This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32322d3332203d3e20323730353935.roa
File: 3137372e3135322e3130382e302f32322d3332203d3e20323730353935.roa (raw, json)
Hash identifier: 6ixTGGP0HqgZ20f0Le6jE1RD69+P8VprD4KSsXEKAKU=
Subject key identifier: FF:C0:B2:3B:A8:2B:41:23:26:15:1E:C0:D4:3F:07:0A:24:20:8A:01
Certificate issuer: /CN=B9F02C81BECA4384DB63254261D4EB44BC2619D6
Certificate serial: 430DFFEE335B0F15C8AA9C3520A48CFD685BFAF0
Authority key identifier: B9:F0:2C:81:BE:CA:43:84:DB:63:25:42:61:D4:EB:44:BC:26:19:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9F02C81BECA4384DB63254261D4EB44BC2619D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32322d3332203d3e20323730353935.roa
Signing time: Fri 21 Nov 2025 11:58:00 +0000
ROA not before: Fri 21 Nov 2025 11:53:00 +0000
ROA not after: Fri 20 Nov 2026 11:58:00 +0000
asID: 270595
IP address blocks: 177.152.108.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/B9F02C81BECA4384DB63254261D4EB44BC2619D6.crl
rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/B9F02C81BECA4384DB63254261D4EB44BC2619D6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9F02C81BECA4384DB63254261D4EB44BC2619D6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 18:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0d:ff:ee:33:5b:0f:15:c8:aa:9c:35:20:a4:8c:fd:68:5b:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9F02C81BECA4384DB63254261D4EB44BC2619D6
Validity
Not Before: Nov 21 11:53:00 2025 GMT
Not After : Nov 20 11:58:00 2026 GMT
Subject: CN=FFC0B23BA82B412326151EC0D43F070A24208A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:57:3d:89:60:1b:1f:a7:a6:d7:25:99:d2:
e6:71:9f:24:06:9a:ed:1c:de:47:bb:8a:f3:0c:9e:
c5:08:46:dc:ec:3a:52:af:6b:27:a4:ff:10:eb:22:
76:78:bc:c9:a7:9c:31:52:16:fe:e6:0e:e3:42:ac:
ee:78:4e:66:db:60:fb:cf:3a:18:e8:dc:32:b1:d3:
92:ac:b3:22:44:52:2c:2b:81:de:80:1d:87:dc:80:
c8:bf:8b:27:9c:4e:b4:d9:4d:58:6b:b5:7d:4e:fb:
6c:d5:5d:75:79:7f:6f:fe:f3:a3:c0:f4:64:05:4a:
e0:ae:60:54:64:3c:33:56:4f:9c:91:0a:61:60:74:
1c:b8:e0:9b:de:05:08:9e:74:69:7e:08:e2:10:f7:
e5:85:fa:f8:1c:4b:67:a3:09:c5:e9:a0:d8:4e:d9:
f2:7c:36:b5:7e:46:04:04:9f:cc:50:cf:07:ec:0a:
b0:b9:4e:1f:ef:73:25:7d:a5:ff:e6:ba:64:ba:6a:
9e:a8:f1:65:3d:a5:77:37:d8:87:bb:91:f4:e1:7b:
85:e0:f9:ee:13:0b:25:00:7d:52:c7:c0:ec:a8:fc:
08:8b:32:4f:ef:a3:03:ba:f8:10:bf:50:4c:9a:7d:
49:04:af:51:a3:ae:76:bb:cb:19:61:06:fc:a3:c0:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C0:B2:3B:A8:2B:41:23:26:15:1E:C0:D4:3F:07:0A:24:20:8A:01
X509v3 Authority Key Identifier:
keyid:B9:F0:2C:81:BE:CA:43:84:DB:63:25:42:61:D4:EB:44:BC:26:19:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/B9F02C81BECA4384DB63254261D4EB44BC2619D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9F02C81BECA4384DB63254261D4EB44BC2619D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32322d3332203d3e20323730353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.152.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:fe:1c:f4:5d:3a:b7:df:b6:36:32:00:34:94:2e:44:95:f6:
34:38:1a:26:5b:0f:f9:3b:00:b8:07:ce:61:b6:f5:54:6d:b1:
b7:1e:87:65:ff:8a:86:2f:d0:c5:4a:8c:d6:94:0b:29:4c:15:
c8:e1:58:1f:01:c4:20:0a:f2:00:76:51:45:40:f0:f2:74:b3:
4b:61:c1:b0:28:fe:23:7a:19:ee:b6:1f:0a:38:4e:98:42:7d:
87:d4:f6:78:16:c4:ad:fc:60:e6:e6:89:46:6f:4d:49:2b:f8:
bb:69:6e:94:d4:48:9a:e2:c5:e7:cd:f4:6d:df:59:12:4b:ae:
0e:75:c8:64:ff:b4:ba:6e:bc:c7:d5:f5:5d:0b:0b:a3:0c:21:
63:23:15:30:4a:29:1f:a1:91:d6:eb:bd:8e:2a:a7:32:1a:52:
30:17:59:70:4f:9b:ca:19:40:8b:59:64:0f:55:cd:23:9e:28:
e5:bd:2a:30:e5:4c:c8:47:00:0a:06:7e:34:70:9f:7b:a0:05:
4c:58:9b:0f:87:5e:7f:04:cb:ae:ee:d0:a1:cc:15:b4:9f:56:
e3:df:0b:f4:16:76:87:5b:2f:96:e8:e3:3e:e3:d8:a3:fe:ba:
d5:fa:1a:06:d5:84:c9:25:d1:fa:2e:6c:83:b7:f8:36:22:36:
a9:46:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:22:41 2025 by rpki-client