This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32342d3234203d3e203532383338.roa
File: 3134332e3230322e39322e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: Vl407Xbd/B4vMHRFlPlnujrcdM1HxZA2XTpOsKlX+uE=
Subject key identifier: 57:21:0C:72:4A:E7:EE:AE:49:9B:7E:6D:CB:32:16:D1:27:06:3A:C5
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 0DDCA2538CF524370EB16B86B24D8E4452B328BD
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:38:21 +0000
ROA not before: Wed 03 Dec 2025 00:33:21 +0000
ROA not after: Wed 02 Dec 2026 00:38:21 +0000
asID: 52838
IP address blocks: 143.202.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:dc:a2:53:8c:f5:24:37:0e:b1:6b:86:b2:4d:8e:44:52:b3:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:33:21 2025 GMT
Not After : Dec 2 00:38:21 2026 GMT
Subject: CN=57210C724AE7EEAE499B7E6DCB3216D127063AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:7a:47:4d:0e:61:b9:e6:23:dd:95:8a:fb:
8f:9c:2d:2a:4f:74:0d:9c:25:f4:16:c3:a0:89:00:
9f:78:45:51:8f:3d:c5:16:e5:ce:cd:0d:c2:cb:4f:
5a:b9:ec:f5:03:58:b0:86:a3:0a:77:e9:77:20:0a:
9e:c3:db:f5:13:48:82:ab:d0:70:22:96:90:ca:bf:
8e:c6:91:0a:82:88:fb:a7:15:aa:6c:84:0f:25:73:
9b:03:5b:b5:8d:0d:57:7c:59:bd:e6:2f:0e:0e:95:
cc:f5:b6:4e:d3:66:0f:fd:2b:05:96:45:63:c6:d0:
b5:3d:7a:80:c0:5e:e5:4b:f5:e9:1d:5e:31:52:f9:
9b:04:96:f3:bd:24:ee:8b:ec:a8:34:92:9c:65:04:
63:a5:23:ed:28:f9:34:29:f4:d0:e3:84:8e:27:8f:
23:8e:a1:ea:f3:89:5d:2c:2a:d5:49:d4:ac:a4:51:
3a:c6:6b:e0:1c:2f:8c:4c:19:ab:27:ec:27:04:25:
c2:9d:ac:bf:07:90:b4:f0:24:7c:b1:92:f9:f1:23:
d1:7e:e5:b0:57:0f:9c:b2:ed:3c:2b:a4:d4:45:25:
99:73:77:fd:54:00:fb:9d:61:fc:23:88:7f:55:3a:
8c:8c:f6:be:e5:cd:34:00:63:90:f4:fc:ab:cb:84:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:21:0C:72:4A:E7:EE:AE:49:9B:7E:6D:CB:32:16:D1:27:06:3A:C5
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e7:79:98:be:6d:f5:02:d3:e1:a9:49:07:2b:69:22:26:22:
62:bd:dc:64:ba:e0:28:04:8d:45:3e:40:06:7c:56:bd:1f:c3:
8d:10:a2:46:2b:ae:ed:3a:4a:b9:be:13:45:50:25:4d:09:0c:
32:55:4b:a3:4d:ae:8a:15:b8:6d:42:95:9e:f7:d6:a9:5c:bf:
f9:e7:fb:4d:93:c0:7b:43:02:bd:69:9b:d4:48:b7:01:bc:79:
e4:82:7d:65:ef:50:a1:61:34:36:9c:dd:a5:57:d6:a0:95:11:
0a:96:d9:22:01:a2:03:c4:22:0f:53:b8:b6:ce:fe:60:5f:96:
fc:76:f5:0e:1c:64:b1:57:f3:6f:eb:5b:1f:65:b1:66:6b:4a:
a9:d5:ef:a8:00:96:da:06:38:8f:db:64:8e:82:58:dd:ff:35:
c0:9c:4c:2f:ac:c4:d0:4c:89:d8:1d:34:b0:1f:3b:7d:48:d3:
f6:0c:81:e8:f3:f6:20:97:a3:b1:3d:d8:1f:d4:2a:f3:8f:c7:
69:66:a2:6b:6d:c6:8c:6b:5b:f4:a2:d5:7f:20:dc:3f:30:1a:
8f:11:fe:a7:71:87:e5:12:04:c7:7c:7a:8d:80:6f:6d:57:67:
07:16:0c:ae:85:d8:41:4b:57:e7:86:c4:cc:33:32:e1:9b:39:
9e:ae:f0:7e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUDdyiU4z1JDcOsWuGsk2ORFKzKL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDMzMjFaFw0yNjEyMDIwMDM4MjFaMDMxMTAvBgNV
BAMTKDU3MjEwQzcyNEFFN0VFQUU0OTlCN0U2RENCMzIxNkQxMjcwNjNBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcu3pHTQ5hueYj3ZWK+4+cLSpP
dA2cJfQWw6CJAJ94RVGPPcUW5c7NDcLLT1q57PUDWLCGowp36XcgCp7D2/UTSIKr
0HAilpDKv47GkQqCiPunFapshA8lc5sDW7WNDVd8Wb3mLw4Olcz1tk7TZg/9KwWW
RWPG0LU9eoDAXuVL9ekdXjFS+ZsElvO9JO6L7Kg0kpxlBGOlI+0o+TQp9NDjhI4n
jyOOoerziV0sKtVJ1KykUTrGa+AcL4xMGasn7CcEJcKdrL8HkLTwJHyxkvnxI9F+
5bBXD5yy7TwrpNRFJZlzd/1UAPudYfwjiH9VOoyM9r7lzTQAY5D0/KvLhCN7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUVyEMckrn7q5Jm35tyzIW0ScGOsUwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
NDMzMmUzMjMwMzIyZTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzgz
MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAj8pcMA0GCSqGSIb3DQEBCwUAA4IBAQAf53mYvm31AtPh
qUkHK2kiJiJivdxkuuAoBI1FPkAGfFa9H8ONEKJGK67tOkq5vhNFUCVNCQwyVUuj
Ta6KFbhtQpWe99apXL/55/tNk8B7QwK9aZvUSLcBvHnkgn1l71ChYTQ2nN2lV9ag
lREKltkiAaIDxCIPU7i2zv5gX5b8dvUOHGSxV/Nv61sfZbFma0qp1e+oAJbaBjiP
22SOgljd/zXAnEwvrMTQTInYHTSwHzt9SNP2DIHo8/Ygl6OxPdgf1Crzj8dpZqJr
bcaMa1v0otV/INw/MBqPEf6ncYflEgTHfHqNgG9tV2cHFgyuhdhBS1fnhsTMMzLh
mzmervB+
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:44:01 2025 by rpki-client