This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa
File: 3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier: 79DZ59dzIQ06lfVfEUH4Er+ORsqvBRq0yCjUquKrgBg=
Subject key identifier: EA:0C:1C:91:17:1D:F3:98:B7:67:B7:B3:77:84:12:34:B5:53:DA:1B
Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial: 5A8A3DC3F4832E85A2C05A5A0078381B3CEC01BB
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa
Signing time: Fri 28 Nov 2025 18:08:19 +0000
ROA not before: Fri 28 Nov 2025 18:03:19 +0000
ROA not after: Fri 27 Nov 2026 18:08:19 +0000
asID: 262773
IP address blocks: 138.36.176.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8a:3d:c3:f4:83:2e:85:a2:c0:5a:5a:00:78:38:1b:3c:ec:01:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Validity
Not Before: Nov 28 18:03:19 2025 GMT
Not After : Nov 27 18:08:19 2026 GMT
Subject: CN=EA0C1C91171DF398B767B7B377841234B553DA1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:f0:1c:b7:2f:ec:93:66:73:a6:c7:e8:2e:
42:cd:8f:18:43:98:40:b6:ce:11:14:5b:b6:01:ad:
fd:aa:70:87:38:d3:71:0b:88:d8:dd:18:22:cb:09:
d0:13:4c:91:ee:ab:bc:c4:92:90:e4:f6:51:ed:cb:
7f:76:37:51:75:74:78:c8:ab:da:a0:d5:da:f0:8e:
99:7a:e5:1d:66:a4:81:f5:69:75:fd:07:0a:36:9a:
b9:b9:9a:c6:40:10:82:33:07:d9:c5:32:fe:57:fb:
00:59:3a:76:2a:0d:28:bc:74:08:21:aa:0e:41:04:
26:d2:35:09:44:e6:8e:8d:02:25:45:14:52:08:c5:
11:5f:15:fa:5f:45:34:75:95:65:ae:ea:b0:be:08:
49:98:cf:be:21:94:35:ca:26:d8:1c:87:37:3e:7f:
36:f0:38:17:fb:2c:25:aa:cc:f1:2c:5a:9c:3a:14:
10:54:14:bc:6a:31:ea:84:58:93:8a:9c:8b:ac:65:
55:98:08:d2:b2:aa:96:be:7e:57:e2:b4:50:45:70:
67:9e:dc:74:3b:a6:61:41:98:68:19:d7:00:b9:1f:
d3:1e:26:76:2c:91:53:0c:ef:a5:cc:d1:58:1f:4f:
aa:3b:2d:94:75:7f:f4:1a:d3:68:87:b6:75:b9:35:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:1C:91:17:1D:F3:98:B7:67:B7:B3:77:84:12:34:B5:53:DA:1B
X509v3 Authority Key Identifier:
keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.176.0/22
Signature Algorithm: sha256WithRSAEncryption
94:33:73:8e:58:f4:0c:73:74:f8:29:b6:dc:46:88:26:38:9b:
37:0e:e8:72:ed:9e:d9:65:6c:ad:34:8e:fe:a1:eb:6a:bb:d9:
f2:c5:c4:5e:13:fa:16:14:18:39:27:a2:c9:e1:5e:4d:15:63:
00:1b:f8:ba:d3:3f:f2:e5:b0:da:1a:a8:99:6d:3a:6a:9d:d3:
f9:e2:93:71:da:1b:0e:10:07:5f:16:e4:e8:6b:59:0e:0d:a4:
17:5a:8c:3d:96:50:72:b2:ea:44:6a:23:08:6d:37:c1:a0:b2:
6e:be:e0:e1:a3:26:c5:2b:7f:4b:d7:27:a3:5d:73:84:04:52:
3b:b2:40:ea:2d:93:42:41:c0:3d:dd:5d:21:e3:47:79:76:c9:
d9:bc:0c:de:84:78:26:c1:13:d9:59:8d:8a:b4:0b:71:0c:45:
8d:af:ce:f4:25:22:40:fa:af:c4:0f:4a:f3:75:dc:18:18:13:
ac:95:a2:92:24:b9:f0:5d:8c:35:fb:60:e9:9d:4f:0d:6c:9a:
2f:b2:a6:2f:89:43:76:d4:93:36:d7:58:5a:86:ff:33:1e:a2:
91:e8:28:5a:f8:e5:54:8f:6f:ad:eb:bd:c2:fc:d4:37:14:cd:
60:88:6c:06:3b:4a:91:d4:be:4b:fa:70:bf:e5:8e:a4:15:0c:
3c:f7:b0:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWoo9w/SDLoWiwFpaAHg4GzzsAbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1
NERCMjY2QjAeFw0yNTExMjgxODAzMTlaFw0yNjExMjcxODA4MTlaMDMxMTAvBgNV
BAMTKEVBMEMxQzkxMTcxREYzOThCNzY3QjdCMzc3ODQxMjM0QjU1M0RBMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN8vActy/sk2ZzpsfoLkLNjxhD
mEC2zhEUW7YBrf2qcIc403ELiNjdGCLLCdATTJHuq7zEkpDk9lHty392N1F1dHjI
q9qg1drwjpl65R1mpIH1aXX9Bwo2mrm5msZAEIIzB9nFMv5X+wBZOnYqDSi8dAgh
qg5BBCbSNQlE5o6NAiVFFFIIxRFfFfpfRTR1lWWu6rC+CEmYz74hlDXKJtgchzc+
fzbwOBf7LCWqzPEsWpw6FBBUFLxqMeqEWJOKnIusZVWYCNKyqpa+flfitFBFcGee
3HQ7pmFBmGgZ1wC5H9MeJnYskVMM76XM0VgfT6o7LZR1f/Qa02iHtnW5NSTzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6gwckRcd85i3Z7ezd4QSNLVT2hswHwYDVR0j
BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE
OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzMzM4MmUzMzM2MmUzMTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKJLAwDQYJKoZIhvcNAQELBQADggEBAJQzc45Y
9AxzdPgpttxGiCY4mzcO6HLtntllbK00jv6h62q72fLFxF4T+hYUGDknosnhXk0V
YwAb+LrTP/LlsNoaqJltOmqd0/nik3HaGw4QB18W5OhrWQ4NpBdajD2WUHKy6kRq
IwhtN8Ggsm6+4OGjJsUrf0vXJ6Ndc4QEUjuyQOotk0JBwD3dXSHjR3l2ydm8DN6E
eCbBE9lZjYq0C3EMRY2vzvQlIkD6r8QPSvN13BgYE6yVopIkufBdjDX7YOmdTw1s
mi+ypi+JQ3bUkzbXWFqG/zMeopHoKFr45VSPb63rvcL81DcUzWCIbAY7SpHUvkv6
cL/ljqQVDDz3sHU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:43:08 2025 by rpki-client