This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa
File: 3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa (raw, json)
Hash identifier: JWyKa15H0k1CioiKjEdcG+OXh3s8Ddq6ci6tNSG88pQ=
Subject key identifier: 74:6E:20:E1:EA:A4:92:48:92:3C:20:5D:3B:95:FE:49:57:8E:4C:8B
Certificate issuer: /CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
Certificate serial: 0123A1383AFE1657D34B87CF0A84AA927783E453
Authority key identifier: 2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa
Signing time: Wed 12 Nov 2025 17:57:58 +0000
ROA not before: Wed 12 Nov 2025 17:52:58 +0000
ROA not after: Wed 11 Nov 2026 17:57:58 +0000
asID: 263481
IP address blocks: 191.242.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl
rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 22:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:23:a1:38:3a:fe:16:57:d3:4b:87:cf:0a:84:aa:92:77:83:e4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
Validity
Not Before: Nov 12 17:52:58 2025 GMT
Not After : Nov 11 17:57:58 2026 GMT
Subject: CN=746E20E1EAA49248923C205D3B95FE49578E4C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bd:51:bc:7f:c9:12:dd:b1:93:bd:02:64:f7:
5e:07:aa:6f:96:b2:6b:ec:85:84:d2:31:df:65:1c:
cc:c1:81:1d:3d:b5:e4:19:80:17:79:8c:bd:44:5b:
3d:c4:c5:cc:c9:bc:4c:f3:41:3f:6b:6a:6f:1c:ff:
04:9d:aa:e1:fc:92:9f:67:44:e3:03:ea:f4:ae:f3:
10:f1:c1:c5:36:3a:69:fe:62:02:e1:ee:88:36:bc:
73:bb:dd:64:4f:b1:9f:95:38:6d:30:59:28:e4:f5:
79:3b:96:57:57:53:0e:8d:53:aa:7f:ed:c7:95:80:
c4:9c:b7:fd:6f:94:44:3e:04:93:0a:bf:7b:94:75:
61:dc:9b:28:bf:4c:60:ee:43:f5:79:44:a3:fa:f0:
69:c5:64:92:88:0e:1c:2b:58:da:ce:8f:3a:30:2b:
5d:29:9e:17:e5:5c:56:c4:03:29:80:1b:20:05:fe:
6a:9c:b6:bc:4d:27:82:fe:9a:09:25:a8:3a:d8:71:
f1:b9:a7:5c:1c:b9:f3:ad:b0:1d:02:05:58:fd:fe:
42:65:40:4e:af:4f:f3:37:8b:d2:b7:a0:67:15:99:
b4:ef:46:f0:9a:6f:ed:51:72:73:54:7d:cf:85:66:
7f:e2:e6:0d:80:ad:c7:44:f2:7e:9e:f2:eb:18:3a:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:20:E1:EA:A4:92:48:92:3C:20:5D:3B:95:FE:49:57:8E:4C:8B
X509v3 Authority Key Identifier:
keyid:2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.208.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:93:33:ec:78:cc:86:10:91:04:c2:0b:ef:c7:ec:4f:05:ae:
c9:e4:db:b1:76:a2:1d:c8:c2:83:53:d3:80:65:ca:e9:f7:3f:
4a:22:04:0c:d1:01:0f:e9:c6:1d:c7:ad:60:17:2f:59:5e:8d:
a4:d1:c7:f8:73:bd:ba:11:9c:44:59:d6:b0:cc:66:b0:47:c4:
8a:3a:b1:a9:1a:7c:e9:25:99:2f:33:5d:6b:0e:70:e2:85:00:
ef:c8:47:d3:af:27:35:d4:b6:90:d0:8b:86:a5:fe:06:f4:9a:
a6:dd:5c:8d:3e:70:ac:e1:63:11:c7:5c:fc:b7:f4:0a:da:e7:
a4:bd:11:6f:87:86:cf:89:f8:44:8b:33:54:70:ca:22:90:4b:
f0:8e:69:33:1b:27:a2:1b:92:b1:5c:e9:c7:66:95:bf:c6:d7:
59:c5:1e:a0:5b:77:e5:f4:97:33:86:d4:57:2d:ec:c0:13:c1:
5d:0a:f2:77:8e:7d:5e:e8:21:81:40:f7:ea:a1:dc:06:96:5d:
c1:a5:31:5d:ce:90:08:af:fe:d0:40:be:b1:f2:a1:1c:71:f8:
19:5b:5d:d7:23:e1:9d:77:95:56:89:cc:bd:9b:d3:a1:1d:8c:
04:4e:e7:98:92:71:24:46:89:15:ac:4f:ab:2e:50:81:5d:b0:
b7:97:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:59 2025 by rpki-client