This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa
File: 3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa (raw, json)
Hash identifier: 0rYU/2lkDY1dc8lm+9sybmIz9OPP/z+dPQZmRqzzFto=
Subject key identifier: CD:0F:31:89:07:38:44:62:45:E4:39:7F:61:B9:CD:38:A3:0A:2A:DB
Certificate issuer: /CN=6649D462B62A954091EA975AB9273AD49F359F63
Certificate serial: 6BA27A820F5DBC1185C327E77CD1B496E151ACEE
Authority key identifier: 66:49:D4:62:B6:2A:95:40:91:EA:97:5A:B9:27:3A:D4:9F:35:9F:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa
Signing time: Thu 04 Dec 2025 13:07:18 +0000
ROA not before: Thu 04 Dec 2025 13:02:18 +0000
ROA not after: Thu 03 Dec 2026 13:07:18 +0000
asID: 268605
IP address blocks: 190.111.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.crl
rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 19:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a2:7a:82:0f:5d:bc:11:85:c3:27:e7:7c:d1:b4:96:e1:51:ac:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6649D462B62A954091EA975AB9273AD49F359F63
Validity
Not Before: Dec 4 13:02:18 2025 GMT
Not After : Dec 3 13:07:18 2026 GMT
Subject: CN=CD0F31890738446245E4397F61B9CD38A30A2ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:f0:7d:46:b7:48:7b:8b:2a:7c:1d:01:70:
9c:de:1a:20:32:a8:96:73:a4:c4:52:da:f5:02:bf:
fb:4c:eb:31:23:c7:72:d2:8f:7e:e9:46:36:71:27:
ef:34:5b:34:48:29:d6:6d:ef:3d:39:3e:7a:94:f2:
bc:02:82:4d:4d:4e:f4:da:28:85:5d:5b:dc:65:ef:
24:73:d8:bb:fb:cd:42:84:3a:b3:58:c0:5d:f4:cd:
9a:a6:af:2d:39:e7:41:f1:d9:f7:79:c0:bb:dd:8d:
7f:46:8e:59:b8:4b:86:b3:b9:48:fb:6f:26:e4:c9:
16:e1:b8:30:64:22:06:6a:3a:d7:6e:b2:3d:71:80:
26:91:d4:b9:8c:56:d2:df:71:24:c4:9d:39:f9:c6:
fc:ec:37:1f:77:c3:96:bd:51:ad:64:73:50:a8:a5:
bf:86:37:d3:16:ce:ea:8a:b5:85:35:3e:dd:51:fb:
22:65:62:da:ee:ad:81:3b:c6:39:45:b6:ea:a2:b3:
b3:6c:18:a8:bd:cb:91:ea:a6:2c:bb:a3:df:48:62:
f2:65:c6:aa:f2:76:24:d0:f8:73:4d:44:ef:f4:53:
c6:61:45:f4:a8:b5:23:04:2a:06:5a:3b:89:67:77:
33:8a:a6:6b:f9:ce:d0:be:9f:be:90:15:e7:85:cf:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0F:31:89:07:38:44:62:45:E4:39:7F:61:B9:CD:38:A3:0A:2A:DB
X509v3 Authority Key Identifier:
keyid:66:49:D4:62:B6:2A:95:40:91:EA:97:5A:B9:27:3A:D4:9F:35:9F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.159.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b6:1c:0a:22:df:9e:ef:d8:9d:5f:c0:28:52:de:fe:d5:16:
5a:13:4d:4a:33:37:1b:42:9f:c1:e5:0c:45:2b:16:b5:73:36:
a1:ab:be:28:6a:89:62:44:ac:29:bc:2d:24:94:72:1e:8f:a3:
aa:59:dd:28:08:ad:0c:c8:08:3c:1b:99:65:23:c0:f3:44:13:
59:50:f0:73:b6:da:ce:b6:5b:9e:78:2e:e7:c4:0c:12:c5:6b:
b5:6a:5f:ed:b7:13:53:eb:00:ff:c3:7f:ec:db:6d:7f:83:63:
df:27:b5:46:31:b1:39:b1:60:32:ee:9e:8f:c3:6b:d8:30:ba:
0e:d8:9e:9e:6e:9d:b5:0d:b8:bd:40:46:84:cd:0b:31:02:c2:
95:8a:ed:c3:18:b6:87:63:6d:84:c6:c2:c7:44:9e:81:52:bc:
95:7e:7b:ab:cc:e2:b8:9d:ad:87:c7:82:59:83:f3:c8:38:8e:
68:cd:31:9b:43:3e:ea:59:17:8d:ac:00:77:6c:1b:5c:6e:48:
e5:7a:de:96:5b:35:3c:cf:40:13:4d:46:1e:3f:b2:c2:53:df:
cc:56:b6:4e:d3:b4:22:b5:0d:60:73:c1:e4:7a:76:4a:91:10:
bd:1c:46:18:1b:ee:19:33:a1:36:e4:93:8a:3f:7b:16:d0:c4:
93:d0:83:a1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa6J6gg9dvBGFwyfnfNG0luFRrO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0OUQ0NjJCNjJBOTU0MDkxRUE5NzVBQjkyNzNBRDQ5
RjM1OUY2MzAeFw0yNTEyMDQxMzAyMThaFw0yNjEyMDMxMzA3MThaMDMxMTAvBgNV
BAMTKENEMEYzMTg5MDczODQ0NjI0NUU0Mzk3RjYxQjlDRDM4QTMwQTJBREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnPB9RrdIe4sqfB0BcJzeGiAy
qJZzpMRS2vUCv/tM6zEjx3LSj37pRjZxJ+80WzRIKdZt7z05PnqU8rwCgk1NTvTa
KIVdW9xl7yRz2Lv7zUKEOrNYwF30zZqmry0550Hx2fd5wLvdjX9Gjlm4S4azuUj7
bybkyRbhuDBkIgZqOtdusj1xgCaR1LmMVtLfcSTEnTn5xvzsNx93w5a9Ua1kc1Co
pb+GN9MWzuqKtYU1Pt1R+yJlYtrurYE7xjlFtuqis7NsGKi9y5Hqpiy7o99IYvJl
xqrydiTQ+HNNRO/0U8ZhRfSotSMEKgZaO4lndzOKpmv5ztC+n76QFeeFz4eVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzQ8xiQc4RGJF5Dl/YbnNOKMKKtswHwYDVR0j
BBgwFoAUZknUYrYqlUCR6pdauSc61J81n2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWRaekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFr
VEwvMC82NjQ5RDQ2MkI2MkE5NTQwOTFFQTk3NUFCOTI3M0FENDlGMzU5RjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NDlENDYyQjYyQTk1NDA5
MUVBOTc1QUI5MjczQUQ0OUYzNTlGNjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkWnpBdFBQWkJEd1BxaFVFaEdidzJlZUZCcjVaaGluc3lGdzhKeHhxa1RMLzAv
MzEzOTMwMmUzMTMxMzEyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzODM2MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5vnzANBgkqhkiG9w0BAQsFAAOCAQEAZ7Yc
CiLfnu/YnV/AKFLe/tUWWhNNSjM3G0KfweUMRSsWtXM2oau+KGqJYkSsKbwtJJRy
Ho+jqlndKAitDMgIPBuZZSPA80QTWVDwc7bazrZbnngu58QMEsVrtWpf7bcTU+sA
/8N/7Nttf4Nj3ye1RjGxObFgMu6ej8Nr2DC6Dtienm6dtQ24vUBGhM0LMQLClYrt
wxi2h2NthMbCx0SegVK8lX57q8ziuJ2th8eCWYPzyDiOaM0xm0M+6lkXjawAd2wb
XG5I5Xrells1PM9AE01GHj+ywlPfzFa2TtO0IrUNYHPB5Hp2SpEQvRxGGBvuGTOh
NuSTij97FtDEk9CDoQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:27 2025 by rpki-client