This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa
File: 3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier: AptZbWEZqKFJfN9bqXr8TiV7uKKyCZzrn9GjSo3ySZ8=
Subject key identifier: C5:DB:DB:A7:D0:BF:83:89:BB:42:76:F8:97:FF:95:58:2E:60:77:08
Certificate issuer: /CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Certificate serial: 7A6DAA81BE8F2A61437CF9AF01A6EDE132076E14
Authority key identifier: B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa
Signing time: Thu 20 Nov 2025 18:40:59 +0000
ROA not before: Thu 20 Nov 2025 18:35:59 +0000
ROA not after: Thu 19 Nov 2026 18:40:59 +0000
asID: 262530
IP address blocks: 170.247.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl
rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6d:aa:81:be:8f:2a:61:43:7c:f9:af:01:a6:ed:e1:32:07:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Validity
Not Before: Nov 20 18:35:59 2025 GMT
Not After : Nov 19 18:40:59 2026 GMT
Subject: CN=C5DBDBA7D0BF8389BB4276F897FF95582E607708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:12:fd:fa:88:81:5d:01:eb:6c:87:6a:24:
83:5a:0d:57:d5:9e:6c:fd:26:78:ce:c1:13:ed:f8:
d3:9e:9b:f3:d4:4c:24:c5:fc:05:2f:34:f7:58:40:
bc:93:e9:9a:8f:9b:30:49:71:98:58:c6:f2:5a:24:
19:32:c2:db:d3:ec:a7:21:f9:0c:05:34:ab:1f:77:
71:7a:2c:51:24:3c:c7:54:b5:33:3f:dc:7f:92:b4:
68:df:31:40:d6:70:79:73:67:d4:c8:65:70:e3:24:
9a:e5:f7:53:44:52:1c:73:b8:ef:99:dc:23:c3:85:
14:10:91:ba:70:7f:2d:c7:66:6e:26:87:a9:e5:2a:
ed:67:c5:05:af:ff:81:a6:12:51:8b:00:91:e5:04:
c6:63:32:f9:a5:8b:f4:5e:53:c9:9b:9d:89:ce:ab:
bc:c4:90:33:f1:ca:3d:31:22:70:45:4b:cd:77:90:
fb:51:f3:14:a0:0c:74:25:98:d7:fd:ca:2b:47:7d:
b6:fe:e0:34:58:9f:dc:fa:30:2b:84:4b:86:77:8f:
f7:22:9d:28:2e:ac:d9:3c:9c:8b:5c:45:c6:e0:1f:
ce:23:c3:88:a9:49:a7:44:80:78:0e:a9:a0:cd:2e:
5e:cc:f6:45:f6:88:df:03:f7:e5:e0:78:97:89:54:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:DB:A7:D0:BF:83:89:BB:42:76:F8:97:FF:95:58:2E:60:77:08
X509v3 Authority Key Identifier:
keyid:B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:a0:38:8d:a4:c7:0d:ab:33:1c:a9:f9:5d:6f:4a:29:ae:4f:
52:41:9f:0d:0b:7e:10:8e:44:0a:3b:dd:7a:6e:18:f5:f8:f6:
f2:39:29:58:b2:89:f5:95:f2:30:d9:ce:c0:0e:e6:bc:02:0c:
63:a0:bb:e1:6a:25:c7:87:c4:20:84:41:63:d9:4c:9b:e7:e1:
02:68:b3:c6:76:2b:bc:15:4f:6f:ab:54:a0:c7:ca:cc:00:0b:
02:2a:33:14:55:ad:8f:33:80:8b:8e:25:b4:92:9f:1f:1d:ca:
47:7a:23:40:3e:3c:4c:42:5a:e4:9a:2f:64:36:73:b6:c0:b2:
cc:fd:62:6d:16:d3:bb:f6:15:34:11:5f:15:49:30:ae:40:01:
f0:1f:15:67:63:f6:c4:8d:22:a9:c9:bd:35:08:c9:4d:a6:ab:
fc:d8:02:ac:96:9f:2b:b9:f8:87:08:53:3f:3c:d9:28:75:46:
99:cd:30:87:84:42:31:63:89:04:b2:a4:dd:da:9d:ce:52:8e:
c0:00:30:44:08:19:24:0a:4f:75:99:4b:c1:2d:79:8e:28:c6:
9b:2d:cc:fa:9d:41:37:59:3c:cd:31:62:d8:eb:45:4f:e5:b3:
a6:f9:66:5e:a1:75:59:fb:34:9f:65:56:96:f9:2e:df:04:9e:
08:cc:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:00 2025 by rpki-client