This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139302e302f32332d3233203d3e203532383338.roa
File: 3133382e302e3139302e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier: s/EHuG1VVJd+Ez2KVVfk5s7Ws1NUbQ2PltIV0FA7Di4=
Subject key identifier: 84:09:97:C8:CF:72:85:5F:AC:30:A1:14:A1:E8:77:D8:1D:96:A3:14
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 35C66224F14E6933F2DD820F294AB239A650353C
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139302e302f32332d3233203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:33:14 +0000
ROA not before: Wed 03 Dec 2025 00:28:14 +0000
ROA not after: Wed 02 Dec 2026 00:33:14 +0000
asID: 52838
IP address blocks: 138.0.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c6:62:24:f1:4e:69:33:f2:dd:82:0f:29:4a:b2:39:a6:50:35:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:28:14 2025 GMT
Not After : Dec 2 00:33:14 2026 GMT
Subject: CN=840997C8CF72855FAC30A114A1E877D81D96A314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:78:a2:c0:74:ff:1d:74:b6:59:55:9e:61:
92:15:7d:8e:b5:52:cc:f2:b2:88:95:ef:84:81:ca:
98:7b:c2:66:e9:fe:1e:ce:03:78:3c:49:d9:8d:80:
30:a5:47:9e:3f:d9:8e:6e:25:39:09:6e:ec:e2:f2:
a1:32:a3:f6:d4:e3:2b:28:6b:49:98:7c:38:10:4a:
71:fa:8b:be:79:1b:69:95:72:b2:09:42:5e:47:25:
92:18:91:5e:3e:ab:e2:7d:b5:85:9b:93:49:14:3e:
69:e8:09:46:ef:ae:ba:37:89:bf:c2:f1:4b:da:5b:
18:0f:d8:23:ae:71:db:12:c6:e9:14:20:e5:fe:b2:
da:65:4d:30:99:91:36:c8:ec:bf:a1:8f:00:91:af:
0f:89:ec:db:dc:5d:eb:7f:47:af:e6:c5:18:76:f8:
20:01:2c:52:a9:ab:f1:8c:85:8f:eb:b5:6e:e8:49:
44:c3:eb:eb:d6:d7:d1:d3:12:35:76:8a:b7:47:48:
93:51:5b:98:ea:4a:58:c3:96:08:61:88:cd:6b:7d:
c1:67:96:fd:b5:f7:ff:db:e2:a5:f7:eb:06:8e:c9:
f6:5d:a8:ff:8b:6a:19:9a:91:48:f7:79:d0:4b:a9:
1c:e2:f9:6f:5c:24:c9:d1:aa:de:ae:58:15:18:f2:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:97:C8:CF:72:85:5F:AC:30:A1:14:A1:E8:77:D8:1D:96:A3:14
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139302e302f32332d3233203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.190.0/23
Signature Algorithm: sha256WithRSAEncryption
30:57:54:11:44:1c:4b:5d:0e:f9:61:00:7e:b8:2d:7e:6a:29:
33:ff:4f:ac:ae:36:fa:47:2d:e8:ed:41:1d:a6:1b:6e:00:f7:
a8:6a:e7:a1:03:00:fc:02:20:e6:ac:52:9d:41:51:06:c9:37:
2e:20:3c:75:dd:57:34:da:6f:53:e5:56:47:23:12:af:0d:42:
71:ba:39:be:85:5c:32:33:df:86:23:16:b9:49:62:9b:b8:fd:
1c:c7:97:d3:b8:f4:66:fa:9a:c1:d7:4d:e0:28:04:d9:71:f0:
ce:c1:6e:56:18:dc:1f:04:49:2a:da:61:09:9a:37:00:26:1d:
e6:e1:33:41:de:ae:35:ce:06:6d:ad:2b:e3:c7:19:22:44:cd:
6a:18:cf:5d:bb:05:20:98:dc:ec:0d:8f:dd:ae:51:d5:cd:a0:
ff:02:18:6a:e2:51:ae:d1:e4:d7:55:0d:16:0b:42:f0:0d:02:
cf:7d:b4:f9:89:b0:6f:db:24:ae:cd:fb:3a:55:ae:8f:d9:14:
f7:9e:18:51:c2:f6:e8:5b:00:80:68:24:db:01:35:2d:fc:a4:
c5:68:32:24:3f:88:86:2d:a7:ba:d4:f4:1c:68:b9:be:54:c0:
79:7c:8d:48:3f:d2:4e:1e:04:ca:08:fb:70:28:09:3b:97:02:
b7:c9:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:16 2025 by rpki-client