This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa
File: 3230312e3134382e39362e302f32322d3234203d3e203631383534.roa (raw, json)
Hash identifier: 4Mrc+yIG96wcW1AFTEcK+edOUAFsXQV4Igw03T76Nuc=
Subject key identifier: 72:68:7B:D4:91:D1:E7:F3:A5:C4:94:99:E7:A2:9B:B8:28:32:3E:22
Certificate issuer: /CN=7182A558E7EB248707BE29D291D0D4A0CEE8BDC5
Certificate serial: 4ACB076972F4E08DECDAE8B9498D6B3A1AF877F6
Authority key identifier: 71:82:A5:58:E7:EB:24:87:07:BE:29:D2:91:D0:D4:A0:CE:E8:BD:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa
Signing time: Mon 24 Nov 2025 15:11:36 +0000
ROA not before: Mon 24 Nov 2025 15:06:36 +0000
ROA not after: Mon 23 Nov 2026 15:11:36 +0000
asID: 61854
IP address blocks: 201.148.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.crl
rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 01:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:cb:07:69:72:f4:e0:8d:ec:da:e8:b9:49:8d:6b:3a:1a:f8:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7182A558E7EB248707BE29D291D0D4A0CEE8BDC5
Validity
Not Before: Nov 24 15:06:36 2025 GMT
Not After : Nov 23 15:11:36 2026 GMT
Subject: CN=72687BD491D1E7F3A5C49499E7A29BB828323E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:f8:5e:7e:4f:dd:91:d9:2b:6d:98:e6:5b:
b3:12:15:03:bb:18:9d:d8:ce:94:6c:94:d0:85:df:
2c:94:d5:c1:26:dc:54:44:fb:9e:55:1b:18:d7:f1:
86:08:32:eb:10:1a:cf:12:1f:1e:de:20:05:f2:7c:
73:9e:41:99:18:83:68:8b:24:77:78:83:7e:85:9c:
1f:43:88:91:65:fd:08:7f:1c:e3:f4:95:be:41:53:
e3:bd:5f:5b:8a:50:4c:11:2f:02:89:fd:2d:97:df:
06:66:b7:44:6d:04:f6:8a:9e:71:1e:fd:8e:d2:1b:
f0:e4:93:a2:de:3e:5b:85:92:10:09:39:51:9b:7d:
f6:56:e9:a9:5c:c6:ae:8c:f9:5f:a6:1a:f1:b2:98:
47:c1:f6:eb:5e:d2:2f:b8:4b:f0:02:36:23:2c:10:
a6:8e:4a:29:20:86:87:1f:49:bb:26:b9:f3:3a:f5:
29:52:ba:d9:a3:3f:ab:65:6f:45:9b:db:fc:68:99:
ec:e9:81:90:23:53:b9:0d:34:5e:63:27:49:5c:a3:
66:06:b0:6c:33:c3:ac:e5:59:00:81:03:88:19:1c:
de:2a:59:46:87:86:da:2e:73:c7:75:f7:b2:c2:c0:
8d:43:94:66:44:49:27:93:68:fd:a1:12:bb:4b:a7:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:7B:D4:91:D1:E7:F3:A5:C4:94:99:E7:A2:9B:B8:28:32:3E:22
X509v3 Authority Key Identifier:
keyid:71:82:A5:58:E7:EB:24:87:07:BE:29:D2:91:D0:D4:A0:CE:E8:BD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.148.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e6:e4:74:44:0e:96:f0:63:3d:e2:93:ee:e9:a5:ed:d5:5b:
e1:ef:2a:c8:60:ae:6f:55:c5:d6:05:3d:ae:bf:ec:1d:2e:9f:
ef:c8:ab:e6:22:ae:cf:2f:9e:b0:65:e0:14:42:7f:08:1b:6c:
a0:06:73:9c:a7:6d:1d:d2:13:bd:0c:bc:93:43:41:ed:ea:9c:
7d:f2:0f:85:47:66:17:fb:9b:a1:27:0c:3b:d7:90:f9:1e:ea:
95:eb:e7:1a:c3:a8:9c:fd:53:2e:85:ef:9e:80:fd:29:7d:1c:
57:f7:d0:95:35:64:27:08:24:1f:72:93:7f:78:3b:fa:5d:3e:
94:7c:67:13:15:4b:6d:2e:b5:75:ef:05:39:cc:c9:ec:00:5b:
1d:de:9e:40:e7:e4:cd:54:7f:e3:82:75:e3:6e:20:63:38:45:
ee:d7:bf:f7:8c:5b:fb:91:07:8a:2a:03:a0:3a:4b:db:72:2f:
39:29:ef:43:a1:b6:cf:2f:0b:2a:f5:75:c1:d9:96:05:d5:51:
c8:3c:ea:57:57:7e:7b:5e:3f:91:8c:2c:9e:2f:dd:36:56:db:
01:36:8e:e8:ba:4d:4a:7e:d3:43:04:5b:68:a7:ea:bb:5b:2e:
77:9c:3d:0d:56:69:b7:2d:05:a9:d5:f9:ee:7c:29:34:1d:57:
be:94:26:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSssHaXL04I3s2ui5SY1rOhr4d/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4MkE1NThFN0VCMjQ4NzA3QkUyOUQyOTFEMEQ0QTBD
RUU4QkRDNTAeFw0yNTExMjQxNTA2MzZaFw0yNjExMjMxNTExMzZaMDMxMTAvBgNV
BAMTKDcyNjg3QkQ0OTFEMUU3RjNBNUM0OTQ5OUU3QTI5QkI4MjgzMjNFMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46fhefk/dkdkrbZjmW7MSFQO7
GJ3YzpRslNCF3yyU1cEm3FRE+55VGxjX8YYIMusQGs8SHx7eIAXyfHOeQZkYg2iL
JHd4g36FnB9DiJFl/Qh/HOP0lb5BU+O9X1uKUEwRLwKJ/S2X3wZmt0RtBPaKnnEe
/Y7SG/Dkk6LePluFkhAJOVGbffZW6alcxq6M+V+mGvGymEfB9ute0i+4S/ACNiMs
EKaOSikghocfSbsmufM69SlSutmjP6tlb0Wb2/xomezpgZAjU7kNNF5jJ0lco2YG
sGwzw6zlWQCBA4gZHN4qWUaHhtouc8d197LCwI1DlGZESSeTaP2hErtLp0oVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcmh71JHR5/OlxJSZ56KbuCgyPiIwHwYDVR0j
BBgwFoAUcYKlWOfrJIcHvinSkdDUoM7ovcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWhlYlJYQURoaXJ2ckZDWk5Cb3FpWWtBVHdnY2NhdEJIRUd0dlVFR3oz
TkcvMC83MTgyQTU1OEU3RUIyNDg3MDdCRTI5RDI5MUQwRDRBMENFRThCREM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxODJBNTU4RTdFQjI0ODcw
N0JFMjlEMjkxRDBENEEwQ0VFOEJEQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzloZWJSWEFEaGlydnJGQ1pOQm9xaVlrQVR3Z2NjYXRCSEVHdHZVRUd6M05HLzAv
MzIzMDMxMmUzMTM0MzgyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzgzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyZRgMA0GCSqGSIb3DQEBCwUAA4IBAQAr5uR0RA6W
8GM94pPu6aXt1Vvh7yrIYK5vVcXWBT2uv+wdLp/vyKvmIq7PL56wZeAUQn8IG2yg
BnOcp20d0hO9DLyTQ0Ht6px98g+FR2YX+5uhJww715D5HuqV6+caw6ic/VMuhe+e
gP0pfRxX99CVNWQnCCQfcpN/eDv6XT6UfGcTFUttLrV17wU5zMnsAFsd3p5A5+TN
VH/jgnXjbiBjOEXu17/3jFv7kQeKKgOgOkvbci85Ke9DobbPLwsq9XXB2ZYF1VHI
POpXV357Xj+RjCyeL902VtsBNo7ouk1KftNDBFtop+q7Wy53nD0NVmm3LQWp1fnu
fCk0HVe+lCaG
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:43 2025 by rpki-client