This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa
File: 3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier: /T17XYfRQ1muW53lVmF5V9ajbmwm6ESy2FKXwHLnGCk=
Subject key identifier: 45:21:7D:65:C7:72:51:7A:DA:7F:9D:7E:41:4C:E2:78:FB:20:C0:C9
Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial: 1BA4802BB91E194CF17BA600199F34DC4199C9C6
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa
Signing time: Fri 28 Nov 2025 18:08:22 +0000
ROA not before: Fri 28 Nov 2025 18:03:22 +0000
ROA not after: Fri 27 Nov 2026 18:08:22 +0000
asID: 262773
IP address blocks: 191.253.16.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a4:80:2b:b9:1e:19:4c:f1:7b:a6:00:19:9f:34:dc:41:99:c9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Validity
Not Before: Nov 28 18:03:22 2025 GMT
Not After : Nov 27 18:08:22 2026 GMT
Subject: CN=45217D65C772517ADA7F9D7E414CE278FB20C0C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:cb:d1:5f:64:f6:57:d4:1a:67:b8:76:4d:
80:b8:9a:7d:b6:c2:b1:ee:cb:40:3d:d4:02:b9:c5:
31:b6:05:b6:94:91:a8:ab:e5:52:c9:e7:b8:b1:17:
c6:f8:b1:63:d6:d0:a9:20:ac:b2:06:4a:9f:16:7b:
ce:da:f9:e9:30:8b:66:78:b4:80:12:a2:a6:56:fb:
16:f3:c4:cd:d3:17:9c:64:7b:30:71:73:69:24:f1:
8f:fd:91:f4:ad:e3:3e:34:d1:20:5b:c0:44:0e:35:
f0:14:d6:13:6f:ea:61:37:37:1a:17:1d:22:18:e9:
94:31:fd:ef:cc:bf:06:e4:f4:91:0f:cf:8f:94:5f:
9f:fe:d0:8d:d7:99:6f:da:19:c3:e2:eb:52:c5:0b:
ce:54:a9:37:bd:cb:4a:61:58:7b:19:fa:05:75:7a:
0a:fc:bf:8c:49:cc:6b:7c:8d:0a:77:f8:f3:fc:80:
55:24:b3:f5:e7:e0:80:f2:af:11:f8:d2:1d:e8:21:
0a:18:37:bb:e1:e6:4f:7d:03:4e:5d:85:75:5f:d7:
a1:4f:d2:4f:dc:9b:1d:b8:20:60:33:20:72:8a:e9:
21:54:45:ea:32:81:f2:e8:40:6b:ef:aa:d0:d4:d1:
e7:1b:c8:ee:4d:bd:89:72:af:3c:b4:47:15:b2:28:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:21:7D:65:C7:72:51:7A:DA:7F:9D:7E:41:4C:E2:78:FB:20:C0:C9
X509v3 Authority Key Identifier:
keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.253.16.0/22
Signature Algorithm: sha256WithRSAEncryption
10:69:38:b5:2b:e7:b3:2c:8d:93:85:3f:35:13:1a:1d:e8:18:
46:c8:f9:9a:b6:49:15:a9:9b:5a:ab:64:2d:35:bd:8a:56:8b:
9d:b9:d1:78:02:65:24:56:f9:0d:c2:45:2e:38:13:0f:86:2c:
84:95:d0:a1:3e:47:ae:50:5e:7f:0d:f3:b3:01:93:4e:9f:a4:
60:a6:aa:8d:be:e8:af:8e:20:e5:11:bd:2b:c6:4a:0e:73:35:
85:1b:42:b6:f7:ff:cb:7d:67:14:05:c4:b8:0c:64:2b:08:02:
09:bd:61:a5:f5:a9:23:ba:18:5c:49:ae:dc:84:e6:95:8d:89:
b5:eb:17:9b:63:a2:d8:b3:07:04:fd:13:b7:d6:1f:ce:45:c1:
7b:59:02:3e:3b:27:08:c4:5c:6b:5e:99:9b:d0:15:50:24:9a:
10:48:1c:63:03:67:d5:21:c1:ad:30:c5:f6:80:9e:1b:c3:bb:
c9:e1:77:2c:3d:1a:58:23:c2:68:74:de:c3:05:d3:7a:b4:13:
65:8c:25:a9:1f:11:c7:24:f4:bc:50:1d:d5:76:2d:71:80:4a:
fe:1a:02:7f:ef:9a:59:7f:4a:44:cf:a5:17:cb:1f:b7:5a:15:
57:e6:f8:d3:03:37:b3:d1:3f:bb:f6:88:d0:9c:f7:c2:ab:c4:
fc:a4:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:06 2025 by rpki-client