This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa
File: 3137372e3132342e33322e302f32312d3231203d3e203532383631.roa (raw, json)
Hash identifier: EATYNgSvzKL/f5Z13fVXDIW2ec9v/gRu/ytFYRQuBeU=
Subject key identifier: 45:51:4E:07:74:4B:6C:AA:B5:94:E4:C3:36:AA:DF:03:F4:E9:9D:D7
Certificate issuer: /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial: 40795B38452C1FD1D26B088DCC13909978A479EC
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa
Signing time: Tue 25 Nov 2025 14:46:55 +0000
ROA not before: Tue 25 Nov 2025 14:41:55 +0000
ROA not after: Tue 24 Nov 2026 14:46:55 +0000
asID: 52861
IP address blocks: 177.124.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:79:5b:38:45:2c:1f:d1:d2:6b:08:8d:cc:13:90:99:78:a4:79:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Validity
Not Before: Nov 25 14:41:55 2025 GMT
Not After : Nov 24 14:46:55 2026 GMT
Subject: CN=45514E07744B6CAAB594E4C336AADF03F4E99DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:4e:00:98:a1:49:8b:29:ba:9b:a6:7d:63:
02:4e:07:35:21:f3:15:f7:83:f9:35:51:ed:74:fb:
f0:7b:62:5a:61:f9:43:05:b1:8b:e0:79:4f:46:51:
8f:3c:59:f6:40:a1:13:55:e0:d0:cf:5a:87:bb:b5:
2a:67:37:90:58:fa:07:37:d7:5a:f7:86:4a:7b:72:
de:87:35:a1:d9:fe:11:92:85:80:a1:45:51:bf:32:
48:03:f1:be:f4:12:bd:19:a9:84:d3:4b:3f:30:91:
48:f9:26:6d:28:ff:e1:77:b9:3f:5d:be:54:4b:99:
f4:16:56:d4:30:cb:6c:c5:c9:9f:87:ec:2b:7a:f9:
c9:69:23:bd:af:53:f0:06:05:84:11:15:ca:fb:3c:
ee:2b:ac:75:70:6c:66:1f:c2:58:9a:a7:10:ea:ba:
e9:ce:00:ee:c8:da:2d:54:32:14:50:40:9f:b1:92:
96:49:59:73:ba:78:4d:54:60:51:95:f4:b7:88:d3:
ce:e4:00:8b:1c:3d:67:64:f2:55:63:8a:de:3c:5e:
f5:25:35:a9:1f:fb:35:79:93:14:47:18:2b:eb:c4:
20:76:1f:55:ab:e4:98:dc:fe:64:5e:7d:12:20:07:
dd:26:43:ce:53:e6:58:d5:a9:f9:0e:3a:d0:92:30:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:4E:07:74:4B:6C:AA:B5:94:E4:C3:36:AA:DF:03:F4:E9:9D:D7
X509v3 Authority Key Identifier:
keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.32.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:bc:44:32:d9:69:bc:d2:bf:97:af:80:81:5f:22:2a:c8:a9:
8c:49:95:10:f7:88:f8:90:c6:8d:6b:5e:f8:2f:6e:a2:cd:d0:
54:ac:25:fd:8c:aa:36:67:b2:d3:89:81:ee:eb:a6:3e:1f:06:
2b:d4:8a:0b:67:26:15:6c:7b:47:2c:14:ce:e8:83:0c:95:0d:
3a:a5:06:e5:f0:9b:c4:8b:12:81:33:37:7f:0f:a9:e6:35:27:
b2:7a:24:4e:16:94:91:84:13:fc:61:27:46:0a:f9:ea:10:0b:
81:76:72:8d:11:dd:0c:ee:c9:34:05:f4:65:68:75:15:60:dc:
52:d6:c7:a6:cf:3c:30:1d:0a:c7:86:ed:6c:1f:78:60:4d:70:
15:5b:9a:07:ec:23:d3:e3:df:5a:3f:3f:29:f7:6b:56:1a:3b:
10:fd:a5:76:6f:00:9c:3b:15:f9:4b:19:45:86:58:6b:0f:29:
c9:6c:c8:30:4c:52:75:51:96:3c:e5:1f:8e:99:5f:ce:8f:5d:
2d:8b:68:e7:8d:fd:42:9c:e2:ef:93:f1:8b:49:6d:8f:b9:52:
88:fb:b7:29:5e:a8:6c:db:33:36:66:e2:ce:10:d3:60:4f:5f:
06:24:d9:41:d6:39:5e:c7:95:0c:72:40:fc:74:45:af:f1:5d:
42:50:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:09 2025 by rpki-client