This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/3138362e3235312e31322e302f32322d3332203d3e20323633353631.roa
File: 3138362e3235312e31322e302f32322d3332203d3e20323633353631.roa (raw, json)
Hash identifier: mza1bv6WoISJDMkL0aBSZtJTXKtb/7vTf8jQCMnQJ7A=
Subject key identifier: 25:AC:65:42:25:74:4F:1E:A9:4B:5F:B7:66:42:F8:76:9A:1A:D9:94
Certificate issuer: /CN=4D703EAE3998947027B5655C14708E2E67520077
Certificate serial: 2D4EF10A39CAB9477B05C4B7290D6111BA472408
Authority key identifier: 4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/3138362e3235312e31322e302f32322d3332203d3e20323633353631.roa
Signing time: Wed 03 Dec 2025 20:56:25 +0000
ROA not before: Wed 03 Dec 2025 20:51:25 +0000
ROA not after: Wed 02 Dec 2026 20:56:25 +0000
asID: 263561
IP address blocks: 186.251.12.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl
rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4e:f1:0a:39:ca:b9:47:7b:05:c4:b7:29:0d:61:11:ba:47:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D703EAE3998947027B5655C14708E2E67520077
Validity
Not Before: Dec 3 20:51:25 2025 GMT
Not After : Dec 2 20:56:25 2026 GMT
Subject: CN=25AC654225744F1EA94B5FB76642F8769A1AD994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:b5:b4:93:d9:d4:32:26:3b:59:79:e0:24:
ff:d1:10:67:f1:cc:00:43:1a:5d:49:1f:cc:7d:ee:
bc:f9:68:08:61:ed:f2:ef:92:61:c0:e0:70:2d:90:
22:41:d5:af:ab:b4:60:02:ac:11:56:62:37:01:0a:
2c:8f:72:2d:66:42:8b:ea:c2:c9:53:52:f0:bb:08:
79:11:16:c1:22:67:fb:c1:14:7f:e8:b1:ff:da:8d:
37:7e:bd:94:2b:7a:e2:9c:18:da:1f:70:7c:0a:4c:
b2:6d:70:f8:6a:94:33:20:6d:54:52:a3:11:8e:b5:
69:49:0c:20:e8:db:68:dd:ee:24:2e:12:d0:43:a3:
46:53:77:70:45:88:59:1d:eb:f2:ce:e1:0c:76:11:
16:fb:d9:b0:3a:a8:ac:a1:42:62:10:c8:af:61:ba:
0b:05:b9:69:e6:8a:9d:cf:9e:88:5e:dc:a9:09:df:
6a:19:9f:85:17:00:e6:a2:c4:c2:68:a4:31:25:26:
3e:b5:b1:e0:94:15:91:5d:be:ed:1b:26:10:43:87:
2e:bb:b7:b3:af:af:99:65:d3:3d:17:f7:c8:d3:cc:
66:f9:85:ad:d4:4a:96:03:72:3e:a8:0c:0f:2a:1f:
41:00:ad:71:d9:1d:01:44:ce:c5:6c:74:68:7a:b4:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:65:42:25:74:4F:1E:A9:4B:5F:B7:66:42:F8:76:9A:1A:D9:94
X509v3 Authority Key Identifier:
keyid:4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/3138362e3235312e31322e302f32322d3332203d3e20323633353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:53:dc:72:52:0d:d3:f8:ae:6b:3f:a6:ef:f5:b8:2c:3f:f5:
a1:da:8d:bb:53:26:03:bd:46:1b:dc:bc:90:56:04:fb:af:01:
69:72:ae:ad:0a:83:32:2a:d6:fb:a9:8d:76:35:17:8f:0d:e7:
59:70:ff:96:0c:b8:fb:e7:57:0e:aa:a8:e5:36:60:cb:ed:8a:
36:27:c3:81:ff:55:9b:f3:aa:4f:2b:c8:c5:a4:8b:2b:bb:30:
9d:b0:6c:bd:44:ad:7d:74:ea:1c:35:85:e2:d9:20:62:11:8b:
c6:d3:dd:ed:37:a6:0a:a6:a2:1c:6e:0c:8a:6c:c6:a2:ba:fc:
57:74:45:9e:77:f4:a4:67:83:6c:ec:9e:e9:8d:85:cd:96:7d:
8a:43:4c:ed:b7:b7:84:7a:45:4d:ff:56:78:b5:a5:9f:fe:dc:
78:e8:56:1b:7d:9f:46:7e:f6:be:2b:be:1f:d7:34:a9:66:a4:
18:27:2d:e1:e8:0e:42:14:b6:7e:ac:ab:04:b7:3e:43:a3:97:
52:fd:79:91:b1:b9:4e:0d:4b:2c:b0:61:3a:61:5d:ed:db:49:
35:49:42:4d:b5:4d:20:60:8d:90:69:64:c6:50:87:95:dd:27:
dc:7b:09:f8:3b:a7:3d:e2:58:89:b1:b3:e1:88:a5:05:ee:72:
d7:eb:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:46:58 2025 by rpki-client