This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32342d3234203d3e20323633363038.roa
File: 3137302e3234342e32382e302f32342d3234203d3e20323633363038.roa (raw, json)
Hash identifier: 0nIutAKGPSalch9HgRPEpKhu3EPQgps9x5wbTVbZ68E=
Subject key identifier: 29:56:B0:9A:E3:29:52:8E:B4:EB:B7:42:1B:F2:DC:DF:2B:72:55:EE
Certificate issuer: /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial: 192A692C38775BDBB542CADBFCE207DD537B06E2
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32342d3234203d3e20323633363038.roa
Signing time: Mon 24 Nov 2025 13:40:10 +0000
ROA not before: Mon 24 Nov 2025 13:35:10 +0000
ROA not after: Mon 23 Nov 2026 13:40:10 +0000
asID: 263608
IP address blocks: 170.244.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 07:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2a:69:2c:38:77:5b:db:b5:42:ca:db:fc:e2:07:dd:53:7b:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Validity
Not Before: Nov 24 13:35:10 2025 GMT
Not After : Nov 23 13:40:10 2026 GMT
Subject: CN=2956B09AE329528EB4EBB7421BF2DCDF2B7255EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:0c:64:d0:67:28:04:d0:5d:24:fb:d4:51:
a2:cb:3e:7f:9e:33:63:fc:f7:e5:62:e9:d2:ee:47:
b7:8f:6d:80:58:15:c8:22:c9:66:1f:18:a3:b5:84:
3c:26:4b:4a:68:35:27:fe:57:02:f7:f7:63:ed:8f:
10:25:3a:04:62:0a:f4:bc:44:7f:5e:21:52:4a:72:
c6:06:6d:89:87:01:2c:02:1f:db:4e:d9:d0:18:63:
e3:7f:dd:2c:fc:5b:0b:82:23:c1:18:23:53:d7:ec:
68:37:99:f5:cc:c5:89:d8:a5:9b:c6:e8:8e:1b:f7:
4f:c8:a5:c2:ad:67:38:fb:98:92:1d:a2:2f:d1:bc:
d3:05:e6:d9:98:8a:8d:0e:c0:b6:08:e4:a0:94:59:
a5:5e:c8:04:3c:84:2c:72:0a:15:99:c2:a0:48:05:
5e:f4:6e:bf:33:b6:53:f5:9d:92:fe:9e:be:35:b9:
d3:7e:fb:2c:2e:21:66:94:c2:58:8c:a1:a6:e6:e1:
84:97:60:a4:eb:fb:22:52:92:7d:05:3f:2e:41:a1:
21:45:cb:4e:9b:90:af:7e:05:ae:ad:ad:13:4e:6d:
f9:8b:0f:c2:6d:09:24:64:c7:c0:93:5e:af:8e:9f:
3a:f4:c1:02:c7:b9:ec:4f:08:28:f7:07:d0:89:79:
24:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:B0:9A:E3:29:52:8E:B4:EB:B7:42:1B:F2:DC:DF:2B:72:55:EE
X509v3 Authority Key Identifier:
keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32342d3234203d3e20323633363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.28.0/24
Signature Algorithm: sha256WithRSAEncryption
87:7d:c0:33:c0:ff:41:02:78:cb:83:97:e2:63:d5:88:fd:82:
1d:97:cb:1f:79:b8:24:bb:5b:55:7b:bf:31:ac:5e:cc:42:16:
c0:fa:e1:26:07:77:a5:95:36:fa:80:7e:67:ce:a2:e3:27:15:
52:56:76:71:3e:b2:80:cd:24:9c:56:fd:ae:4c:b4:2b:3d:f7:
18:c9:81:85:0b:9c:6d:6f:ee:51:48:47:35:7d:6e:38:5f:14:
6f:01:9f:68:ef:0b:1a:a0:06:3a:0c:5a:79:3d:25:b6:87:86:
81:51:ce:4b:b3:01:61:8e:1c:8e:36:68:8f:cf:b9:00:b2:34:
4c:23:98:22:23:e1:45:0c:cc:c0:a1:a7:41:1e:80:9b:5c:9a:
59:cf:66:e2:a8:01:4b:ac:23:54:92:48:e6:48:bd:60:30:6d:
e8:59:b7:a5:35:f2:c3:29:5a:62:da:8e:03:a9:43:78:d6:d4:
80:cc:3c:9a:2c:42:66:82:6e:eb:57:01:23:fa:a6:fb:50:3a:
49:99:e3:a7:b3:99:90:a7:de:d1:ac:2d:ec:bd:ae:bc:eb:3f:
f5:7c:e2:40:5e:c7:27:81:98:b0:f8:19:81:b4:e9:fb:8d:29:
68:da:ac:9a:7e:48:fd:b6:eb:6a:0d:5b:c3:d4:a0:f2:cd:c6:
40:d9:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:51 2025 by rpki-client