This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa
File: 3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa (raw, json)
Hash identifier: 3G5ez2+JU33lZO+RLNuARo5Nx5X2tywM+1l2i21kvu8=
Subject key identifier: CC:40:8D:D8:B0:BB:CB:10:46:8A:CD:36:C2:9D:B3:3E:6B:21:0B:EF
Certificate issuer: /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial: 71546345B9707B21F4FC70D923D920B66DC632FB
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa
Signing time: Wed 19 Nov 2025 17:09:31 +0000
ROA not before: Wed 19 Nov 2025 17:04:31 +0000
ROA not after: Wed 18 Nov 2026 17:09:31 +0000
asID: 61657
IP address blocks: 131.100.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:54:63:45:b9:70:7b:21:f4:fc:70:d9:23:d9:20:b6:6d:c6:32:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Validity
Not Before: Nov 19 17:04:31 2025 GMT
Not After : Nov 18 17:09:31 2026 GMT
Subject: CN=CC408DD8B0BBCB10468ACD36C29DB33E6B210BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:92:16:eb:e6:11:82:2c:42:6d:99:15:67:
22:de:bb:e0:28:c1:1b:0b:0d:d9:6a:00:f3:d4:67:
a0:73:38:b8:c4:a1:a6:ad:33:73:6f:80:b4:f9:c2:
ad:d5:9b:4c:19:6d:b7:44:22:1b:e6:c3:f3:55:b1:
97:09:e9:9b:00:bf:a1:3e:a3:e3:ce:38:e0:ca:80:
15:74:74:61:d2:d0:69:34:02:ba:2d:76:b7:e5:1a:
12:83:ab:c1:31:2b:70:28:06:0a:66:0e:8a:e0:dd:
7f:46:74:8f:33:eb:78:6b:80:57:81:5a:52:cb:81:
cf:1f:95:24:be:ab:33:ea:72:a7:f7:a0:37:f9:3a:
eb:99:c9:0d:29:50:29:99:92:13:28:83:af:17:a5:
08:84:e5:c6:f6:13:ff:31:8f:10:79:21:62:ed:70:
bb:9e:c5:4f:29:cd:6a:fd:0c:6d:26:35:04:ec:9a:
b3:68:f1:bf:d2:fa:6e:a6:b4:10:a9:21:90:2d:4a:
fc:93:bd:cc:90:48:7f:c9:eb:9f:96:18:8f:62:44:
ba:9b:d7:cb:c3:81:97:9e:a2:5c:73:1f:3f:af:ac:
90:23:70:ae:05:65:61:90:b5:2d:a9:bb:12:e7:e9:
21:ea:ff:b2:c9:5b:ab:df:b9:ef:69:aa:1c:f6:bb:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:8D:D8:B0:BB:CB:10:46:8A:CD:36:C2:9D:B3:3E:6B:21:0B:EF
X509v3 Authority Key Identifier:
keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:67:af:7a:68:39:0f:cf:53:af:39:56:f5:1c:58:e0:e4:ea:
e1:34:91:6e:1e:0f:c3:df:84:7f:de:60:fd:66:0f:c9:01:55:
95:b9:8d:4e:e1:d0:f8:ed:a9:24:dd:9a:a0:df:c2:25:8d:e7:
0e:13:1a:28:ee:17:8f:74:9d:f2:d0:c2:57:40:1d:29:d0:f5:
03:4a:6a:8f:3f:5d:e0:0a:2a:fb:2b:33:ca:cb:ab:41:9a:68:
b6:f2:2b:12:9d:57:41:83:d1:9d:05:31:58:e8:b4:55:bd:76:
11:c3:f6:21:f4:9f:15:e1:4a:69:82:d0:82:66:1d:75:9d:81:
0d:e6:30:26:84:be:22:10:fb:77:96:ee:45:84:92:c4:be:11:
e1:a6:17:fe:66:46:ea:18:8d:24:79:e5:f8:6e:ab:f0:e6:59:
c1:c1:78:25:9c:82:3a:d9:06:3b:b6:f3:89:a0:4c:e2:f9:ea:
26:c5:6c:de:e8:e6:d8:a3:3d:c2:25:07:05:07:2f:eb:ea:9f:
37:c6:21:56:a1:19:06:39:33:49:7c:b6:96:cc:1d:dd:ee:0f:
dd:37:81:b4:df:ef:df:6e:4d:e4:f9:5e:50:6b:2e:ea:99:fc:
11:ff:25:9f:1c:05:2c:e4:a3:56:24:b8:e6:d2:b6:b5:bd:40:
a5:5b:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:35 2025 by rpki-client