This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa
File: 3133382e302e3139312e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: Ihr2yDYemtGmE43gixxw02wgLipOwhIku0vt3DZGdXk=
Subject key identifier: E4:0B:E5:9D:93:D5:78:F7:21:11:C2:1C:28:09:D8:EF:B0:DC:96:D6
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 5D2D5E0851802596572F1BF66B638469838E0284
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:35:05 +0000
ROA not before: Wed 03 Dec 2025 00:30:05 +0000
ROA not after: Wed 02 Dec 2026 00:35:05 +0000
asID: 52838
IP address blocks: 138.0.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2d:5e:08:51:80:25:96:57:2f:1b:f6:6b:63:84:69:83:8e:02:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:30:05 2025 GMT
Not After : Dec 2 00:35:05 2026 GMT
Subject: CN=E40BE59D93D578F72111C21C2809D8EFB0DC96D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:ea:9a:c0:6f:51:df:5f:37:fd:c6:29:93:
00:12:57:dc:f6:73:0a:f3:38:b3:0e:55:78:f8:ef:
f0:42:85:e0:d0:72:33:b9:8b:f2:5a:41:0d:35:b5:
5e:0f:2b:ee:61:bc:45:73:13:60:83:5c:78:20:42:
0a:c7:27:d0:c4:f9:4d:4b:e0:78:06:b5:b6:a4:56:
bb:8f:1a:25:f2:04:a2:5e:41:b9:24:53:6b:b8:f8:
ee:55:ed:61:51:ab:c9:f4:b1:7a:81:81:5f:9d:d3:
4c:ec:31:e6:5f:45:79:bf:30:0e:68:5c:03:5f:f5:
bd:ac:25:28:4b:6c:af:67:88:ea:e9:79:e1:7f:ed:
b1:03:d2:98:52:80:e8:f4:27:68:b2:b5:57:7b:d6:
f6:c4:3e:1f:44:4b:19:f2:de:a2:59:63:9b:b1:1e:
6c:03:ca:62:21:e4:9e:e4:6c:04:ec:cc:e8:66:f5:
5f:10:16:f0:d0:b0:e2:c6:5e:77:99:73:1a:4d:15:
e5:b4:49:76:7f:fa:6e:8a:59:58:f3:01:bb:01:33:
e2:45:b9:7d:fd:ec:ab:5f:c3:e3:5e:e1:79:e1:5a:
cc:1e:d5:a5:db:46:13:a5:75:68:55:07:3e:ec:54:
9b:44:89:a6:5f:1b:73:ec:00:bf:68:48:3e:77:94:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:E5:9D:93:D5:78:F7:21:11:C2:1C:28:09:D8:EF:B0:DC:96:D6
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.191.0/24
Signature Algorithm: sha256WithRSAEncryption
34:81:3a:5c:8c:f0:60:2b:3c:47:57:48:99:ad:87:10:ae:78:
6f:e2:aa:6a:2e:70:5c:0a:97:cc:bb:e9:1e:c1:db:32:81:7c:
de:c7:7f:21:19:b8:ce:27:28:45:bb:2b:cd:16:45:fd:36:f5:
5a:43:3f:95:ea:b2:67:29:cf:26:c4:b3:c2:dc:c2:9a:b7:d5:
a1:91:25:dc:c2:71:e4:a7:fa:fc:2d:ed:ad:17:92:5f:7a:84:
4c:25:9c:1d:d0:04:f0:9a:c5:a8:a7:05:a4:4f:9d:92:a7:75:
c7:f0:2e:86:0a:c3:2c:63:7c:5e:b7:1b:22:5c:41:f2:c2:5e:
6d:55:e9:a0:48:6f:4a:86:a8:13:c8:fe:64:f5:c9:fb:9f:8d:
b8:0d:2f:10:ff:58:70:5b:0d:86:92:1c:95:7b:1b:28:cb:4e:
5b:ec:d2:79:53:0b:a3:2b:83:c7:87:a4:07:d3:ae:a0:91:9c:
27:b2:dc:56:17:9d:b9:8e:c7:4d:44:b0:70:25:37:01:01:06:
c3:dd:73:7a:23:81:dc:98:2d:fe:39:9d:93:30:05:54:0c:e1:
10:67:e6:d1:09:70:52:7f:82:3e:66:0e:b8:6e:b9:3c:0d:6a:
db:13:60:5f:58:ce:a3:36:8b:dc:d7:68:3f:4f:ac:5f:27:76:
c5:d7:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:14 2025 by rpki-client