This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e20323732383531.roa
File: 3138392e33382e31362e302f32322d3234203d3e20323732383531.roa (raw, json)
Hash identifier: pwAFzey++bfdCAEqs6AwC1mB5SHNJ+K8kkP4Hz4x4Lk=
Subject key identifier: C8:44:4E:22:37:A8:98:BF:E7:C9:3A:42:E2:0B:62:1C:1C:68:01:58
Certificate issuer: /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial: 561CA4663987E576AEF9E9FC995C19172B61BAF1
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e20323732383531.roa
Signing time: Wed 10 Dec 2025 23:38:11 +0000
ROA not before: Wed 10 Dec 2025 23:33:11 +0000
ROA not after: Wed 09 Dec 2026 23:38:11 +0000
asID: 272851
IP address blocks: 189.38.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 06:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1c:a4:66:39:87:e5:76:ae:f9:e9:fc:99:5c:19:17:2b:61:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
Validity
Not Before: Dec 10 23:33:11 2025 GMT
Not After : Dec 9 23:38:11 2026 GMT
Subject: CN=C8444E2237A898BFE7C93A42E20B621C1C680158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:21:ef:ac:89:cf:4e:13:bd:20:7b:25:96:
48:55:30:4f:42:7a:a9:fd:7a:ba:a3:9d:eb:fd:66:
6b:40:b3:48:2a:e7:a1:f9:90:9f:e5:b2:86:f5:8d:
48:7b:34:66:5d:34:46:40:2d:fa:6b:54:c0:3f:5f:
2a:6a:5c:cf:1d:d8:36:3a:84:0c:13:92:40:cb:1b:
e1:42:c1:a2:c4:72:8c:fa:90:29:97:17:48:54:2c:
43:11:74:2a:4d:89:e5:63:67:13:e6:b0:c2:db:46:
38:45:0a:46:85:f6:5e:d4:75:a8:fa:d2:1d:64:33:
c3:2a:38:c4:ab:54:fc:b5:02:b8:77:9b:2c:51:19:
cc:37:3e:fc:9e:d9:3e:7c:a6:61:a1:c0:ce:23:4f:
ff:6f:c7:c4:5e:27:b0:b2:18:5a:ef:31:6a:73:05:
ec:38:4e:dd:74:9a:1f:c7:ee:bb:28:c5:35:87:2b:
8e:c9:7e:d1:5f:58:91:14:8a:5c:5a:ee:9b:1c:ad:
1c:99:b4:67:d6:f2:7e:98:a4:58:4b:a9:65:0f:8d:
e0:3c:05:49:42:35:94:33:8b:ff:6b:b3:09:69:d4:
b4:fe:0a:c7:e9:ca:ba:db:e2:b0:50:cc:e4:80:87:
25:66:e9:9e:a0:05:bd:50:24:f1:17:30:41:dc:9f:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:4E:22:37:A8:98:BF:E7:C9:3A:42:E2:0B:62:1C:1C:68:01:58
X509v3 Authority Key Identifier:
keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e20323732383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.38.16.0/22
Signature Algorithm: sha256WithRSAEncryption
16:fb:6a:5c:59:f8:fc:48:ae:0c:50:5e:25:50:c6:6d:18:10:
e4:12:8c:09:b8:f7:af:e6:55:4d:b1:4d:ce:8b:98:86:7a:f1:
6e:a6:cb:4a:4e:ed:32:18:5c:bd:43:a2:43:61:6e:aa:b0:fe:
8d:10:7a:68:d1:fa:2b:81:b8:de:1b:6f:ec:46:ba:40:a0:60:
74:da:38:ca:2a:0e:ef:52:64:61:86:de:df:6c:83:56:de:88:
74:23:c2:e9:57:0d:74:ec:db:7b:87:26:8b:5e:1c:d1:d2:eb:
11:c6:42:57:96:88:66:49:f9:96:91:9a:2d:45:78:33:53:83:
c5:20:14:c3:29:d0:81:7b:77:9c:5d:01:71:97:a5:13:2e:ff:
71:eb:f6:27:1f:b4:27:73:bf:c7:0e:10:71:94:72:18:11:b8:
00:81:19:8b:9f:20:91:2f:e5:de:a0:4e:f9:2c:8b:58:95:06:
89:61:b2:04:a0:98:1b:c5:6b:f5:12:4e:7d:90:7c:e3:58:f3:
38:92:05:16:b0:6a:3a:93:5d:c1:56:17:76:22:74:87:62:cd:
b2:09:d4:5b:81:a0:16:a7:8f:09:2d:01:fd:c9:26:a2:74:d8:
24:eb:20:8d:c0:c6:ff:61:f2:7c:cf:2a:72:20:91:f3:cc:7b:
a3:2b:a6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:25:25 2025 by rpki-client