This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa
File: 3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier: eYeutwZBahsdUk5YJgHNPbWoZId5/Ss6UxHbc4VoFrY=
Subject key identifier: 0E:3A:48:1B:3E:A6:39:39:69:FA:6E:67:A5:3C:A2:DB:70:B8:F7:EE
Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial: 281CD8C50F6FA9DCE00C6BADAC273C39DC9399A9
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa
Signing time: Fri 28 Nov 2025 18:08:19 +0000
ROA not before: Fri 28 Nov 2025 18:03:19 +0000
ROA not after: Fri 27 Nov 2026 18:08:19 +0000
asID: 262773
IP address blocks: 189.90.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1c:d8:c5:0f:6f:a9:dc:e0:0c:6b:ad:ac:27:3c:39:dc:93:99:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Validity
Not Before: Nov 28 18:03:19 2025 GMT
Not After : Nov 27 18:08:19 2026 GMT
Subject: CN=0E3A481B3EA6393969FA6E67A53CA2DB70B8F7EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:8c:58:80:51:bb:9a:5a:54:42:c6:06:19:
9d:cf:07:30:ac:86:c8:53:81:70:63:66:c2:61:d9:
c9:89:b4:a8:bd:e4:c4:f2:7c:fc:dc:94:ff:6c:9b:
27:12:eb:87:67:5e:7f:30:f7:75:f6:1b:98:7c:0b:
74:12:c5:cf:30:7c:61:ab:d7:04:da:d4:a5:41:7e:
06:b7:4c:89:c1:1a:b6:25:61:22:54:6b:9b:f8:9f:
9f:4b:c6:14:67:15:1e:c0:3f:1e:c1:f3:0d:1c:4d:
5c:2f:16:d4:e4:97:9f:b6:05:1f:dc:97:de:fb:9f:
58:d5:c4:bd:9e:ef:eb:31:32:54:8c:a8:e8:86:17:
60:b9:70:7b:69:62:53:0e:e4:28:b8:24:d7:34:ef:
ce:20:d0:99:5b:f4:5d:ba:df:a8:bf:fa:a5:50:de:
9c:8d:59:ca:86:58:48:f5:b8:5c:dc:97:cc:1a:e8:
46:50:e7:46:63:73:7f:86:32:ad:20:2a:29:05:aa:
a3:07:2a:c3:44:a1:a6:6b:74:ce:c6:0c:3f:16:e5:
e0:12:3e:dc:3a:11:3b:32:bd:d4:c1:5e:83:e5:46:
7e:7a:dd:d7:09:e6:22:a9:ed:7c:96:f6:4b:65:d5:
b9:2a:3e:c8:84:68:54:5f:cf:b3:82:bc:3c:fd:fa:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:48:1B:3E:A6:39:39:69:FA:6E:67:A5:3C:A2:DB:70:B8:F7:EE
X509v3 Authority Key Identifier:
keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.208.0/20
Signature Algorithm: sha256WithRSAEncryption
76:da:25:9f:ca:c6:47:5e:5e:b3:e8:76:43:34:b5:5e:c3:c8:
f9:92:ec:c8:9a:49:28:ec:66:7c:a0:68:86:7b:9a:db:e6:e9:
7a:b9:86:a4:f6:bc:2d:6a:de:26:bf:75:11:fb:f8:9f:a0:7c:
66:73:63:66:84:c6:bb:88:ba:b0:ea:16:14:20:d5:9c:e0:64:
1a:25:70:eb:7f:88:ce:95:c0:f9:67:f7:f4:1f:2a:99:7e:b9:
a4:53:7d:b8:80:de:ca:87:57:15:3b:13:50:8d:95:f7:8a:4d:
2d:3a:66:64:59:ea:73:de:b1:c3:27:60:bc:38:96:e5:be:29:
4b:14:2b:00:51:c7:5f:ec:19:af:35:81:3c:0c:91:cd:4b:78:
0b:7a:26:0d:11:db:d4:ac:ff:ce:63:fa:bb:62:7b:cf:e0:4f:
6c:32:93:ed:4b:9a:f0:33:e1:ae:bd:5e:70:15:59:bc:7b:82:
fc:eb:63:83:4e:b9:b1:72:2f:ac:07:a0:ae:4a:d3:22:0d:b9:
50:5e:1f:f9:3d:d9:f1:84:db:05:9e:40:a2:78:55:79:1d:f2:
f0:74:50:5b:5d:29:77:ff:cf:30:0b:d2:fa:e4:2b:4c:4c:81:
31:80:66:5c:f8:1d:a4:82:45:9d:e5:97:4a:58:70:2c:3a:86:
07:9e:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:05 2025 by rpki-client