This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa
File: 3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier: XHsbbsLCPbPQo8WzDH9AUxSRBkLrn8pMWkrjk24a0jg=
Subject key identifier: FF:D7:1F:AB:3D:98:8A:55:E5:45:42:5E:F0:60:48:EC:98:31:A4:BA
Certificate issuer: /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial: 3D8C4A5A473EF5B61504010E61CE2D3D168D1784
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa
Signing time: Sun 16 Nov 2025 12:41:14 +0000
ROA not before: Sun 16 Nov 2025 12:36:14 +0000
ROA not after: Sun 15 Nov 2026 12:41:14 +0000
asID: 262503
IP address blocks: 167.249.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8c:4a:5a:47:3e:f5:b6:15:04:01:0e:61:ce:2d:3d:16:8d:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Validity
Not Before: Nov 16 12:36:14 2025 GMT
Not After : Nov 15 12:41:14 2026 GMT
Subject: CN=FFD71FAB3D988A55E545425EF06048EC9831A4BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:3e:ab:65:74:b4:e0:0d:9a:df:a6:83:57:
6c:73:25:29:93:27:ba:d2:97:fe:10:b3:07:80:cb:
50:cc:0d:f6:53:e1:df:a5:68:f2:ca:d6:16:dd:fd:
ca:59:40:6f:f5:28:e4:29:41:78:c0:4f:2a:c6:ad:
f5:fd:b5:bf:a1:b7:58:55:00:2d:22:f1:a2:c9:9a:
74:59:88:61:ff:13:0e:e8:12:7e:f4:24:a7:16:d5:
dd:d6:43:af:ba:d9:4b:9a:21:23:66:86:da:71:4d:
5b:dc:22:f3:63:36:43:cc:a7:b5:71:0b:96:49:dc:
c2:75:cf:05:fa:66:f2:6e:e6:1d:41:92:2a:24:f6:
b1:00:d6:66:71:35:37:55:82:9a:bc:de:e1:5d:eb:
87:4a:9d:57:47:d0:88:0c:0d:e0:ca:2e:0e:ab:a9:
b4:06:cc:7f:9a:9b:fa:56:39:bb:b0:03:df:03:28:
06:e6:b3:29:30:37:e0:cd:7e:b2:d6:c5:28:2f:36:
d4:2e:40:9e:a3:85:8d:b1:5c:83:68:51:11:8c:31:
80:f8:1d:47:cb:83:1c:d4:db:18:76:fb:4a:ad:e7:
c0:d7:a6:e1:e4:e9:35:58:b7:45:9f:c3:c4:f8:7f:
b8:03:44:f0:87:1d:1e:11:1c:20:04:8c:24:e6:b7:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D7:1F:AB:3D:98:8A:55:E5:45:42:5E:F0:60:48:EC:98:31:A4:BA
X509v3 Authority Key Identifier:
keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:eb:0e:48:b9:56:dc:f0:3b:0c:bb:b6:ea:4c:89:53:19:e6:
45:8b:cb:61:81:46:86:c8:9d:de:f4:53:96:52:01:0c:66:db:
c2:e6:d6:a2:bd:76:71:3a:bc:2b:4a:f2:86:bf:54:67:57:a1:
25:91:1f:22:7b:40:c8:f7:20:2e:e4:80:5b:b0:3b:21:cf:e0:
b9:22:ee:7d:24:f7:f9:db:16:31:14:49:14:5f:a3:c7:bd:ec:
fe:5f:d1:79:85:d6:77:3f:ce:b0:6c:59:ad:81:ae:a0:f5:f3:
85:94:3d:85:31:af:eb:8b:76:2f:52:00:3a:7b:40:50:34:79:
3b:54:23:d2:5b:59:c0:00:e9:a1:5c:47:0e:3b:37:e0:4d:c3:
66:04:44:fc:8e:ad:d7:c6:43:ea:ab:af:2b:8b:49:9f:25:2a:
dc:3b:3d:80:4c:f0:c8:b2:a6:65:10:8e:80:15:0b:6c:47:be:
04:81:36:01:b4:90:cb:02:97:e1:fc:ed:49:3f:a8:05:67:6f:
2e:ce:f3:c7:10:51:a2:69:07:09:c1:a0:8b:a5:71:5d:2d:79:
3e:05:fe:ac:6f:0f:3c:cf:2f:87:f4:88:cb:33:8c:2b:d3:b5:
71:82:e4:42:bd:e0:0d:9a:7c:3d:ef:82:3b:f2:81:51:43:0b:
59:61:57:45
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPYxKWkc+9bYVBAEOYc4tPRaNF4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgxQzYzMkQxMUNCQTkzQzZGQTA4RTMwQzcxM0Q1QTI3
MjA5ODkwNjAeFw0yNTExMTYxMjM2MTRaFw0yNjExMTUxMjQxMTRaMDMxMTAvBgNV
BAMTKEZGRDcxRkFCM0Q5ODhBNTVFNTQ1NDI1RUYwNjA0OEVDOTgzMUE0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93D6rZXS04A2a36aDV2xzJSmT
J7rSl/4QsweAy1DMDfZT4d+laPLK1hbd/cpZQG/1KOQpQXjATyrGrfX9tb+ht1hV
AC0i8aLJmnRZiGH/Ew7oEn70JKcW1d3WQ6+62UuaISNmhtpxTVvcIvNjNkPMp7Vx
C5ZJ3MJ1zwX6ZvJu5h1Bkiok9rEA1mZxNTdVgpq83uFd64dKnVdH0IgMDeDKLg6r
qbQGzH+am/pWObuwA98DKAbmsykwN+DNfrLWxSgvNtQuQJ6jhY2xXINoURGMMYD4
HUfLgxzU2xh2+0qt58DXpuHk6TVYt0Wfw8T4f7gDRPCHHR4RHCAEjCTmt++fAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/9cfqz2YilXlRUJe8GBI7JgxpLowHwYDVR0j
BBgwFoAU2BxjLRHLqTxvoI4wxxPVonIJiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9EODFDNjMyRDExQ0JBOTNDNkZBMDhFMzBDNzEzRDVBMjcyMDk4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MUM2MzJEMTFDQkE5M0M2
RkEwOEUzMEM3MTNENUEyNzIwOTg5MDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf5qTANBgkqhkiG9w0BAQsFAAOCAQEAjesO
SLlW3PA7DLu26kyJUxnmRYvLYYFGhsid3vRTllIBDGbbwubWor12cTq8K0ryhr9U
Z1ehJZEfIntAyPcgLuSAW7A7Ic/guSLufST3+dsWMRRJFF+jx73s/l/ReYXWdz/O
sGxZrYGuoPXzhZQ9hTGv64t2L1IAOntAUDR5O1Qj0ltZwADpoVxHDjs34E3DZgRE
/I6t18ZD6quvK4tJnyUq3Ds9gEzwyLKmZRCOgBULbEe+BIE2AbSQywKX4fztST+o
BWdvLs7zxxBRomkHCcGgi6VxXS15PgX+rG8PPM8vh/SIyzOMK9O1cYLkQr3gDZp8
Pe+CO/KBUUMLWWFXRQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:59 2025 by rpki-client