This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa
File: 3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa (raw, json)
Hash identifier: G+z8JfK3j6xKGlg1KiMMLj9puCNa4De53EAC5Ng67Us=
Subject key identifier: 5C:FF:14:CA:3C:B2:C6:C6:7F:8C:EA:B3:14:91:EA:5D:CB:E8:01:02
Certificate issuer: /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial: 3986C76C2E4724D3BACBE7D572D1D5C23BA9497F
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa
Signing time: Thu 11 Dec 2025 20:41:46 +0000
ROA not before: Thu 11 Dec 2025 20:36:46 +0000
ROA not after: Thu 10 Dec 2026 20:41:46 +0000
asID: 61792
IP address blocks: 170.247.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 18:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:86:c7:6c:2e:47:24:d3:ba:cb:e7:d5:72:d1:d5:c2:3b:a9:49:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
Validity
Not Before: Dec 11 20:36:46 2025 GMT
Not After : Dec 10 20:41:46 2026 GMT
Subject: CN=5CFF14CA3CB2C6C67F8CEAB31491EA5DCBE80102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:58:51:52:5f:0f:f2:6b:88:73:da:16:33:
2f:6b:e6:83:53:6f:fd:34:a3:4b:1f:d3:03:29:d0:
fd:a5:5a:ab:94:72:9a:e7:d6:67:14:68:ff:0d:f3:
f0:2a:94:87:72:ed:cf:78:a8:0e:7d:4e:a2:4e:ae:
78:bd:5e:82:e5:68:e2:4f:00:33:2d:2d:6d:e6:0c:
01:75:c7:1d:a6:01:f5:d7:97:2d:9d:5f:1b:c8:89:
8e:fd:2b:9a:5f:a8:b7:5a:94:43:b6:18:ff:e2:e0:
ab:44:74:ac:a1:66:0c:2e:22:4a:3e:a1:46:41:14:
70:03:c2:42:08:c1:3c:2b:9b:48:95:53:51:63:3e:
c2:78:1c:37:5a:01:a5:6f:cb:b3:b1:38:29:47:3b:
56:09:e6:a6:75:f4:21:51:28:2c:32:0b:f2:22:b4:
bd:14:52:15:e4:44:5c:9d:f6:43:8d:cd:5a:ba:10:
22:40:57:1c:69:2c:3a:44:b8:eb:47:a7:a1:02:ab:
67:65:a0:bc:e2:12:d6:15:da:9d:6d:56:d0:8a:3a:
49:e0:46:6f:8c:eb:f3:2e:da:bf:2c:e6:26:ca:4e:
b7:0f:4a:73:6e:22:e3:16:91:d2:70:d1:16:b9:01:
0e:a9:63:f0:ac:dc:c8:1d:20:fc:2b:19:17:f3:6a:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:14:CA:3C:B2:C6:C6:7F:8C:EA:B3:14:91:EA:5D:CB:E8:01:02
X509v3 Authority Key Identifier:
keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.236.0/22
Signature Algorithm: sha256WithRSAEncryption
84:17:6a:f0:e6:32:6b:89:9b:f3:19:5c:3d:56:e4:23:27:66:
69:7b:84:80:98:05:4d:08:18:e3:27:c6:3b:66:1e:b3:83:ac:
b5:65:13:74:b7:b7:04:82:30:58:47:e1:46:e1:65:29:28:4c:
50:bd:55:ba:fd:ff:04:a2:1b:49:db:74:a2:0c:db:39:38:42:
3d:1d:52:6e:e8:cb:4a:39:49:34:ee:f7:cc:e5:a7:19:78:fd:
97:c0:e9:60:2e:50:65:0b:7e:9b:9a:71:b2:34:f7:54:4b:7a:
8f:ee:03:e9:67:b2:4c:7f:48:b3:62:ae:f0:7d:38:29:00:33:
d7:a8:c4:96:ca:fe:10:be:4f:a9:a9:f6:92:b3:eb:e2:e0:6e:
96:9d:5c:5d:e5:f7:46:f6:3a:e7:01:07:59:39:d2:bb:d5:dc:
7c:7a:e5:c1:43:72:67:aa:a3:22:60:af:6b:13:f1:f1:98:25:
de:d7:db:77:44:f0:2d:83:d7:46:49:68:b5:56:c2:f6:10:42:
01:ce:d0:49:4b:21:ec:51:1b:34:6c:43:d7:dc:20:4a:4e:73:
31:53:b1:d1:f8:ad:3e:ec:0c:76:10:92:db:c0:d9:ad:02:9e:
34:9a:49:29:60:db:94:82:66:2e:7e:d4:31:41:1e:b1:79:66:
ee:a6:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:52:04 2025 by rpki-client