This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa
File: 3137372e33392e3135382e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier: BXzCbuIBKvjthNMH1nGZrKuBVsgTxF8Hs+LbPYeyMwU=
Subject key identifier: CD:23:53:4F:05:49:8C:2F:12:58:27:2F:BD:20:98:A0:DA:16:DA:FD
Certificate issuer: /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial: 1C78F56FE29D7DDD43D325BFD0A2AD2B6F0B7766
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa
Signing time: Thu 04 Dec 2025 20:09:29 +0000
ROA not before: Thu 04 Dec 2025 20:04:29 +0000
ROA not after: Thu 03 Dec 2026 20:09:29 +0000
asID: 52772
IP address blocks: 177.39.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:78:f5:6f:e2:9d:7d:dd:43:d3:25:bf:d0:a2:ad:2b:6f:0b:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Validity
Not Before: Dec 4 20:04:29 2025 GMT
Not After : Dec 3 20:09:29 2026 GMT
Subject: CN=CD23534F05498C2F1258272FBD2098A0DA16DAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:f4:3e:b6:c9:d3:31:34:79:3f:d4:0b:03:
dd:17:a0:e7:13:01:e8:c4:e2:c4:4d:01:6f:db:ad:
5d:71:b5:55:f0:8a:f0:9b:d5:a4:80:d6:28:1d:71:
c7:01:ec:47:0f:1e:2b:ac:92:11:6f:4d:fe:37:be:
f0:e1:b5:a9:9a:62:af:1f:a5:5e:d4:ab:0b:b1:c7:
be:3a:e5:f7:41:7f:3b:0d:7b:2f:18:15:02:22:1c:
a9:2d:a7:19:0a:ed:db:3f:39:9f:a8:04:01:7c:d4:
ab:ff:55:1f:08:68:87:4f:ee:5b:83:04:38:8e:7d:
19:cf:f3:b2:43:4c:0e:d8:da:60:81:cb:49:17:0d:
d4:1a:44:e0:37:b5:e0:72:80:43:00:e7:55:1f:4e:
d6:7f:ab:91:a6:f9:02:e3:df:0a:9d:11:6d:a4:eb:
fb:c5:b5:19:ae:a7:6d:b8:8c:70:0b:0c:bf:05:3e:
92:61:23:2d:e4:b3:1c:0b:e7:2d:b6:e4:62:e6:54:
90:dc:77:8e:a8:82:1c:04:5e:ff:cb:e2:85:92:c4:
fb:51:38:0e:e3:b1:ee:db:4a:42:29:4d:4f:15:51:
32:0b:dc:c8:d0:8c:ae:01:31:08:95:7a:b8:ea:03:
44:81:c0:d3:7b:29:2c:c1:db:1f:e6:43:6a:99:24:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:53:4F:05:49:8C:2F:12:58:27:2F:BD:20:98:A0:DA:16:DA:FD
X509v3 Authority Key Identifier:
keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.39.158.0/23
Signature Algorithm: sha256WithRSAEncryption
68:75:a9:41:34:ca:8e:f1:dd:01:12:65:20:7e:12:94:74:4a:
e5:01:a2:3b:6d:27:db:d7:5c:c0:e1:dc:91:ff:39:ab:41:03:
6c:90:80:81:71:14:7f:75:0e:b1:88:fd:93:ca:5e:69:e2:cb:
46:7f:82:07:db:f4:58:f1:80:46:ef:f1:85:89:48:23:21:92:
fc:23:33:2a:56:5e:45:bf:df:37:ac:fd:54:ca:98:5c:9e:ea:
0a:96:e0:d4:68:6f:86:2e:54:4d:ff:0e:5a:3c:7d:e2:13:25:
21:2b:19:8d:fa:22:ac:24:e8:34:07:9a:26:53:48:d2:bb:e5:
67:4d:72:4d:be:c2:56:bc:93:b7:30:da:33:29:23:02:69:01:
84:7e:79:d5:51:2f:ee:c7:1d:38:41:fa:b1:b7:c8:58:95:02:
59:c1:92:46:ef:51:8a:b8:95:62:ab:0a:50:10:30:18:04:fd:
51:38:33:d7:14:79:9a:60:e0:7c:9f:2b:35:48:02:53:11:cf:
d8:aa:b4:a9:1c:43:8f:ed:61:bd:86:4b:7a:b6:97:f7:91:c5:
59:8f:4c:d4:68:a6:21:7f:13:d1:37:2c:ca:2e:76:ef:6d:03:
39:03:8b:ff:68:e2:2a:bf:d8:8d:54:78:4c:62:a5:38:83:10:
f1:ad:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:47 2025 by rpki-client