This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3332203d3e20323632373733.roa
File: 3133312e3235352e3232302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier: gaBJm6JZuA5fGj40cEcv5v4GVvHDoFhbEsgM8PU0tGY=
Subject key identifier: 3E:AA:B6:70:4A:A6:B3:3A:5E:9E:33:42:16:56:EB:00:73:BA:F3:00
Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial: 62198EDDA48D603231E95F2E2521093198A0ED4E
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3332203d3e20323632373733.roa
Signing time: Fri 28 Nov 2025 18:08:21 +0000
ROA not before: Fri 28 Nov 2025 18:03:21 +0000
ROA not after: Fri 27 Nov 2026 18:08:21 +0000
asID: 262773
IP address blocks: 131.255.220.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:19:8e:dd:a4:8d:60:32:31:e9:5f:2e:25:21:09:31:98:a0:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Validity
Not Before: Nov 28 18:03:21 2025 GMT
Not After : Nov 27 18:08:21 2026 GMT
Subject: CN=3EAAB6704AA6B33A5E9E33421656EB0073BAF300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:d9:6c:98:c8:d5:06:55:b9:ee:dc:b9:ac:
ef:b1:54:4d:0f:e0:77:ce:29:0e:31:8c:88:36:31:
96:bc:95:e5:d1:08:3f:a6:47:84:4e:c8:99:88:0f:
61:e8:77:82:b1:af:5c:93:f9:1f:f6:8e:13:ac:98:
fb:1b:6e:60:e5:87:ee:79:02:74:85:ad:c1:a4:df:
9e:14:8d:ab:ae:d6:9d:45:77:27:0c:ca:2b:2d:ba:
45:6c:a9:e9:01:92:84:a0:d5:8e:de:7c:a6:a7:7b:
1a:b1:58:50:2b:4a:c9:f4:67:a0:3b:54:5e:5e:c9:
2c:33:cc:2b:80:a2:fc:74:47:fc:66:ae:0d:cb:7a:
e4:2b:52:3c:45:95:57:aa:7c:48:9f:1d:e4:b7:ca:
32:0b:4a:f5:f1:77:8c:e8:3d:a2:e8:64:8f:cd:c2:
8c:19:61:13:99:9e:2f:80:e0:f5:e7:06:e9:c7:c5:
4a:b8:0c:9a:b2:c1:d0:93:ff:6c:d5:a1:20:97:77:
c4:92:72:db:98:6b:f0:e8:a1:83:41:9e:9e:90:32:
e8:ce:a0:c3:4e:06:44:28:35:b6:ce:3f:c1:87:3e:
27:10:48:a2:06:a8:03:89:2b:0e:65:3e:4d:c5:f0:
18:5b:15:c8:e9:aa:b8:8a:a0:87:53:1d:93:fe:a6:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AA:B6:70:4A:A6:B3:3A:5E:9E:33:42:16:56:EB:00:73:BA:F3:00
X509v3 Authority Key Identifier:
keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3332203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.220.0/22
Signature Algorithm: sha256WithRSAEncryption
22:a7:64:13:16:72:15:88:88:3a:f5:99:3c:bb:57:99:62:8a:
b0:6d:54:93:5a:a1:6a:ee:36:2d:33:92:3e:69:20:de:19:4d:
e7:e7:4f:c1:b9:b3:82:f0:b2:6f:8d:0d:2e:e0:8b:b5:1b:4f:
de:2e:af:16:e9:2e:0d:b6:80:0c:2d:d8:98:d2:82:b9:17:53:
e1:62:db:3b:de:62:8e:6a:20:cd:6d:a1:80:0a:80:74:c7:cd:
7d:52:49:08:d5:30:53:a0:1a:ed:aa:cd:c2:80:a0:c3:d5:ee:
a2:f1:98:87:4f:86:e0:e5:0c:50:1c:a0:ec:e7:de:43:a9:fa:
39:4c:6e:9d:0d:2b:0c:29:34:26:d5:f5:7c:d5:31:c4:f6:7c:
e6:c9:f7:09:1a:3c:e1:45:e8:94:52:94:20:ad:06:71:44:b3:
f3:90:7a:1d:a6:d0:36:90:14:3f:f4:18:7e:eb:6a:b1:be:19:
73:10:26:ac:62:41:08:cc:aa:09:f8:60:ff:f4:7d:fb:1d:fb:
89:d9:dd:70:03:f5:25:0a:8c:d8:69:75:b7:d7:ca:78:52:9d:
29:4e:37:40:c1:d6:97:a3:f9:94:6c:dd:8d:df:d2:69:b8:cd:
26:2f:f5:48:30:34:97:d3:3b:78:37:11:cc:88:ea:e8:c5:28:
5d:04:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:36 2025 by rpki-client