This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa
File: 3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa (raw, json)
Hash identifier: VcZtae4V8vmmNeAZ9IBe8oO332eSlH4069zbiIxe6/s=
Subject key identifier: B9:45:AE:01:7B:EB:27:2C:F6:88:91:DE:9D:E6:DC:54:66:78:D1:EB
Certificate issuer: /CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
Certificate serial: 7CBEA1B1111316C132508E621985354680C18CE0
Authority key identifier: 0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa
Signing time: Mon 22 Dec 2025 13:11:47 +0000
ROA not before: Mon 22 Dec 2025 13:06:47 +0000
ROA not after: Mon 21 Dec 2026 13:11:47 +0000
asID: 270611
IP address blocks: 187.17.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl
rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 18:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:be:a1:b1:11:13:16:c1:32:50:8e:62:19:85:35:46:80:c1:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
Validity
Not Before: Dec 22 13:06:47 2025 GMT
Not After : Dec 21 13:11:47 2026 GMT
Subject: CN=B945AE017BEB272CF68891DE9DE6DC546678D1EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:a4:a7:50:71:55:34:82:1d:3b:7e:c8:3c:
21:fa:9e:1a:c8:f9:bd:f5:d3:9c:1c:e2:c8:7b:61:
56:bd:12:39:52:24:43:0e:13:dc:2b:11:b5:11:07:
30:f3:ee:09:89:db:7e:6b:5d:bb:12:a6:df:12:59:
19:0b:cf:de:a3:5a:69:8a:9a:9c:83:2c:66:2d:62:
a8:c3:ec:c7:93:af:f1:19:93:fd:a1:36:dc:ca:81:
10:03:74:c4:9a:e2:1c:36:a2:58:13:c4:7f:49:51:
88:f9:01:46:5c:18:53:9d:c8:de:af:06:36:76:63:
95:a9:a8:4a:3e:40:49:96:68:c6:fc:21:a0:0d:5a:
c1:30:c6:4c:ad:dc:ca:bf:0c:00:1e:34:37:33:54:
41:5b:0e:3a:4b:6e:7e:59:1f:ea:82:66:e3:39:fb:
95:e1:c1:3a:73:70:65:91:02:b9:62:59:05:c3:df:
46:70:6f:7c:a1:0d:51:e6:91:de:47:17:cf:4d:4d:
00:35:cf:6f:3d:90:1e:8b:be:8b:3a:ac:fe:a1:e7:
ad:34:94:cc:96:b4:10:94:99:8e:cd:18:13:40:c9:
0c:70:89:07:ef:96:3d:51:a4:e2:73:61:0e:0d:24:
3c:ae:38:e4:da:22:b1:e7:61:6d:51:db:77:51:9a:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:AE:01:7B:EB:27:2C:F6:88:91:DE:9D:E6:DC:54:66:78:D1:EB
X509v3 Authority Key Identifier:
keyid:0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.17.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:0c:32:71:27:d1:a2:a0:50:60:0e:ff:32:17:8a:9b:d4:64:
18:12:5d:2f:4f:ce:bd:17:17:de:1e:60:88:fd:e1:d2:76:fa:
ad:5c:7e:d5:56:d4:ed:5b:0b:b6:59:85:62:0b:43:fd:92:29:
88:3e:54:2e:7f:7a:5b:cd:35:85:c9:7d:46:3b:cf:28:d2:88:
88:80:9e:77:70:d6:96:57:60:7a:35:b5:d1:23:e9:48:bf:05:
6c:d2:07:e3:2b:f4:88:03:30:ca:ef:7b:a1:d1:72:3d:43:9a:
d4:9e:c6:7c:fd:d7:01:22:4f:4e:f2:a0:fb:d0:c3:87:65:19:
75:e7:42:4a:73:72:8c:2c:39:c9:68:91:53:55:a8:b4:04:25:
2f:3c:ec:28:18:f5:05:4c:32:67:2c:55:0d:a0:bb:64:12:1b:
18:7b:23:75:6e:7e:9e:df:73:a8:bd:82:bf:aa:98:64:bf:de:
7f:73:ee:91:f8:ac:bc:11:f3:00:f8:a9:4d:c9:03:a8:f5:f9:
3f:1c:a1:6f:04:b6:d2:dc:80:aa:56:57:fb:be:a9:da:fb:20:
f0:b9:11:b2:d2:80:a3:19:05:52:11:19:57:db:66:c2:94:e3:
68:95:67:29:6b:86:5c:ec:e0:b7:51:5a:fc:f2:9c:bb:ea:c6:
21:ca:5e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:42:04 2026 by rpki-client