This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131322e302f32312d3231203d3e203532363030.roa
File: 3137372e3133372e3131322e302f32312d3231203d3e203532363030.roa (raw, json)
Hash identifier: OOZDVBbNmjm3ya38QWjTi4DBeuvc6SN9GP+qjy9kVM0=
Subject key identifier: 8A:32:5F:E6:C4:0D:04:DA:7A:CD:67:47:6F:6D:27:83:E9:D0:47:F5
Certificate issuer: /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Certificate serial: 5247B27D1615AA114F8784AA5FFDAB7D289A062C
Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131322e302f32312d3231203d3e203532363030.roa
Signing time: Mon 17 Nov 2025 12:55:34 +0000
ROA not before: Mon 17 Nov 2025 12:50:34 +0000
ROA not after: Mon 16 Nov 2026 12:55:34 +0000
asID: 52600
IP address blocks: 177.137.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 05:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:47:b2:7d:16:15:aa:11:4f:87:84:aa:5f:fd:ab:7d:28:9a:06:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Validity
Not Before: Nov 17 12:50:34 2025 GMT
Not After : Nov 16 12:55:34 2026 GMT
Subject: CN=8A325FE6C40D04DA7ACD67476F6D2783E9D047F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:3c:94:be:6e:2e:d9:7d:fa:dc:81:6b:1e:
6f:08:de:59:46:99:0d:a5:35:1d:9e:70:72:ee:c3:
39:58:38:5c:ae:fa:e1:58:cd:0e:a8:e1:01:d2:63:
b0:53:d7:1f:41:fe:20:c4:7d:62:0a:23:36:d5:9b:
79:8e:bf:6e:8e:5a:29:1a:b1:36:94:d7:ec:78:96:
b7:ef:7f:94:c3:52:a0:3e:87:d0:e0:b0:38:eb:86:
1b:62:59:06:e7:d2:43:97:dd:91:72:93:a9:76:e1:
b0:54:7e:21:21:c2:4e:b4:88:c4:2f:b7:a1:6d:5a:
8c:d6:ff:94:28:7c:9b:d4:5a:1c:c1:97:31:a4:a6:
fd:c3:9d:1b:9a:a1:41:76:75:50:17:e2:50:81:c0:
c0:5f:0e:69:c7:0e:a5:b0:6d:af:15:5c:3d:08:0d:
2b:83:7c:25:20:15:4a:a1:d3:77:ae:f6:50:7d:20:
5f:5b:82:e0:cc:41:44:bd:fc:3a:4a:31:42:4e:09:
b1:2b:b4:dd:4a:6d:4d:79:ea:d8:d5:b4:7a:da:ec:
dd:a6:70:ee:80:2c:f7:ff:20:48:c9:de:f9:69:80:
9a:d0:88:1d:e3:f9:21:b0:6c:df:7b:18:7a:48:ab:
e9:ca:7f:13:15:2f:33:ad:86:42:b7:ac:72:39:0b:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:5F:E6:C4:0D:04:DA:7A:CD:67:47:6F:6D:27:83:E9:D0:47:F5
X509v3 Authority Key Identifier:
keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131322e302f32312d3231203d3e203532363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:b1:ae:44:23:de:ad:d3:3d:36:b5:77:5f:e8:a9:0c:03:99:
0d:b1:b6:c3:24:99:82:9f:43:e1:d3:6a:d5:0b:45:7b:40:67:
59:fc:60:35:70:a1:bb:39:87:da:dd:8b:2d:bc:00:e4:54:f6:
be:0f:7b:66:d3:e0:3a:0b:6b:bd:29:21:e1:c9:6e:ef:06:2a:
ae:5f:d9:a9:09:b7:d9:cc:e4:36:8c:72:f8:71:1f:5f:5b:57:
85:ff:0f:8e:1a:2d:33:f2:b2:9b:b0:09:16:77:94:6b:a1:24:
4f:90:1e:43:a1:95:60:54:3d:b2:52:df:92:6e:37:a0:95:21:
d0:9f:c4:71:a8:f0:d2:d6:cc:a3:1f:9e:c0:4a:29:ea:4e:73:
71:42:eb:b7:9e:fb:57:9d:26:13:0b:b7:7d:38:64:e2:cb:42:
94:ac:54:43:b6:9a:0a:2d:64:32:76:89:5c:05:75:05:02:48:
74:04:ec:45:b1:d0:9e:e4:27:86:b5:b3:f0:98:b4:e4:80:26:
b8:fa:8f:ae:29:b9:53:5f:88:6d:4d:18:f4:39:f6:32:2e:39:
c8:08:32:c2:68:08:9e:1d:16:09:dd:64:1e:19:d0:94:be:f0:
a7:b0:b4:57:70:1e:09:c8:ee:85:d3:74:a1:c9:12:be:42:b1:
62:38:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:09:14 2025 by rpki-client