This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139302e302f32342d3234203d3e203532383338.roa
File: 3133382e302e3139302e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: mN9Xhxm4ZLwRonABGIEhc/gUV2ZUgvsR2EOp0tMJBKM=
Subject key identifier: 72:24:5A:97:77:ED:DE:92:B6:78:62:0A:19:A2:8A:7E:DE:D1:14:20
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 0B1EF6DB68A698FADDF41130DD02A12B2FE0A9A5
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139302e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:34:32 +0000
ROA not before: Wed 03 Dec 2025 00:29:32 +0000
ROA not after: Wed 02 Dec 2026 00:34:32 +0000
asID: 52838
IP address blocks: 138.0.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1e:f6:db:68:a6:98:fa:dd:f4:11:30:dd:02:a1:2b:2f:e0:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:29:32 2025 GMT
Not After : Dec 2 00:34:32 2026 GMT
Subject: CN=72245A9777EDDE92B678620A19A28A7EDED11420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:7f:eb:3b:ac:9d:0e:77:5b:be:67:69:84:
87:27:5a:f6:bb:2b:87:10:34:40:62:af:6a:e6:46:
c4:74:5d:c2:ce:1b:ce:70:d7:52:1c:6a:eb:5a:89:
a2:de:8f:4b:7b:e5:35:2a:ae:71:08:39:42:ac:0d:
97:55:bb:db:56:f9:74:5e:27:e4:af:e8:d5:c9:18:
0e:38:b1:97:74:91:f4:88:73:ca:78:ea:ee:83:48:
9e:98:ef:73:5a:09:2a:9c:0c:0e:05:68:4d:7a:c3:
ed:e2:80:76:8f:2f:da:f8:02:e8:c0:cb:d0:89:01:
2a:b5:02:4a:0b:ca:e3:bd:82:66:16:99:27:6c:fd:
90:0a:d6:d9:65:f9:12:0e:d8:0e:b6:ea:a2:fa:16:
c7:1f:f9:ee:f7:5d:c6:a8:2f:cc:bd:50:07:b0:57:
64:ec:53:17:e8:25:e4:c5:4e:b4:77:75:7f:42:d3:
45:ff:43:d9:75:cc:98:10:a5:11:dd:a6:24:73:de:
1a:69:11:5d:3d:25:48:82:fd:5b:91:d6:09:c7:d2:
a2:88:9f:8b:22:8b:3a:6e:e6:96:5f:1e:c7:b2:2d:
90:90:2b:e7:09:c7:73:01:c3:04:aa:fb:e2:ab:66:
0e:54:ce:0d:dc:49:e5:5c:55:f5:3c:44:59:6b:32:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:24:5A:97:77:ED:DE:92:B6:78:62:0A:19:A2:8A:7E:DE:D1:14:20
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139302e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:bb:be:ad:58:17:be:39:90:ff:e9:84:ad:f1:c4:80:de:30:
d5:bf:7a:3c:37:dd:5c:dd:cb:a9:58:1b:f6:27:2d:e0:b2:0c:
53:64:e8:a2:ab:5a:a1:ae:ea:a2:c5:dc:63:6a:a2:6b:b2:19:
62:5a:b2:44:31:db:33:0b:42:ec:b1:90:0c:4c:8d:81:3d:90:
d0:94:b6:71:36:96:05:65:89:2c:7b:cd:33:96:24:55:54:77:
de:5f:f2:11:ce:c5:aa:59:4b:b4:54:e1:19:50:ec:72:eb:0c:
b1:39:f2:55:1a:09:4e:1e:41:33:3d:cb:84:73:3c:3d:45:18:
b6:fd:60:33:83:7e:e9:a5:2c:67:86:f0:2a:83:46:ba:b7:ee:
0c:16:d6:df:16:51:e0:9e:96:c3:88:2c:40:21:28:51:9d:e3:
19:96:29:6b:24:a4:04:c7:98:65:b0:06:d3:10:e4:32:b8:49:
3a:87:7b:29:85:7c:ac:29:29:d1:89:82:d8:1d:7c:4b:79:cb:
63:16:e2:10:fc:6b:e8:c6:de:e7:51:e5:e6:1d:82:a6:25:2b:
83:19:47:0c:72:38:a1:53:fc:05:f6:c0:09:18:db:d6:d2:01:
21:13:fd:f5:38:29:f4:81:a6:35:9e:f5:1e:ee:3d:41:ab:4f:
64:24:7d:fa
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUCx7222immPrd9BEw3QKhKy/gqaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDI5MzJaFw0yNjEyMDIwMDM0MzJaMDMxMTAvBgNV
BAMTKDcyMjQ1QTk3NzdFRERFOTJCNjc4NjIwQTE5QTI4QTdFREVEMTE0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwX/rO6ydDndbvmdphIcnWva7
K4cQNEBir2rmRsR0XcLOG85w11IcautaiaLej0t75TUqrnEIOUKsDZdVu9tW+XRe
J+Sv6NXJGA44sZd0kfSIc8p46u6DSJ6Y73NaCSqcDA4FaE16w+3igHaPL9r4AujA
y9CJASq1AkoLyuO9gmYWmSds/ZAK1tll+RIO2A626qL6Fscf+e73XcaoL8y9UAew
V2TsUxfoJeTFTrR3dX9C00X/Q9l1zJgQpRHdpiRz3hppEV09JUiC/VuR1gnH0qKI
n4siizpu5pZfHseyLZCQK+cJx3MBwwSq++KrZg5Uzg3cSeVcVfU8RFlrMnCJAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUciRal3ft3pK2eGIKGaKKft7RFCAwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
MzM4MmUzMDJlMzEzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM4MzMz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIoAvjANBgkqhkiG9w0BAQsFAAOCAQEAfLu+rVgXvjmQ/+mE
rfHEgN4w1b96PDfdXN3LqVgb9ict4LIMU2Tooqtaoa7qosXcY2qia7IZYlqyRDHb
MwtC7LGQDEyNgT2Q0JS2cTaWBWWJLHvNM5YkVVR33l/yEc7FqllLtFThGVDscusM
sTnyVRoJTh5BMz3LhHM8PUUYtv1gM4N+6aUsZ4bwKoNGurfuDBbW3xZR4J6Ww4gs
QCEoUZ3jGZYpaySkBMeYZbAG0xDkMrhJOod7KYV8rCkp0YmC2B18S3nLYxbiEPxr
6Mbe51Hl5h2CpiUrgxlHDHI4oVP8BfbACRjb1tIBIRP99Tgp9IGmNZ71Hu49QatP
ZCR9+g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:44:01 2025 by rpki-client