This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa
File: 3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa (raw, json)
Hash identifier: KRQDYuIfMd1BvtJG+dmZ1ZX83KY4bWrSyEv+UVMNFCY=
Subject key identifier: 85:65:C5:E1:FE:73:7D:03:07:CD:33:44:DD:A4:C5:30:51:D7:37:12
Certificate issuer: /CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
Certificate serial: 6C4974EEC619E3DB6676894010A2C94255C8D782
Authority key identifier: EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa
Signing time: Mon 29 Dec 2025 17:51:07 +0000
ROA not before: Mon 29 Dec 2025 17:46:07 +0000
ROA not after: Mon 28 Dec 2026 17:51:07 +0000
asID: 53123
IP address blocks: 187.111.192.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl
rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:49:74:ee:c6:19:e3:db:66:76:89:40:10:a2:c9:42:55:c8:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
Validity
Not Before: Dec 29 17:46:07 2025 GMT
Not After : Dec 28 17:51:07 2026 GMT
Subject: CN=8565C5E1FE737D0307CD3344DDA4C53051D73712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:0a:18:39:10:7b:bd:62:49:a4:92:dc:6c:
af:5d:85:50:2c:69:42:dd:11:b2:b7:42:0e:ec:a4:
a1:ee:ba:b1:2e:f6:68:ea:58:ff:f8:96:9e:a7:c9:
fc:3d:1d:61:a8:f5:f2:5d:ff:0b:55:77:c3:d8:a6:
7f:75:3a:e0:4d:3c:80:1d:91:80:a7:c0:f4:3a:49:
b2:a3:ff:8c:a5:b5:7e:b4:8e:7e:6e:21:dc:8f:31:
82:e7:be:19:0d:9b:d6:38:44:ac:db:9f:3a:53:ce:
4c:dc:fb:c4:34:c1:a0:b7:cd:67:88:ed:3f:fc:fb:
48:60:b8:04:7b:42:85:52:d7:bc:39:df:c8:8f:db:
38:1c:60:f0:6a:56:d0:39:f7:07:d8:56:8c:59:0e:
85:bd:78:85:ce:86:06:01:87:95:95:fa:e2:b6:07:
3e:16:d1:09:4d:e2:d9:0e:14:25:86:ba:a6:c7:32:
c7:7d:75:3e:cb:93:57:d8:b1:36:a6:5f:96:63:91:
75:9b:3c:15:9e:4f:9a:65:2f:94:f8:bd:29:b4:b3:
bb:30:ae:0c:37:3b:17:9b:72:da:83:a1:d5:7b:45:
f6:f9:a3:04:8b:24:7b:b6:67:47:c2:ca:0a:07:67:
f1:7f:79:e6:91:f7:9e:7d:99:48:d6:91:e5:8b:ab:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:C5:E1:FE:73:7D:03:07:CD:33:44:DD:A4:C5:30:51:D7:37:12
X509v3 Authority Key Identifier:
keyid:EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.111.192.0/21
Signature Algorithm: sha256WithRSAEncryption
81:24:1d:69:31:5e:78:85:dc:fe:43:27:d2:56:76:52:70:8b:
d3:cc:dc:7c:da:cc:35:ef:29:40:0a:9a:d0:2b:cc:dd:9f:54:
ce:4c:cc:a4:cd:c4:a6:a0:6d:4d:8a:67:8e:59:45:97:ad:79:
ce:36:b6:08:fe:9b:9d:09:6c:c4:89:66:c2:ed:d3:42:4c:da:
4a:e5:41:b1:43:00:b0:c2:39:28:85:4b:77:f0:bc:04:c5:48:
fa:4c:10:a8:85:5e:72:02:d4:fe:b6:8b:41:90:28:3e:3b:2b:
3e:97:9d:0e:bb:e7:61:2e:69:59:e9:1d:d7:10:e7:6f:7a:3a:
af:c0:b9:d5:bc:02:25:73:3d:55:76:8c:35:10:e5:59:6b:9b:
1d:f8:19:42:72:21:b9:12:d3:7c:df:cf:1f:e4:b6:c0:75:a3:
b1:c7:1d:d8:51:f6:f5:e8:bb:77:3d:f7:18:7f:f9:97:04:c7:
27:e9:3b:4b:52:3a:a3:40:a8:bb:60:ff:a9:e6:8c:cb:20:ed:
cf:b7:2d:9d:93:3b:03:cf:b5:0b:db:ad:30:63:ae:a4:6c:6b:
ae:c4:ab:3b:a6:7a:09:c0:42:5b:2a:13:43:db:d8:a6:66:2d:
ae:75:72:de:d7:d2:45:1d:39:5a:1c:67:95:90:9e:97:4c:4c:
02:78:1e:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbEl07sYZ49tmdolAEKLJQlXI14IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDNThBRThCQUZFREEwQkI3MUZDNEU2NDUxOUY3NTZF
MUZFNzE5MzAeFw0yNTEyMjkxNzQ2MDdaFw0yNjEyMjgxNzUxMDdaMDMxMTAvBgNV
BAMTKDg1NjVDNUUxRkU3MzdEMDMwN0NEMzM0NEREQTRDNTMwNTFENzM3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVAoYORB7vWJJpJLcbK9dhVAs
aULdEbK3Qg7spKHuurEu9mjqWP/4lp6nyfw9HWGo9fJd/wtVd8PYpn91OuBNPIAd
kYCnwPQ6SbKj/4yltX60jn5uIdyPMYLnvhkNm9Y4RKzbnzpTzkzc+8Q0waC3zWeI
7T/8+0hguAR7QoVS17w538iP2zgcYPBqVtA59wfYVoxZDoW9eIXOhgYBh5WV+uK2
Bz4W0QlN4tkOFCWGuqbHMsd9dT7Lk1fYsTamX5ZjkXWbPBWeT5plL5T4vSm0s7sw
rgw3OxebctqDodV7Rfb5owSLJHu2Z0fCygoHZ/F/eeaR9559mUjWkeWLq8ADAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhWXF4f5zfQMHzTNE3aTFMFHXNxIwHwYDVR0j
BBgwFoAU68WK6Lr+2gu3H8TmRRn3VuH+cZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1VhQjJYcjduWFBSckhZRUZ1NXd3QlZuWDJ0d0M4a2RYVDg2aHVVZmRV
Z3gvMC9FQkM1OEFFOEJBRkVEQTBCQjcxRkM0RTY0NTE5Rjc1NkUxRkU3MTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQzU4QUU4QkFGRURBMEJC
NzFGQzRFNjQ1MTlGNzU2RTFGRTcxOTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dVYUIyWHI3blhQUnJIWUVGdTV3d0JWblgydHdDOGtkWFQ4Nmh1VWZkVWd4LzAv
MzEzODM3MmUzMTMxMzEyZTMxMzkzMjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM1
MzMzMTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO7b8AwDQYJKoZIhvcNAQELBQADggEBAIEkHWkx
XniF3P5DJ9JWdlJwi9PM3HzazDXvKUAKmtArzN2fVM5MzKTNxKagbU2KZ45ZRZet
ec42tgj+m50JbMSJZsLt00JM2krlQbFDALDCOSiFS3fwvATFSPpMEKiFXnIC1P62
i0GQKD47Kz6XnQ6752EuaVnpHdcQ5296Oq/AudW8AiVzPVV2jDUQ5Vlrmx34GUJy
IbkS03zfzx/ktsB1o7HHHdhR9vXou3c99xh/+ZcExyfpO0tSOqNAqLtg/6nmjMsg
7c+3LZ2TOwPPtQvbrTBjrqRsa67EqzumegnAQlsqE0Pb2KZmLa51ct7X0kUdOVoc
Z5WQnpdMTAJ4Hkw=
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:21 2026 by rpki-client