This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139372e37322e302f32322d3332203d3e20323632373733.roa
File: 3136382e3139372e37322e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier: yAmmpj/OIm7cBPtWV6c3ruiQPCKDh6IMV4UPCT9f140=
Subject key identifier: 51:D7:47:E7:70:D9:DE:A4:B7:89:14:08:8D:66:89:54:18:E5:23:C3
Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial: 14B47E7AA609543F6CF4865005D91E39A1977844
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139372e37322e302f32322d3332203d3e20323632373733.roa
Signing time: Fri 28 Nov 2025 18:08:21 +0000
ROA not before: Fri 28 Nov 2025 18:03:21 +0000
ROA not after: Fri 27 Nov 2026 18:08:21 +0000
asID: 262773
IP address blocks: 168.197.72.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b4:7e:7a:a6:09:54:3f:6c:f4:86:50:05:d9:1e:39:a1:97:78:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Validity
Not Before: Nov 28 18:03:21 2025 GMT
Not After : Nov 27 18:08:21 2026 GMT
Subject: CN=51D747E770D9DEA4B78914088D66895418E523C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:50:97:bc:cd:31:42:0a:4b:82:4c:d2:1c:
dd:a0:27:c8:eb:51:b4:22:91:23:c5:66:1b:c4:a4:
8c:1d:f2:5f:1d:bb:da:b9:ed:48:ab:42:07:67:c0:
18:7f:30:14:4a:6b:e4:f4:0f:06:f5:75:37:fc:18:
fd:32:49:e1:3d:97:23:c4:f2:c9:9d:d8:83:e6:75:
9e:49:13:be:13:ab:29:3b:ea:45:bd:5a:08:24:2a:
79:96:30:e7:7b:71:97:ee:a4:7e:e9:a9:98:31:a5:
26:c5:29:76:2a:78:8a:3e:d5:56:25:bd:1d:a7:0c:
af:86:9b:e7:93:4d:9d:2f:b3:ca:df:36:d2:1b:af:
ee:db:6c:c0:04:18:49:a3:aa:75:3a:2a:d1:69:a0:
2f:b7:9d:09:2a:2d:8c:a0:c2:97:a5:59:51:90:fa:
44:41:c3:6d:fc:8e:cd:60:94:38:09:7a:9c:9d:1a:
99:80:83:20:a0:ef:e5:53:6c:22:a0:14:4b:78:47:
a9:89:1f:e1:95:44:28:72:83:61:3e:b6:2d:20:5e:
c1:f9:03:84:e8:27:23:c6:ea:67:de:97:90:63:49:
33:3a:4e:e7:9f:e5:50:95:1b:f0:2e:b3:f0:5f:01:
3f:d8:a0:bb:91:f4:39:96:7d:1b:5d:34:89:cf:f2:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:47:E7:70:D9:DE:A4:B7:89:14:08:8D:66:89:54:18:E5:23:C3
X509v3 Authority Key Identifier:
keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139372e37322e302f32322d3332203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.72.0/22
Signature Algorithm: sha256WithRSAEncryption
58:15:0d:6f:23:30:a7:b7:84:30:2e:6b:67:dc:ef:04:56:66:
6a:35:2c:3d:9f:b8:cf:6c:95:00:20:28:41:c1:7a:00:a9:e5:
9d:18:d9:08:69:cf:e9:86:0d:f0:10:7c:ca:df:9f:03:11:45:
60:6f:63:ca:28:d4:a2:10:26:00:07:9d:08:42:88:ca:88:b4:
81:28:31:a4:74:13:f0:45:f9:20:e5:16:ee:83:0b:b3:05:03:
cc:09:aa:a3:00:64:bd:25:f3:5f:8b:97:c4:13:79:e3:63:ea:
54:bd:2c:f6:a6:0a:b3:4f:f2:3b:a9:69:f1:de:0a:26:1b:37:
56:ff:4e:80:39:80:c3:90:04:59:7d:04:8f:fb:c2:8a:9e:6a:
7b:fe:83:08:ab:60:50:00:3e:22:20:6c:db:92:7f:84:c1:6d:
c1:bb:7e:25:9e:cd:48:94:aa:4a:72:bd:a4:c4:b2:fa:f4:26:
00:7f:30:7d:83:d2:d1:f6:db:b4:76:4b:c3:57:6a:f6:30:d2:
93:b8:75:b8:ae:fc:08:32:03:29:76:10:37:9c:6e:f2:0f:d8:
28:99:91:02:33:ce:7e:8f:1d:28:dc:05:bd:89:24:bf:4c:6b:
c1:18:c0:2d:d0:7c:eb:77:ab:a1:c6:d9:37:e4:6a:57:56:28:
f9:74:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:33 2025 by rpki-client