This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32342d3234203d3e203532383338.roa
File: 3133382e302e3138382e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: h+6I5XCg9wtLkyzfcPHf7Zn5Ubgbg3GJtc+qNVqrAHM=
Subject key identifier: 66:58:FC:82:EB:FA:6B:40:77:87:A0:7B:4C:3C:31:8D:64:67:AE:36
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 68F4BB86DFD81F5ECFA1A0723402CE2CDF11DA5B
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:33:51 +0000
ROA not before: Wed 03 Dec 2025 00:28:51 +0000
ROA not after: Wed 02 Dec 2026 00:33:51 +0000
asID: 52838
IP address blocks: 138.0.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f4:bb:86:df:d8:1f:5e:cf:a1:a0:72:34:02:ce:2c:df:11:da:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:28:51 2025 GMT
Not After : Dec 2 00:33:51 2026 GMT
Subject: CN=6658FC82EBFA6B407787A07B4C3C318D6467AE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:b0:06:b2:86:72:4d:fc:07:4a:05:81:fc:
4e:cc:4a:10:e9:80:5a:42:58:0b:92:6d:5c:d6:b0:
77:3d:65:bd:af:92:4c:19:bf:bd:33:95:98:66:be:
75:54:f8:b9:d6:43:18:c1:ec:f1:4d:69:e8:eb:2e:
f6:4e:c6:d2:23:f5:ca:1c:c3:d9:4c:5f:79:f9:f1:
30:6c:93:89:01:91:e0:21:a6:ba:b6:b9:79:10:76:
49:32:ab:d5:70:7d:d0:83:d5:eb:79:b9:06:df:77:
51:6e:24:aa:05:04:6b:fd:f5:d4:85:ae:04:e4:bd:
c9:94:7c:83:c0:f1:59:38:29:51:88:55:bc:95:30:
88:3e:62:fd:fb:49:8b:d7:18:51:d3:84:f3:4b:ee:
99:0d:13:58:fd:ee:3f:75:67:d4:35:52:09:b2:f4:
e1:e5:38:2f:9f:d0:47:1c:e6:4c:18:29:cf:4b:28:
a0:0c:c3:0e:f2:7a:a2:7f:40:1e:fb:fb:aa:2d:c0:
a7:cf:d6:27:82:40:20:85:53:a8:74:70:e9:ed:23:
2b:31:0a:c9:15:1d:2f:b8:21:d5:da:d4:19:54:d8:
f4:96:6a:45:2a:4d:3b:81:02:21:fb:2b:af:e7:e1:
68:e4:07:bc:24:ac:42:2f:2c:0a:60:0d:d6:97:26:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:58:FC:82:EB:FA:6B:40:77:87:A0:7B:4C:3C:31:8D:64:67:AE:36
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.188.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fc:4e:d9:d9:01:8a:e9:d2:8d:d9:9a:f7:d5:59:92:4c:52:
9e:9f:18:d2:00:29:1b:21:2b:6d:2a:1f:21:96:59:97:07:0a:
4c:bf:62:b4:d6:78:fb:9e:ec:71:d4:93:73:d2:04:43:ae:bc:
70:45:48:0e:cb:28:15:a9:ed:dc:e6:0b:42:4c:8f:53:dc:a5:
66:30:10:83:40:59:0e:f7:2e:b6:c6:6b:48:25:3d:41:f3:0b:
bc:60:c1:ac:37:29:84:9a:35:ea:e5:88:23:1c:94:62:63:11:
12:68:0e:a2:14:5c:d3:3d:7c:f5:1d:92:09:d2:c8:bf:57:f7:
57:90:8c:2d:a4:d2:b8:57:68:bf:db:99:bf:d8:a1:ae:2a:2e:
5e:75:24:fc:a9:b7:72:96:1f:3a:f8:dd:fb:ab:f9:31:ec:4a:
9d:63:67:84:d2:fb:76:dd:c7:8b:bf:40:b1:df:3b:2a:97:04:
f2:04:65:e3:b7:37:2f:71:0b:a8:31:0a:b2:7c:5a:1b:e4:36:
fa:c4:76:5d:d7:f5:e3:52:cc:04:00:26:3c:86:00:ca:38:4a:
da:f2:01:43:8e:b7:0a:fb:72:f0:b1:b1:a8:c5:e8:16:7c:c2:
2f:ac:4e:ee:17:d3:ef:bd:c5:87:11:2a:ec:70:bd:14:28:d2:
9d:04:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:12 2025 by rpki-client