This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e302e302f32322d3332203d3e20323632373733.roa
File: 3133382e3132322e302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier: GdGEt4GSFYrgtNwYTCWJE7EcJf2S2l4xoC5Osmf2IEU=
Subject key identifier: 42:6B:9B:65:15:A8:89:CC:78:7E:9D:35:C6:9C:FD:7E:34:50:9D:9A
Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial: 7FB84D1239F7BC366E3FB19A77CAC737BBA24BDA
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e302e302f32322d3332203d3e20323632373733.roa
Signing time: Fri 28 Nov 2025 18:08:20 +0000
ROA not before: Fri 28 Nov 2025 18:03:20 +0000
ROA not after: Fri 27 Nov 2026 18:08:20 +0000
asID: 262773
IP address blocks: 138.122.0.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b8:4d:12:39:f7:bc:36:6e:3f:b1:9a:77:ca:c7:37:bb:a2:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Validity
Not Before: Nov 28 18:03:20 2025 GMT
Not After : Nov 27 18:08:20 2026 GMT
Subject: CN=426B9B6515A889CC787E9D35C69CFD7E34509D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:b4:1b:b1:c8:76:d5:ed:b4:ee:b5:f8:f0:
39:9d:47:3c:0d:e5:92:34:66:e7:1b:79:79:4f:2d:
73:bc:d2:ea:8b:5f:27:2b:07:dc:8e:fb:ed:e6:e8:
b8:c0:8d:09:f2:bc:36:42:2d:43:83:e8:23:68:64:
2c:f4:b0:d8:fc:2f:3f:f1:78:86:42:10:a6:98:5e:
f3:65:d9:c0:8a:1a:17:4c:a6:61:d1:5a:3f:10:7d:
94:51:bd:6b:04:9d:33:75:1e:f8:ad:90:dd:da:71:
4c:39:65:de:fa:14:e2:f0:3d:b4:67:d5:7e:18:09:
c4:68:77:e3:1b:9b:66:8e:23:45:df:9b:da:ae:4b:
ba:51:31:2f:24:e9:ec:82:c1:77:9a:5d:c8:96:da:
47:71:63:95:f0:5e:42:2b:cf:94:7e:a6:66:29:b7:
0a:8c:2e:01:98:6a:19:14:f5:1e:4f:02:f9:5b:6a:
2d:b7:69:70:e0:10:a5:e3:3a:32:78:4a:3d:c6:df:
c9:1f:f2:fe:24:1f:3a:b1:d2:0d:a3:6b:ec:b3:8d:
99:a8:a5:7d:af:21:d7:07:da:29:62:36:0a:92:cc:
a1:b0:7e:fb:ba:73:50:b1:d3:61:80:70:b8:1f:c4:
cf:01:5e:4f:a0:e5:b6:45:4b:dd:04:44:b4:ec:e2:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6B:9B:65:15:A8:89:CC:78:7E:9D:35:C6:9C:FD:7E:34:50:9D:9A
X509v3 Authority Key Identifier:
keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e302e302f32322d3332203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:d5:0c:74:cf:09:40:30:3b:90:8f:bd:db:37:59:1d:56:90:
cc:cd:f5:7b:bd:a9:e1:cb:0d:19:f6:35:58:6d:16:0e:82:ee:
e0:1a:72:24:4b:f0:c3:92:0d:28:b6:77:1d:ab:c1:8f:f7:3b:
9f:24:9b:f7:58:4a:31:e9:f4:f4:f5:2f:83:b7:82:d3:a9:8c:
de:3f:d2:76:e1:76:81:69:8a:eb:65:1f:21:34:34:34:83:78:
a2:3f:49:12:48:01:c4:a1:fe:92:a0:31:74:b6:38:99:3a:e7:
a2:f3:b4:b8:ba:b4:d7:07:6f:c3:9d:7b:c6:f8:77:8d:4e:d0:
41:d5:7e:d9:51:4d:3a:4b:fd:c9:69:82:6e:06:36:b4:b1:dd:
52:45:cf:ba:54:d4:8f:d2:f4:fd:91:59:78:87:92:98:cc:fd:
99:3b:ce:4e:4a:39:a3:5e:ac:81:45:e3:d7:31:20:4e:15:49:
66:d5:82:6b:1b:d3:8d:28:6c:b5:b6:99:70:4b:4e:5d:db:86:
5e:3d:10:f0:19:08:19:87:35:c6:09:97:73:3d:79:ba:7d:1a:
f6:7a:06:26:40:dc:6f:4a:4c:9a:ed:e5:d4:e3:ef:23:d7:56:
e0:84:52:ce:7f:92:b7:64:c2:49:9e:45:e1:4f:f8:6f:b0:f9:
72:23:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:47 2025 by rpki-client