This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa
File: 3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa (raw, json)
Hash identifier: AQ958s2XBn1/iDmcxdnEIOO7Vnj+sroIgWSFaGxznj8=
Subject key identifier: 3A:F0:66:68:0E:84:DF:37:29:74:4F:CC:0C:06:F5:8C:2A:13:B4:0F
Certificate issuer: /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial: 6EE9F94D700A058303D8F1DEB31CE56AFDEF494D
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa
Signing time: Wed 19 Nov 2025 17:09:07 +0000
ROA not before: Wed 19 Nov 2025 17:04:07 +0000
ROA not after: Wed 18 Nov 2026 17:09:07 +0000
asID: 61657
IP address blocks: 131.100.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e9:f9:4d:70:0a:05:83:03:d8:f1:de:b3:1c:e5:6a:fd:ef:49:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Validity
Not Before: Nov 19 17:04:07 2025 GMT
Not After : Nov 18 17:09:07 2026 GMT
Subject: CN=3AF066680E84DF3729744FCC0C06F58C2A13B40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:42:dd:81:a9:34:6f:71:98:18:4b:2c:3e:
b7:9a:5e:04:b9:c5:38:89:18:77:c7:e0:11:df:ec:
c8:93:15:bc:a9:1b:71:ee:07:7f:f5:bc:50:f1:8f:
80:b6:da:d9:09:0d:a8:6b:5e:17:db:18:55:74:99:
71:19:80:54:36:31:bc:10:88:50:cd:40:d5:73:80:
94:e4:83:4d:3e:9f:5f:a3:c6:0c:be:f7:bb:b1:1f:
64:9a:81:f8:5f:d8:8a:76:d0:e0:cf:92:cb:ca:0d:
aa:2d:04:f7:e4:f0:fc:34:34:ce:ee:dc:15:58:4e:
ed:a1:45:e1:fb:b4:4b:1d:cb:c2:0c:9b:d2:78:77:
ad:1c:3b:9b:b2:d8:d5:a4:a6:36:20:61:e2:1a:11:
1b:23:3e:6a:01:9d:ca:d2:37:6d:a2:1d:b8:a8:a9:
ba:5b:d6:9a:11:5c:8a:47:44:47:70:59:3f:4e:c3:
d4:37:ad:ee:b9:d0:ea:dc:4e:c1:c7:93:1e:52:63:
6c:d7:ec:4d:67:b2:ba:b5:41:95:1a:fa:92:44:be:
18:4d:5d:d1:cd:09:e8:3c:ce:d7:c5:4f:af:b5:24:
4d:3d:10:0e:7d:fa:49:01:e4:96:0a:76:85:8e:79:
4d:c5:3e:29:a1:cd:e8:84:01:a9:71:d3:49:c2:7e:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:66:68:0E:84:DF:37:29:74:4F:CC:0C:06:F5:8C:2A:13:B4:0F
X509v3 Authority Key Identifier:
keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:7e:43:a5:86:75:1f:fc:3d:d8:be:7d:f0:25:63:c3:20:9a:
09:69:3e:f8:94:2c:b3:1b:f7:27:a3:8c:a1:4d:05:36:dd:54:
5e:a0:68:c9:ae:78:45:29:28:23:67:90:6e:db:12:60:65:ba:
5b:7f:c0:67:34:db:64:36:77:fe:2c:00:86:e1:8c:16:70:35:
40:2f:87:0d:9d:e9:f8:ed:ed:5d:9d:87:fc:57:1e:5a:3e:e6:
4e:5f:c4:1b:7f:0d:10:14:2d:64:f4:91:23:42:af:8b:59:ac:
de:3b:cb:9a:1f:0d:d6:f1:28:ca:f9:83:9d:25:05:b6:9d:fb:
df:1a:72:95:45:b4:e3:69:72:da:f6:b2:58:90:4d:05:a8:51:
8a:8b:07:4e:6e:48:2c:0f:97:8e:40:19:c5:9b:12:97:10:5a:
92:cf:8d:23:f7:4c:cb:0b:83:39:de:b3:c5:d8:26:5c:eb:6d:
a2:e8:ab:2a:a6:02:8f:99:67:ea:87:2f:b4:72:da:34:10:c6:
46:00:fa:57:6c:d9:5a:44:2b:ff:c4:4e:7c:c2:1b:83:2a:5c:
2e:58:a3:75:87:03:5a:3a:d2:40:b4:9d:e2:a7:00:b4:f9:84:
bf:76:4f:49:89:bf:01:5c:bf:dc:b0:08:29:b6:f8:13:27:c5:
c3:19:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:05 2025 by rpki-client