This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa
File: 3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (raw, json)
Hash identifier: n7Ec9a8+etAwsoUdCh1mDInOKOfHdQlk0BAOv7KH2rU=
Subject key identifier: 4C:2C:DD:6C:69:F0:88:D8:96:D5:03:CC:3E:BF:10:2E:65:CD:97:40
Certificate issuer: /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial: 38FA5524635CB1BE629CCB13D1705708890D1825
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa
Signing time: Thu 06 Nov 2025 13:37:23 +0000
ROA not before: Thu 06 Nov 2025 13:32:23 +0000
ROA not after: Thu 05 Nov 2026 13:37:23 +0000
asID: 262998
IP address blocks: 186.224.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fa:55:24:63:5c:b1:be:62:9c:cb:13:d1:70:57:08:89:0d:18:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
Validity
Not Before: Nov 6 13:32:23 2025 GMT
Not After : Nov 5 13:37:23 2026 GMT
Subject: CN=4C2CDD6C69F088D896D503CC3EBF102E65CD9740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:0c:c6:fa:dd:73:3d:9e:2e:8e:29:13:f7:
c3:8e:5c:e3:ca:47:87:78:41:a8:58:00:89:f1:6e:
d8:a0:c9:94:65:5e:90:88:f8:07:41:d8:d7:2b:1c:
00:65:34:68:01:99:dd:4f:31:76:01:60:7d:83:1a:
96:34:a4:3e:4f:d4:cb:54:79:9a:27:fc:04:b6:94:
06:d2:bc:15:00:73:3b:b7:a8:14:47:01:b2:4c:06:
1b:8a:bf:a6:83:bd:e8:6c:ae:5b:08:d3:9f:04:11:
df:85:0a:36:3a:92:35:1d:8a:83:2f:fb:db:b5:e5:
0e:7f:9a:c3:f9:75:df:84:62:19:6c:39:1d:48:d2:
31:64:0f:d6:88:e9:0f:f1:8c:de:ae:c8:a7:d4:82:
57:ef:83:dd:c3:98:f8:f5:19:40:cd:35:a6:e5:4b:
e9:5f:b3:fb:04:b5:b6:f0:5f:70:3f:bd:14:7b:61:
70:98:43:77:a3:38:0c:87:d4:a5:d5:f3:c4:ec:64:
4e:ac:8a:9b:2f:00:32:fb:d0:01:2b:a2:12:74:02:
b5:76:9f:1b:73:6d:d0:a5:f9:d4:76:9a:ad:4f:a5:
c7:e3:56:cf:3a:90:e6:c1:07:a7:0b:c2:1b:6e:e4:
98:7b:ca:2b:c9:57:fe:6a:60:72:fb:77:57:1b:a8:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:DD:6C:69:F0:88:D8:96:D5:03:CC:3E:BF:10:2E:65:CD:97:40
X509v3 Authority Key Identifier:
keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.224.80.0/21
Signature Algorithm: sha256WithRSAEncryption
48:6b:7e:c9:70:81:f0:1f:82:7d:41:2a:be:96:74:b0:96:62:
e2:87:5c:53:04:52:b1:6f:ad:4e:ad:8a:3c:75:bf:de:ef:82:
fb:9d:0f:fb:14:cc:50:2d:1c:5a:a0:dc:d9:31:37:22:30:48:
ce:97:55:f8:44:9b:8f:d1:9a:9e:a3:26:fe:d0:72:bc:44:d3:
11:10:76:2d:e8:ac:6d:a4:fd:f8:08:d2:72:66:3b:5b:a0:10:
37:cc:56:50:d9:52:52:69:c3:77:71:9d:d5:00:2e:92:8a:d4:
ed:cd:b2:af:31:03:2b:69:78:11:b3:b2:b0:33:a2:2e:74:ff:
6e:3a:6d:6f:8e:7f:65:78:4c:cb:ac:08:ec:97:c4:2d:cf:a7:
9d:08:0a:dc:bf:e8:bf:2b:48:ed:0f:f6:99:a8:9d:11:02:84:
37:3f:8d:1d:6e:35:ca:7f:1f:41:7a:bd:dc:3f:17:37:f5:2e:
6a:5e:cd:f9:70:f4:d0:60:40:ed:ac:ad:07:cb:f3:7f:40:29:
27:e2:5c:b9:55:5e:67:dc:33:54:8d:d6:4b:60:ab:d4:59:e9:
4c:bf:58:18:20:a9:af:41:37:8d:24:85:8b:10:c7:60:87:d7:
aa:61:b4:48:6c:5a:bc:98:e3:72:d3:b4:23:18:00:f2:65:68:
dd:90:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:11 2025 by rpki-client