b:54:98:55:bf:f8:50:a9:56:08:b9:20:21:de:c2:
c4:11:07:52
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULy0+geXcVtEtMFta67VTM4koeRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1RkMyQzY3RkU3MzhFQ0FDQkZFRjk0QjhEQjVENUQ1
MjI4QzdDMjAeFw0yNTExMTgxMjI3MTRaFw0yNjExMTcxMjMyMTRaMDMxMTAvBgNV
BAMTKDdEMEQ3MkQ1RkI1MUM0NEMwOTlFMUIxNTU0RTJCNTkxQzNGMTJFM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZfl8nvqrT+Lo+llbcarChCIB
U9nn0wQeNfQ0r//aFTX2l7oVfqqc9+PmGtOGKUnk/3Gqtyph0R2M1XeaAOsxqKOE
T2xB1fLlfKpzsMoInPhS7NfEMefFZN/pThpD2GjNnh6fg2WlG5Fa910VkydTSqfs
RlcYutYqbg+COarm1AYhgfmMgF7LfBioVzEB1OpO6YS16adRNzyCfKFdQBGpMoNw
DLOc/+Wq3yCszSPbd7rXh2TACvEIBNLiYnwZhHAEFh9Tg7yh3Q9DP1wmxN+eEG9Q
6BtLoy7IDgllU4N13hT6v19pJdtlDl64AZBFABwl4nBhu0pbxgfJ6oy8XzF1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUfQ1y1ftRxEwJnhsVVOK1kcPxLj0wHwYDVR0j
BBgwFoAUNV/Cxn/nOOysv++UuNtdXVIox8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVUVzRDNllNa2VwNFpGblNYd0NueFF5dXdrd3JzQXZndlF2SmZ0dXln
OWgvMC8zNTVGQzJDNjdGRTczOEVDQUNCRkVGOTRCOERCNUQ1RDUyMjhDN0MyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NUZDMkM2N0ZFNzM4RUNB
Q0JGRUY5NEI4REI1RDVENTIyOEM3QzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFVFc0QzZZTWtlcDRaRm5TWHdDbnhReXV3a3dyc0F2Z3ZRdkpmdHV5ZzloLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpazANBgkqhkiG9w0BAQsFAAOCAQEABpVw
wAfagvNJCNAw54eyvvkeDR8Am4NeFhPmCuMiHvvzaUseAKRI4xAdO0yIxDpnLgOC
+vrG/mPpZCHgVKdAx9Ozw9cjA294SgMogmcK19+wfWfRegcRMCgQf1EOEiGh+jXf
eMBJV2+p9JdaCcASQR0h11XCh3SFE3W79NniqX26552DF9a38a77yzoit41F8YnV
1zh2W+5hX3LEL7aq+ij3icg6V4xVaeUihXdR9vPz/3XliSon1nbXxfuoRTQJbXBG
IFtVtkAQElm9QZ5tjF9UGIp4fRPncFNoAgafULO+sxOxWw0KqKL5hSgtC1SYVb/4
UKlWCLkgId7CxBEHUg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:36 2025 by rpki-client