This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234332e302f32342d3330203d3e203238313838.roa
File: 3138392e38392e3234332e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier: HMZxk8vgq2vfR67iN+JC6meeYcBjrwab99f/dWL1+wQ=
Subject key identifier: 95:D1:EF:1E:F7:ED:DF:85:18:35:E5:95:7C:2E:F0:7F:31:4C:62:B3
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 350D92C660D29AF70C94377ECE8C9A19F340C9D6
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234332e302f32342d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:59:12 +0000
ROA not before: Wed 05 Feb 2025 22:54:12 +0000
ROA not after: Wed 04 Feb 2026 22:59:12 +0000
asID: 28188
IP address blocks: 189.89.243.0/24 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0d:92:c6:60:d2:9a:f7:0c:94:37:7e:ce:8c:9a:19:f3:40:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:54:12 2025 GMT
Not After : Feb 4 22:59:12 2026 GMT
Subject: CN=95D1EF1EF7EDDF851835E5957C2EF07F314C62B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:b6:34:d3:ac:fb:4c:1a:84:f9:e1:bd:0b:
a5:99:94:a1:fb:ff:14:69:f8:14:ab:ce:69:b3:e1:
58:8c:0f:3c:0a:d2:c5:62:22:62:3b:4c:ce:77:67:
2e:c2:9b:49:87:d5:ce:69:97:4f:da:5b:07:c4:68:
ba:de:0d:8b:19:ef:7c:f7:76:48:15:88:90:98:2d:
3c:3e:70:52:9a:48:73:e2:0f:53:98:6a:50:f3:75:
e7:27:dc:cd:50:9d:ec:fd:eb:fe:63:0a:1e:ea:2e:
78:91:24:a6:bf:ec:1f:98:3f:9f:65:25:12:d9:e4:
a0:a0:4a:b7:5f:0a:c1:0f:d6:e8:36:15:ad:9b:d4:
25:c4:c1:34:88:e5:63:d5:b2:17:fd:b2:3e:8a:95:
42:6b:8e:3c:29:29:24:29:37:e3:96:0a:8e:b4:15:
f5:14:e6:a5:54:9e:40:9f:ae:20:86:fb:10:6e:9d:
81:ef:9b:9b:5c:f2:4a:3f:53:50:22:a8:1e:82:ca:
fb:65:21:8f:39:92:34:b8:d9:6b:34:ea:06:8f:11:
e0:a6:04:a5:40:f6:72:f4:c9:09:27:30:13:a2:b3:
b3:97:67:d0:21:38:bf:b5:2c:a3:2c:a6:24:95:3a:
5b:1a:93:39:08:58:cd:15:93:5d:4a:da:d2:0b:7b:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:EF:1E:F7:ED:DF:85:18:35:E5:95:7C:2E:F0:7F:31:4C:62:B3
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234332e302f32342d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.243.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bb:eb:00:c5:e9:31:01:a8:2c:e5:4a:12:40:df:78:da:de:
e1:4c:88:02:49:a0:b8:e6:66:f6:0d:13:b6:e3:1e:19:7b:ae:
4c:2d:0f:6d:c4:b2:0c:c2:91:5d:55:50:82:85:84:eb:b1:98:
b0:55:0f:a0:be:01:fb:8c:3a:0b:d6:ba:eb:59:0f:10:83:c8:
03:a4:6b:f8:f5:f8:db:c5:9d:a8:58:57:83:97:b4:82:54:d0:
d6:09:23:8a:fc:e7:6c:f1:a0:26:96:c1:a0:d2:50:6b:7e:62:
ae:d8:d4:ab:6b:3d:04:6a:70:43:38:66:62:53:25:fb:e5:dc:
a0:26:a3:ae:65:14:eb:0c:83:42:ee:04:84:a5:3c:07:b5:d4:
4c:74:8a:d4:55:47:96:ef:d2:14:ce:87:b9:dc:74:e8:8f:15:
3a:6a:3f:b8:c6:29:e9:81:e2:bc:1f:17:33:88:12:ea:6e:eb:
ff:e5:b5:c3:f5:6f:81:8b:02:7a:ca:61:eb:df:34:18:54:6f:
cb:7f:73:53:5e:82:6f:09:a9:12:3c:59:03:7e:6d:54:f7:09:
a6:e6:3c:c3:2d:06:62:c5:a7:d1:f9:6e:f8:84:e1:56:44:c1:
de:17:3e:87:12:ff:5e:55:4d:6c:6b:e9:5f:bd:75:91:3a:62:
21:62:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:48:00 2025 by rpki-client