This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39332e302f32342d3234203d3e203532383338.roa
File: 3134332e3230322e39332e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: rEKLGNDjx+syIXskrWwCAZP9EQmBJ8N119Z89anjSGo=
Subject key identifier: 91:BE:4F:47:DE:90:92:16:D0:90:18:EA:BD:12:0F:83:3D:A1:F7:60
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 61F90AC83ECBA056FB3C07209530C6B0C6931957
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39332e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:38:38 +0000
ROA not before: Wed 03 Dec 2025 00:33:38 +0000
ROA not after: Wed 02 Dec 2026 00:38:38 +0000
asID: 52838
IP address blocks: 143.202.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f9:0a:c8:3e:cb:a0:56:fb:3c:07:20:95:30:c6:b0:c6:93:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:33:38 2025 GMT
Not After : Dec 2 00:38:38 2026 GMT
Subject: CN=91BE4F47DE909216D09018EABD120F833DA1F760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:68:7e:f7:02:27:34:3c:57:eb:0c:26:0a:
c6:b9:0d:ae:af:e4:85:2f:e3:ec:bd:45:38:29:c3:
88:21:74:f1:02:ce:20:e8:03:d6:07:bd:7c:03:14:
3d:c1:92:56:23:3b:fa:80:e9:18:46:0f:4a:36:8e:
9e:4b:13:2f:40:4b:ec:39:08:c5:ab:3d:68:3d:f6:
93:69:cb:4f:57:4f:5f:88:ec:cc:2e:c0:26:4b:54:
c2:45:fa:37:81:df:7d:be:f4:24:3d:d7:1e:60:de:
4e:bc:f7:6b:67:96:b7:b6:57:a4:bb:52:1c:7d:43:
39:5f:52:9a:40:a6:c7:b7:f0:4a:63:da:dc:47:92:
66:cc:4a:bc:a8:8a:89:4d:f4:e3:58:ad:2a:0c:4d:
46:70:a5:99:0a:61:42:46:b9:10:91:3b:d7:62:b8:
e9:4a:b2:94:0a:7c:cc:38:da:de:aa:52:26:d5:36:
f6:7c:31:17:3a:a9:1e:cc:f7:18:ce:13:16:56:10:
aa:f2:c8:81:c2:0d:90:cd:2d:fe:84:7b:b0:85:9c:
6b:be:48:52:85:3c:fa:27:33:fe:8a:11:77:00:b1:
d4:d3:17:e1:cf:8e:2e:f2:3f:cf:f9:62:17:b5:4a:
7b:d4:53:0a:91:b5:ee:69:7d:73:c6:31:fa:28:96:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:4F:47:DE:90:92:16:D0:90:18:EA:BD:12:0F:83:3D:A1:F7:60
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39332e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.93.0/24
Signature Algorithm: sha256WithRSAEncryption
47:78:21:fb:86:b5:19:85:72:31:5b:50:f2:76:8d:73:07:d8:
0d:0e:38:a7:4e:f3:bc:6b:a7:a1:fb:63:f8:b9:7c:e6:7e:d5:
5d:69:8e:1e:ef:d1:82:37:3c:13:8a:c9:b0:26:15:d2:ca:01:
81:7c:dd:fa:61:eb:45:c0:fc:dc:f4:1d:7b:05:08:71:41:7b:
58:88:e9:da:87:9b:cb:32:39:d8:51:06:63:7d:1c:d7:3f:46:
46:f6:34:cb:d8:90:46:61:88:c7:d2:c4:48:34:cb:3b:8d:5c:
d3:c4:70:4a:c6:0a:7c:1c:3d:56:33:ac:9b:eb:60:6a:09:86:
0f:4a:a6:55:e3:d5:2c:cf:d3:1a:ff:e3:ad:3f:cb:4f:58:3f:
41:11:cd:01:b9:41:74:49:4f:73:31:7a:68:39:bc:b4:0f:b5:
c1:4e:e1:ec:6a:77:21:95:6f:57:61:b0:38:55:06:5f:f4:b2:
ed:7d:86:2d:67:ba:07:28:ac:a6:cd:af:3a:e3:22:db:3e:72:
03:8a:60:e6:7b:59:3b:c4:c0:8c:a3:07:d4:93:c1:31:53:5b:
8b:e2:55:07:4d:f1:4c:53:15:83:41:c7:44:ee:df:94:8e:18:
5b:57:91:bf:d9:92:23:30:de:90:2f:d9:fb:7f:9a:33:04:90:
24:7c:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:16 2025 by rpki-client