This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130332e302f32342d3234203d3e203532383338.roa
File: 3137372e36362e3130332e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: NTA7PqQWHjJm5nvin5aPcly0H06jJ8OfHpIvhzMmEY0=
Subject key identifier: 0A:4F:BD:C9:A8:0D:6C:2D:9F:0F:D3:CF:06:AC:86:DC:57:83:B8:07
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 5D05B3E591CB9DEB8EED49F371606D7AB933EBDD
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130332e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:44:15 +0000
ROA not before: Wed 03 Dec 2025 00:39:15 +0000
ROA not after: Wed 02 Dec 2026 00:44:15 +0000
asID: 52838
IP address blocks: 177.66.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:05:b3:e5:91:cb:9d:eb:8e:ed:49:f3:71:60:6d:7a:b9:33:eb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:39:15 2025 GMT
Not After : Dec 2 00:44:15 2026 GMT
Subject: CN=0A4FBDC9A80D6C2D9F0FD3CF06AC86DC5783B807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:a6:16:d3:1e:b3:b8:5d:a4:9c:79:b8:e0:
08:45:94:b8:cb:7a:15:50:f2:98:65:80:a0:6b:7a:
d5:80:4a:73:10:72:af:55:1d:1c:70:c3:ad:96:e2:
20:50:89:12:24:26:da:e8:a3:bb:51:37:80:25:db:
6e:8f:ec:a5:f5:55:86:91:04:d3:54:0d:f2:4a:2b:
aa:82:f0:c3:5f:33:f3:fd:c0:7f:65:a9:d3:a8:bd:
7c:b3:10:1b:ef:ea:56:c3:69:18:f5:0c:60:d3:f7:
45:66:82:73:6d:8a:c3:bb:96:89:1d:96:9c:a7:fe:
75:e5:80:e2:c1:7d:e1:08:de:57:a1:f8:94:a0:f9:
a5:ff:b6:d5:a8:e0:09:46:88:f1:c7:ad:c4:63:47:
e3:e8:e9:41:6a:d6:99:a1:b8:e6:73:c4:4b:0d:e4:
50:04:9a:e5:f8:f8:e4:3f:8c:84:18:7f:d7:a6:54:
79:ee:be:a0:5a:33:f6:f9:8b:d4:2b:84:72:c4:e3:
2a:f5:e8:56:87:2b:31:bd:8e:7f:7c:7f:4b:3c:9f:
13:3e:d1:02:56:0f:44:2d:74:8a:8b:2a:dd:a5:24:
2c:a0:ad:11:3a:ff:2b:85:5d:6f:ca:01:2f:f5:f5:
bd:d8:cc:7d:6b:97:36:83:0c:e0:c6:57:24:13:68:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:BD:C9:A8:0D:6C:2D:9F:0F:D3:CF:06:AC:86:DC:57:83:B8:07
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130332e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:20:9c:4e:8f:9e:60:99:ba:5f:68:de:19:d5:9b:12:b4:db:
b4:74:e2:e8:eb:ac:98:9c:25:23:90:55:e9:c7:ff:55:70:c3:
ce:ff:17:cd:b2:bf:28:07:92:80:f3:a1:e0:87:d1:c7:da:14:
20:ad:f2:d1:a2:35:42:1b:fe:58:9b:a5:09:f7:1c:9a:55:9e:
74:fc:2b:2e:6d:5d:bd:44:c0:b8:c5:99:57:e9:9a:da:51:17:
62:28:75:75:5d:ab:1e:e1:69:96:e3:b0:3d:f3:b4:8f:54:ae:
b0:7a:71:78:db:25:2d:f5:03:4e:f0:c1:1f:48:1c:c3:0c:2f:
99:bf:44:f8:86:c1:aa:05:29:25:22:9b:a7:ab:43:62:40:e7:
29:0f:36:cb:d3:e2:e1:05:b1:50:d7:41:8d:eb:f0:2b:55:89:
35:27:99:92:52:e0:e3:76:93:3e:f6:6f:aa:4f:d5:ce:8c:02:
be:4e:a8:fb:ae:61:d4:b3:9f:bf:41:dd:54:d6:21:97:8d:cb:
af:f8:38:8b:4f:17:0e:1a:71:7e:9c:70:e2:40:4b:cf:b4:7f:
d0:88:a8:9b:0b:e0:a2:3d:0c:bc:4b:c2:3f:f2:a2:49:9c:82:
5c:5d:6e:02:b6:3d:d3:23:68:0b:86:52:be:a5:9f:39:05:5e:
04:4c:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:22 2025 by rpki-client