This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32332d3233203d3e20323633363038.roa
File: 3137302e3234342e32382e302f32332d3233203d3e20323633363038.roa (raw, json)
Hash identifier: a4uXHxOMfRx0yXkYfBidty8Y2BNDWwxtpHp7dBCBKd8=
Subject key identifier: B8:61:FB:4C:D3:53:69:A4:4A:2A:7F:FF:D5:A9:54:47:F4:0E:33:82
Certificate issuer: /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial: C2DE9DA1195AF397BC9331D28A0DC317683007
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32332d3233203d3e20323633363038.roa
Signing time: Mon 24 Nov 2025 13:40:14 +0000
ROA not before: Mon 24 Nov 2025 13:35:14 +0000
ROA not after: Mon 23 Nov 2026 13:40:14 +0000
asID: 263608
IP address blocks: 170.244.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 07:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c2:de:9d:a1:19:5a:f3:97:bc:93:31:d2:8a:0d:c3:17:68:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Validity
Not Before: Nov 24 13:35:14 2025 GMT
Not After : Nov 23 13:40:14 2026 GMT
Subject: CN=B861FB4CD35369A44A2A7FFFD5A95447F40E3382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:1d:88:81:ee:5a:35:2d:46:da:59:2e:85:
35:77:cd:13:3b:37:df:46:76:77:f9:a6:6d:ac:22:
bf:e0:a3:cd:1f:9d:db:36:a4:c6:e0:e5:f1:e6:a5:
ae:69:2c:d3:bd:cd:7f:ad:ed:7f:45:4a:19:cc:58:
67:a9:08:28:a3:d4:6a:58:06:ad:50:d0:65:53:a1:
38:aa:9f:c2:0f:e3:82:5f:ce:64:38:be:7b:44:b3:
01:a6:2c:fb:b0:41:f3:0e:2b:52:5a:d4:31:53:9f:
b6:89:ac:4d:d5:d0:b9:03:87:37:6b:b8:3d:1f:10:
0b:57:a2:81:a7:c0:e5:64:07:2c:a8:25:6c:fa:0e:
0a:1a:73:2d:c3:b9:d3:b9:ff:44:fe:91:bb:52:3b:
57:6b:1a:71:57:8a:da:81:7a:1a:ab:d0:23:de:ec:
6d:37:79:0a:9c:4f:ed:98:f5:37:85:de:87:35:64:
7f:91:d7:11:7f:07:28:41:e8:f1:e6:a4:41:95:4a:
b6:17:06:f6:a2:87:2e:e3:c6:88:c1:95:03:15:9c:
ec:89:16:5e:23:54:57:d9:be:21:d1:ff:eb:ae:de:
f5:a3:c2:d1:10:ee:50:5e:80:51:aa:34:f5:51:69:
de:20:44:e1:79:80:bf:ff:f3:46:9a:46:fb:58:75:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:FB:4C:D3:53:69:A4:4A:2A:7F:FF:D5:A9:54:47:F4:0E:33:82
X509v3 Authority Key Identifier:
keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32332d3233203d3e20323633363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.28.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:ab:d6:28:66:c6:30:a4:60:0c:91:11:76:42:c7:3c:f3:c9:
5e:ce:01:5a:9a:f6:59:49:4c:a0:db:73:88:f7:1b:f4:dc:2c:
e4:e9:e9:74:ce:b6:61:55:e2:55:8d:66:b2:ca:89:0e:5d:f8:
42:a8:75:68:a8:92:eb:2e:56:73:0a:ee:73:40:4e:59:2a:57:
cf:f2:94:4e:03:a0:87:ef:98:57:3d:f0:ff:8c:09:34:a2:dd:
1c:10:15:4a:f3:fa:72:48:80:86:04:f4:89:62:b0:80:80:c4:
58:c2:14:90:7d:d2:37:20:0d:35:89:a0:ed:00:b5:00:eb:a0:
62:ad:4f:85:41:63:91:82:3e:fc:2d:22:2b:57:0c:b7:f8:dc:
1b:95:61:77:8b:5c:37:b7:a8:0c:25:3d:a0:9a:64:a4:8b:c2:
dd:48:9a:98:96:94:64:01:1c:02:12:8b:71:94:17:a1:ef:0f:
67:67:de:84:99:53:54:8a:a2:16:be:81:dd:d7:ac:f1:48:44:
50:7c:2a:64:0a:c2:92:c6:70:ec:92:39:66:83:8f:c7:98:b4:
e6:84:1a:b5:9a:c5:53:36:64:95:79:bc:fc:43:5c:a4:85:59:
de:8f:0b:84:f7:1c:41:8f:e8:1f:53:f8:70:6f:95:03:f2:a9:
1f:52:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:53 2025 by rpki-client