This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230302e3135302e3137312e302f32342d3332203d3e203232333831.roa
File: 3230302e3135302e3137312e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier: 3tfXial1iYgMKxFniRBRMV4Wze3cbXjc928EMnPUqO0=
Subject key identifier: C1:B4:A7:E3:F3:CD:48:C1:79:14:65:85:61:56:0D:07:82:17:64:6E
Certificate issuer: /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial: 34368A54E7F3A891E167101EC94A5A2354A5925C
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230302e3135302e3137312e302f32342d3332203d3e203232333831.roa
Signing time: Tue 11 Nov 2025 15:44:20 +0000
ROA not before: Tue 11 Nov 2025 15:39:20 +0000
ROA not after: Tue 10 Nov 2026 15:44:20 +0000
asID: 22381
IP address blocks: 200.150.171.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 05:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:36:8a:54:e7:f3:a8:91:e1:67:10:1e:c9:4a:5a:23:54:a5:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Validity
Not Before: Nov 11 15:39:20 2025 GMT
Not After : Nov 10 15:44:20 2026 GMT
Subject: CN=C1B4A7E3F3CD48C17914658561560D078217646E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:30:4a:7b:da:3c:9c:a4:c2:cb:dc:81:27:
9e:73:cd:98:bc:3f:ad:2d:9c:60:e9:f0:9f:96:f4:
53:9a:ae:fd:39:00:31:5c:84:bf:d0:3f:b3:c4:61:
84:4e:ee:f3:05:5b:42:2f:ad:0b:0b:b1:70:2f:11:
0e:29:e2:9a:12:b6:88:98:b8:1c:80:3b:16:69:e1:
e0:c0:e0:38:41:56:34:a9:2a:43:28:a9:9d:9b:30:
29:0f:99:72:85:7e:cd:89:db:be:1d:f2:76:f7:c0:
62:92:71:25:aa:84:7e:73:70:86:fa:77:c4:2a:b9:
92:12:1a:59:47:13:11:10:d5:2d:f8:9f:6c:76:03:
42:d1:40:46:51:3c:25:fe:f6:1c:12:7f:72:b0:4e:
00:f2:68:4a:ea:25:e1:37:c5:9b:50:52:c0:15:e1:
7c:06:35:6d:fa:8e:e2:d1:03:d0:e4:5c:ef:3e:a8:
09:e6:c2:b7:87:ce:4b:f0:80:6a:0e:2b:6b:24:30:
e7:92:ec:2e:81:a6:d7:36:02:97:d9:67:93:31:09:
90:a1:a9:ae:59:82:87:2c:5f:58:28:54:a3:0d:2e:
b3:18:3c:ae:44:e4:5c:cd:b1:f6:2f:4d:de:8f:32:
2f:9c:8b:00:4a:84:8e:e0:5c:67:0e:af:1b:40:47:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:A7:E3:F3:CD:48:C1:79:14:65:85:61:56:0D:07:82:17:64:6E
X509v3 Authority Key Identifier:
keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230302e3135302e3137312e302f32342d3332203d3e203232333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.171.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cf:e4:46:b7:e5:26:9c:ef:73:2d:02:d7:09:20:93:21:09:
25:6f:7f:5a:1b:6f:b8:14:f2:96:ac:23:79:2e:d7:55:8f:7d:
70:65:7c:95:ac:49:ab:ca:1d:bf:d1:2e:c2:8d:0f:24:c9:39:
48:cb:55:73:1d:88:a2:b1:d8:b1:43:35:c4:19:87:75:e9:e3:
96:c6:c3:de:a6:82:8a:46:97:5e:23:31:26:77:72:1c:80:d6:
00:7b:7b:fc:d6:8c:c3:71:32:43:fb:20:32:2c:9e:be:75:0e:
a6:5f:96:49:3f:a2:64:cc:b9:33:df:f5:a7:14:25:6f:87:7a:
7b:b2:7f:b9:e4:d6:93:a3:f4:cc:16:19:be:a0:33:ac:de:c0:
60:d9:ed:c7:70:92:84:ff:0c:88:cc:40:87:00:1e:3b:2b:4d:
fd:3c:dc:9a:9f:42:c1:c5:91:7f:88:ee:9b:4e:33:f2:a3:6a:
51:f8:35:07:36:44:2f:24:ac:0e:0b:e2:fb:b4:33:38:5e:8b:
18:3b:fc:40:99:37:34:ae:3a:94:be:2c:0c:90:7e:54:a4:26:
3c:55:c6:6d:6f:63:96:56:72:75:a4:e9:f4:03:59:51:11:a1:
3c:fc:9e:c3:50:b1:48:b8:a7:c2:ec:49:9b:be:f0:80:7c:8f:
de:94:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:02 2025 by rpki-client