This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32312e302f32342d3234203d3e20323632363230.roa
File: 3137372e38362e32312e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier: xUAzAU4P+T1sMEWa5EJiSmayl34Myht+6xXPuLtlcRA=
Subject key identifier: 69:BC:7B:15:32:6D:5C:F8:2E:05:08:19:3F:64:93:6C:88:54:F0:CE
Certificate issuer: /CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
Certificate serial: 0601D523E03F23273AD1C86C58072BB3793FFF88
Authority key identifier: 88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32312e302f32342d3234203d3e20323632363230.roa
Signing time: Fri 28 Nov 2025 13:21:50 +0000
ROA not before: Fri 28 Nov 2025 13:16:50 +0000
ROA not after: Fri 27 Nov 2026 13:21:50 +0000
asID: 262620
IP address blocks: 177.86.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl
rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:01:d5:23:e0:3f:23:27:3a:d1:c8:6c:58:07:2b:b3:79:3f:ff:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
Validity
Not Before: Nov 28 13:16:50 2025 GMT
Not After : Nov 27 13:21:50 2026 GMT
Subject: CN=69BC7B15326D5CF82E0508193F64936C8854F0CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8f:93:2a:b7:ba:5f:06:79:8a:b5:90:7e:09:
6e:27:37:8a:d6:f1:27:c0:95:1c:0c:8c:39:b4:4b:
27:9a:6e:4c:c3:2b:7a:af:bc:c0:16:81:8f:0d:59:
d5:a8:69:04:02:ea:ff:96:e7:b4:05:c1:0a:49:70:
af:f7:94:f1:f6:32:66:7d:84:7f:39:de:47:79:b0:
40:40:2f:76:58:79:06:8a:ec:a5:c9:2a:f7:ab:d5:
1a:e3:e4:ad:58:70:6c:1a:ae:9e:40:c1:98:07:82:
24:02:d5:c5:b8:d1:da:34:78:c4:af:4a:a2:13:6b:
1a:c4:fb:4a:ec:9f:f7:6e:0f:3f:26:4c:16:eb:b9:
d9:ff:27:73:2c:37:ae:6b:4b:25:19:22:d3:99:61:
d0:e9:e1:e4:4b:90:87:43:ac:f6:f8:f4:80:33:f8:
0e:59:86:a4:d6:8e:24:a2:f4:c0:a5:5e:61:5c:ea:
ba:30:22:12:5a:89:fd:23:90:e4:0a:83:7d:aa:cf:
de:3b:cd:bb:a8:78:7d:30:af:56:9a:3f:8d:82:0b:
5d:7f:fb:15:87:2d:28:20:d6:bc:f6:13:28:77:6b:
c2:44:75:3a:79:1c:11:59:e9:eb:9d:ac:fa:c4:ab:
05:1d:e0:43:7c:2b:fa:40:bf:f0:47:c7:1f:aa:26:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:7B:15:32:6D:5C:F8:2E:05:08:19:3F:64:93:6C:88:54:F0:CE
X509v3 Authority Key Identifier:
keyid:88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32312e302f32342d3234203d3e20323632363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.21.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e5:87:52:95:fd:2d:da:d2:b9:48:90:76:60:31:3c:d7:8d:
b2:9a:28:13:5e:1b:b5:f2:6e:70:c1:01:dc:02:0d:f4:59:f8:
e8:e9:ad:18:b5:16:69:f4:fa:39:fb:39:8f:4d:0e:47:81:6e:
eb:2e:91:c0:51:f9:3e:2e:42:48:eb:d0:d6:84:47:1e:41:7e:
d7:fd:f2:2a:5f:b2:22:a4:01:75:40:5f:7b:dd:48:fa:f2:e3:
b4:41:15:e0:93:d4:8a:b1:81:97:c1:46:2b:45:2a:26:df:c4:
e0:6d:f5:ab:79:06:e8:13:5f:1b:e5:f9:d0:a8:a1:ab:f1:3a:
37:31:59:6a:bb:d8:d2:44:37:d7:50:8a:5f:3d:44:c4:7b:d0:
86:90:35:da:aa:67:81:67:b4:9c:aa:10:0b:0f:60:a4:5f:d8:
c3:13:dc:1f:e3:ec:bc:35:a9:15:d3:8f:c1:7e:10:b8:82:13:
2c:b0:fc:33:ab:1c:b1:30:f7:4b:73:31:3c:0e:fc:33:e5:5a:
a1:84:36:53:25:f1:d3:19:ba:63:43:3c:68:15:e8:dc:db:ee:
0a:64:2f:49:76:22:76:21:8f:b6:06:3b:17:d7:94:5b:24:7a:
11:1e:10:5b:e8:97:aa:b2:6c:0a:48:c4:d0:54:a3:24:2b:61:
be:9f:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:31 2025 by rpki-client