This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134332e302f32342d3330203d3e203238313838.roa
File: 3137372e31322e3134332e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier: bKEvrwBXDRRnUz08tnKaSNgxy4L8li6ISCm9XcOl0rk=
Subject key identifier: 87:26:A4:7C:56:29:11:CD:15:7D:AA:0A:9F:32:C9:C1:85:3D:22:24
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 68E4414BA7F00D7F29626EC2DAAD478C48735E44
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134332e302f32342d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:58:29 +0000
ROA not before: Wed 05 Feb 2025 22:53:29 +0000
ROA not after: Wed 04 Feb 2026 22:58:29 +0000
asID: 28188
IP address blocks: 177.12.143.0/24 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e4:41:4b:a7:f0:0d:7f:29:62:6e:c2:da:ad:47:8c:48:73:5e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:53:29 2025 GMT
Not After : Feb 4 22:58:29 2026 GMT
Subject: CN=8726A47C562911CD157DAA0A9F32C9C1853D2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:0d:57:eb:f7:fa:ca:6a:79:24:bf:93:63:
cc:06:f1:19:f4:ee:fc:32:db:b1:6e:41:26:27:95:
82:d7:d9:a5:0b:d2:79:26:c5:a9:60:c8:1e:6c:e6:
e7:a8:a2:be:3b:49:2a:cf:f7:26:ef:86:c3:57:33:
bc:c8:f3:30:1a:e7:aa:a2:e7:c8:8c:36:56:16:4a:
8d:20:06:41:c9:d5:c7:cc:41:13:5d:fa:83:e3:ab:
59:90:96:11:64:0d:38:90:16:cd:94:2b:fa:57:84:
25:38:5d:db:1b:10:bb:e2:54:7e:4d:8f:c1:e6:64:
63:85:f3:84:2b:55:69:f5:cd:33:a4:3b:0e:b9:75:
3c:59:b4:96:c9:24:5e:c6:3a:2e:de:f8:d4:c0:de:
06:fa:22:b8:a4:34:3a:f6:d3:27:cf:e7:8e:47:b1:
d2:74:c4:49:0d:c5:68:ec:9a:3d:d2:af:39:0c:51:
8f:92:b3:26:2d:0d:03:22:2c:f3:3b:fd:d9:ef:49:
82:15:cd:ec:c2:e5:fb:1e:ce:50:2e:e7:84:1a:4d:
64:31:69:31:a6:eb:c9:33:e5:8a:9b:2c:a4:24:54:
40:0a:85:d5:ac:21:2a:f9:19:5d:fc:28:9a:b3:5f:
0f:b5:7a:fb:3b:61:38:f4:44:90:cb:de:99:9e:42:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:A4:7C:56:29:11:CD:15:7D:AA:0A:9F:32:C9:C1:85:3D:22:24
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134332e302f32342d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.143.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c8:27:29:91:68:f9:24:eb:8c:cc:52:80:6a:b5:22:03:d7:
35:ed:d7:fc:4b:4f:70:85:dd:99:11:35:6a:8f:b3:a5:6c:94:
8b:0f:85:9e:58:13:e3:fc:42:bc:dd:4b:38:45:ae:96:90:bc:
05:94:16:b6:fc:9f:bf:28:b6:9f:d9:a6:c1:e1:0c:93:81:82:
40:d4:cb:2c:2f:d3:8e:1c:28:84:50:8d:02:4b:55:36:8f:bb:
d7:68:c8:f6:6f:31:21:fa:78:10:09:e4:bf:46:1f:6f:7d:cf:
a4:de:90:a2:95:b8:1d:a2:10:4c:be:8e:df:f9:2d:9f:d7:e7:
3b:ed:5b:35:8b:50:4c:3d:f2:fb:14:df:b4:38:e8:82:32:19:
5c:6a:86:0b:f6:ca:69:ad:28:34:ca:93:1e:88:39:b2:bf:8b:
5b:52:29:04:78:db:18:bb:01:be:82:25:4e:8d:6e:bc:be:b2:
6a:ab:ae:21:fc:df:c9:a0:80:ec:b2:14:17:e8:d4:5d:ae:64:
d6:0c:f0:08:c8:7d:27:d0:28:a3:bd:8d:1b:2a:88:f6:95:e5:
bb:ac:bc:ef:93:61:37:1c:12:64:32:0d:3b:0d:db:2d:87:52:
7c:90:cf:ff:b1:b1:6e:1c:2e:ca:54:f3:c5:99:27:e5:b8:63:
e1:e2:26:2f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUaORBS6fwDX8pYm7C2q1HjEhzXkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNC
RTQ4QTc3MDAeFw0yNTAyMDUyMjUzMjlaFw0yNjAyMDQyMjU4MjlaMDMxMTAvBgNV
BAMTKDg3MjZBNDdDNTYyOTExQ0QxNTdEQUEwQTlGMzJDOUMxODUzRDIyMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXQ1X6/f6ymp5JL+TY8wG8Rn0
7vwy27FuQSYnlYLX2aUL0nkmxalgyB5s5ueoor47SSrP9ybvhsNXM7zI8zAa56qi
58iMNlYWSo0gBkHJ1cfMQRNd+oPjq1mQlhFkDTiQFs2UK/pXhCU4XdsbELviVH5N
j8HmZGOF84QrVWn1zTOkOw65dTxZtJbJJF7GOi7e+NTA3gb6IrikNDr20yfP545H
sdJ0xEkNxWjsmj3SrzkMUY+SsyYtDQMiLPM7/dnvSYIVzezC5fsezlAu54QaTWQx
aTGm68kz5YqbLKQkVEAKhdWsISr5GV38KJqzXw+1evs7YTj0RJDL3pmeQnB7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUhyakfFYpEc0VfaoKnzLJwYU9IiQwHwYDVR0j
BBgwFoAU44rCz7KZcVs7bVhmwVzzU75Ip3AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ES050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNk
LzAvRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNCRTQ4QTc3MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMzhBQzJDRkIyOTk3MTVCM0I2
RDU4NjZDMTVDRjM1M0JFNDhBNzcwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E
S050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNkLzAvMzEz
NzM3MmUzMTMyMmUzMTM0MzMyZTMwMmYzMjM0MmQzMzMwMjAzZDNlMjAzMjM4MzEz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAsQyPMA0GCSqGSIb3DQEBCwUAA4IBAQBWyCcpkWj5JOuM
zFKAarUiA9c17df8S09whd2ZETVqj7OlbJSLD4WeWBPj/EK83Us4Ra6WkLwFlBa2
/J+/KLaf2abB4QyTgYJA1MssL9OOHCiEUI0CS1U2j7vXaMj2bzEh+ngQCeS/Rh9v
fc+k3pCilbgdohBMvo7f+S2f1+c77Vs1i1BMPfL7FN+0OOiCMhlcaoYL9spprSg0
ypMeiDmyv4tbUikEeNsYuwG+giVOjW68vrJqq64h/N/JoIDsshQX6NRdrmTWDPAI
yH0n0CijvY0bKoj2leW7rLzvk2E3HBJkMg07Ddsth1J8kM//sbFuHC7KVPPFmSfl
uGPh4iYv
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:47:22 2025 by rpki-client