This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa
File: 3137372e3132342e33362e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier: cn/0TbLei0jXQiMpOXshPDeTrbS8+O28jbH3RVp1Gro=
Subject key identifier: F8:94:40:FC:3B:EF:B8:4C:41:D5:E5:99:A6:4A:58:41:B3:4C:DC:5E
Certificate issuer: /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial: 2B98092B0A849BD6B0BC22E06BB595A1F76EB4BB
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa
Signing time: Tue 25 Nov 2025 14:46:55 +0000
ROA not before: Tue 25 Nov 2025 14:41:55 +0000
ROA not after: Tue 24 Nov 2026 14:46:55 +0000
asID: 52861
IP address blocks: 177.124.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:98:09:2b:0a:84:9b:d6:b0:bc:22:e0:6b:b5:95:a1:f7:6e:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Validity
Not Before: Nov 25 14:41:55 2025 GMT
Not After : Nov 24 14:46:55 2026 GMT
Subject: CN=F89440FC3BEFB84C41D5E599A64A5841B34CDC5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:d9:5b:3e:5f:54:c0:8f:1b:2e:62:e8:49:
07:fb:95:d9:41:1b:cc:61:d2:4b:40:90:d0:0e:69:
f2:36:ad:76:fc:31:45:74:35:78:cf:98:cc:c5:9a:
e9:85:79:2b:11:46:a7:ab:cb:99:72:d8:06:b2:02:
32:f7:85:8b:0d:99:e3:57:cf:64:47:83:74:9c:4d:
3e:e0:5c:f3:cc:8b:ae:33:28:a4:57:d3:35:ad:f3:
b6:1a:74:70:59:a9:8e:72:a8:85:5f:56:48:2d:e8:
3e:77:b8:9f:7e:a2:cc:ff:1d:1f:63:dc:6b:6b:7d:
6d:d7:4d:2e:d6:95:ef:3a:d6:c3:33:44:8e:9a:d5:
82:a3:bc:db:29:0a:e5:59:4a:03:ee:d9:4b:0c:50:
a7:ea:a8:35:f0:44:b7:11:32:67:71:30:5d:4d:48:
b4:2c:0b:ef:55:8f:24:bd:04:fc:4a:50:b2:75:7b:
0e:97:5f:c6:11:a5:17:af:32:13:31:57:c1:67:58:
a8:18:32:ce:2c:89:2e:7d:09:e3:ed:b3:e8:9e:80:
a6:ea:71:0d:44:1e:9f:06:00:43:28:04:23:61:67:
bf:99:a5:04:21:20:91:c5:02:e6:fa:58:39:39:fb:
3a:61:f3:0b:25:c9:d7:49:e4:3a:d5:b2:6e:26:4a:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:40:FC:3B:EF:B8:4C:41:D5:E5:99:A6:4A:58:41:B3:4C:DC:5E
X509v3 Authority Key Identifier:
keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:d9:7f:06:cf:da:02:0a:38:0b:46:fa:70:b2:29:c9:da:ee:
f5:fc:24:4c:4a:03:15:d2:72:11:06:e7:9e:ec:02:74:ea:4b:
9b:87:28:3d:41:39:22:8d:a9:df:c2:34:b6:59:62:fa:e8:40:
95:da:9e:f9:a4:46:f9:c1:63:d4:5d:14:2b:88:d8:3a:42:66:
1a:d6:0f:71:40:b0:a3:6d:5b:12:7f:93:79:e5:cb:70:9d:a6:
3d:54:0e:ca:bb:ed:3a:f4:f0:04:a1:12:c1:d7:39:ba:59:2c:
dd:4e:99:da:73:df:0f:36:4b:70:c6:bd:b6:23:3a:3b:8e:cf:
72:e4:e4:d2:af:34:e9:df:c1:36:5a:90:6b:18:a3:22:12:03:
5b:8b:35:34:6e:aa:ab:2e:ef:93:35:ae:d4:e3:1c:c8:10:ff:
d3:76:de:d4:1d:2f:c5:7d:dd:5b:a4:cf:89:da:39:a7:ea:70:
c8:9e:52:a8:44:dc:c4:a0:3b:7c:8f:78:72:31:86:fe:42:ba:
e0:34:3c:7d:a0:31:e9:37:75:d0:d8:39:70:e5:63:ae:6b:56:
0a:af:74:90:11:85:95:9b:dd:44:72:95:75:88:39:65:4a:2f:
34:c5:4d:59:a5:c7:2e:aa:c2:27:e7:d9:20:7f:99:94:9c:0f:
d8:8f:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:26 2025 by rpki-client