This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa
File: 3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa (raw, json)
Hash identifier: amg2tZMeG1fHBG46KAQM1tZm7W9r9eW4LybGfHFCMKY=
Subject key identifier: 8E:BA:70:04:36:1B:9E:81:1E:D1:DD:02:AC:2B:FC:3F:5C:47:5D:DD
Certificate issuer: /CN=9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244
Certificate serial: 43225136D8C9A9B2618142E7783DEA24298AF5
Authority key identifier: 9B:E6:EE:B5:B2:3D:DE:07:CD:98:C8:E0:E8:4C:9F:F0:A1:9D:42:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa
Signing time: Thu 20 Nov 2025 17:12:20 +0000
ROA not before: Thu 20 Nov 2025 17:07:20 +0000
ROA not after: Thu 19 Nov 2026 17:12:20 +0000
asID: 263526
IP address blocks: 168.227.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.crl
rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 12:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:22:51:36:d8:c9:a9:b2:61:81:42:e7:78:3d:ea:24:29:8a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244
Validity
Not Before: Nov 20 17:07:20 2025 GMT
Not After : Nov 19 17:12:20 2026 GMT
Subject: CN=8EBA7004361B9E811ED1DD02AC2BFC3F5C475DDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:09:8d:5b:65:f3:ce:d7:df:40:d8:37:b4:
a7:07:4f:69:09:6a:2e:99:d9:e1:4e:32:9d:05:48:
4c:4c:dd:94:fa:21:fa:4c:c3:43:a6:b9:7b:14:34:
8f:a2:f4:19:ed:71:e1:cd:04:27:29:fc:47:59:b3:
2e:9d:15:2e:0e:b2:96:c6:54:eb:01:00:ab:c5:80:
25:97:d4:fc:d5:1b:a7:62:f9:8f:a3:71:ad:05:90:
f5:af:d0:60:88:a9:86:20:9e:b5:25:1d:e3:02:51:
6b:8a:96:60:ef:bf:e9:77:05:4c:b6:31:c0:6e:de:
e1:23:ce:5c:dd:f2:a2:7f:8c:69:15:49:bf:80:df:
7b:7f:5d:4f:10:8b:ae:32:d3:cf:e8:8b:13:a3:f1:
de:2c:e0:48:fd:3a:db:2b:21:7a:02:1d:90:95:95:
3c:e0:45:16:ef:b6:cb:ff:c1:01:46:67:09:89:17:
12:46:04:78:e9:bf:bc:03:4b:88:2f:75:06:77:d0:
37:f4:99:fb:e4:b6:88:80:98:04:5c:9e:c2:43:b8:
c8:76:e6:fd:57:eb:3a:02:01:02:dc:54:c0:ae:87:
65:fa:ff:42:a0:d3:f0:eb:0b:8b:24:1e:49:bd:f3:
49:7a:1c:a6:52:b4:f2:ae:77:28:38:7a:ef:cf:51:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:70:04:36:1B:9E:81:1E:D1:DD:02:AC:2B:FC:3F:5C:47:5D:DD
X509v3 Authority Key Identifier:
keyid:9B:E6:EE:B5:B2:3D:DE:07:CD:98:C8:E0:E8:4C:9F:F0:A1:9D:42:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.136.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:6b:f0:d2:53:d7:6f:0d:72:5f:70:39:74:3f:5f:11:b1:e9:
cb:d7:15:c5:3c:d8:67:06:9e:4f:e4:64:65:ea:da:49:54:c2:
ca:2b:9e:19:a0:29:dd:e5:68:86:c2:c4:67:a0:62:36:14:5c:
df:fb:5e:9e:0d:52:5b:0f:7b:42:5d:03:26:a4:dd:0e:fa:92:
66:4e:20:1c:b3:37:22:71:a5:f8:ce:71:e0:dc:91:c5:bc:0c:
ea:26:32:0b:9b:9b:5a:d8:41:e1:b9:14:c4:bd:67:df:65:b2:
bc:e5:4a:b2:ef:05:c6:56:cf:dc:90:8b:31:4a:27:20:38:c9:
ce:36:32:33:fd:bb:a5:20:95:2b:98:2d:79:80:1b:70:d1:30:
3a:ac:3c:da:e0:36:8b:f5:19:61:7f:dd:bb:80:62:dc:2c:8b:
4c:c9:ff:32:01:de:9c:2f:77:8c:ba:f3:29:47:90:ea:71:59:
fc:b5:35:96:f0:1b:f0:ba:e5:7d:c3:bd:29:6b:11:64:ed:93:
de:0b:54:9d:57:ff:b4:a8:73:a7:32:2f:7b:bf:5e:8d:55:a9:
74:cc:aa:73:35:60:1e:a2:a2:8d:58:a9:e1:7e:92:6c:f0:cf:
e7:a6:f1:b7:7a:de:25:7d:72:90:f1:1a:20:dc:c5:4f:a3:bc:
5a:d4:6e:60
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITQyJRNtjJqbJhgULneD3qJCmK9TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg5QkU2RUVCNUIyM0RERTA3Q0Q5OEM4RTBFODRDOUZGMEEx
OUQ0MjQ0MB4XDTI1MTEyMDE3MDcyMFoXDTI2MTExOTE3MTIyMFowMzExMC8GA1UE
AxMoOEVCQTcwMDQzNjFCOUU4MTFFRDFERDAyQUMyQkZDM0Y1QzQ3NURERDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMAVCY1bZfPO199A2De0pwdPaQlq
LpnZ4U4ynQVITEzdlPoh+kzDQ6a5exQ0j6L0Ge1x4c0EJyn8R1mzLp0VLg6ylsZU
6wEAq8WAJZfU/NUbp2L5j6NxrQWQ9a/QYIiphiCetSUd4wJRa4qWYO+/6XcFTLYx
wG7e4SPOXN3yon+MaRVJv4Dfe39dTxCLrjLTz+iLE6Px3izgSP062yshegIdkJWV
POBFFu+2y//BAUZnCYkXEkYEeOm/vANLiC91BnfQN/SZ++S2iICYBFyewkO4yHbm
/VfrOgIBAtxUwK6HZfr/QqDT8OsLiyQeSb3zSXocplK08q53KDh6789R8wsCAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBSOunAENhuegR7R3QKsK/w/XEdd3TAfBgNVHSME
GDAWgBSb5u61sj3eB82YyODoTJ/woZ1CRDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby85ampmTXhxS1VNSzQ2ZWJ5ZFZBanJUWFRleGlFR25IakJoR1ZhVVdWcGNh
cS8wLzlCRTZFRUI1QjIzRERFMDdDRDk4QzhFMEU4NEM5RkYwQTE5RDQyNDQuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvOUJFNkVFQjVCMjNEREUwN0NE
OThDOEUwRTg0QzlGRjBBMTlENDI0NC5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBjYXEvMC8z
MTM2MzgyZTMyMzIzNzJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIz
NjMzMzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCqOOIMA0GCSqGSIb3DQEBCwUAA4IBAQBra/DS
U9dvDXJfcDl0P18RsenL1xXFPNhnBp5P5GRl6tpJVMLKK54ZoCnd5WiGwsRnoGI2
FFzf+16eDVJbD3tCXQMmpN0O+pJmTiAcszcicaX4znHg3JHFvAzqJjILm5ta2EHh
uRTEvWffZbK85Uqy7wXGVs/ckIsxSicgOMnONjIz/bulIJUrmC15gBtw0TA6rDza
4DaL9Rlhf927gGLcLItMyf8yAd6cL3eMuvMpR5DqcVn8tTWW8BvwuuV9w70paxFk
7ZPeC1SdV/+0qHOnMi97v16NVal0zKpzNWAeoqKNWKnhfpJs8M/npvG3et4lfXKQ
8Rog3MVPo7xa1G5g
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:16 2025 by rpki-client