This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa
File: 3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa (raw, json)
Hash identifier: 6P9Vtoct7sk/VxFqNCuCS0hvi4MXr1QRoBeUB7AVq8A=
Subject key identifier: DC:DB:32:81:01:5E:C0:D1:C1:DE:0F:B5:94:36:9E:BD:B2:B0:93:5B
Certificate issuer: /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial: 241C27BE2998DA60E2164977C272DC11BAB3249B
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa
Signing time: Wed 17 Dec 2025 18:11:31 +0000
ROA not before: Wed 17 Dec 2025 18:06:31 +0000
ROA not after: Wed 16 Dec 2026 18:11:31 +0000
asID: 264425
IP address blocks: 131.221.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 18:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1c:27:be:29:98:da:60:e2:16:49:77:c2:72:dc:11:ba:b3:24:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Validity
Not Before: Dec 17 18:06:31 2025 GMT
Not After : Dec 16 18:11:31 2026 GMT
Subject: CN=DCDB3281015EC0D1C1DE0FB594369EBDB2B0935B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:0c:8e:cc:69:b5:8c:2d:fc:3b:67:10:38:
e9:77:a1:fa:6f:f1:d3:29:8f:71:6d:8a:7e:8e:00:
5a:4d:25:0a:51:e1:a5:86:99:b7:76:37:fb:d6:31:
1b:8c:3f:48:43:23:97:98:0d:3a:75:28:6b:59:67:
43:a3:97:4b:ab:96:df:f0:0f:75:16:6c:06:c6:fc:
ac:ff:68:75:39:a5:19:37:c4:ff:f7:bb:c3:93:51:
38:68:02:29:43:ea:2b:04:20:b3:3f:28:2c:bc:e2:
43:03:fc:a4:05:32:86:24:7c:20:22:e4:65:f6:02:
7b:8c:f3:63:50:01:b7:95:87:79:d5:93:93:26:cc:
d6:b0:4a:79:f6:95:5f:d1:89:08:7b:8f:c8:22:aa:
5d:e7:58:dc:d8:80:e0:cc:65:30:f3:6c:85:46:cf:
8e:b8:2c:cd:52:43:46:e8:6d:7a:47:35:03:d7:f4:
b1:d3:3c:68:03:7c:b7:7c:5c:de:df:ec:cb:2c:4d:
dc:c0:47:a9:89:a6:d2:2f:1e:bf:c4:da:c9:40:86:
dc:62:10:b9:a7:9e:29:a4:48:b9:38:a3:30:85:5e:
4a:be:8e:93:36:23:36:bb:6c:e1:29:fc:32:18:d9:
36:e0:6d:6d:bf:48:60:c4:20:9b:0d:11:53:32:3f:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:32:81:01:5E:C0:D1:C1:DE:0F:B5:94:36:9E:BD:B2:B0:93:5B
X509v3 Authority Key Identifier:
keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.185.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:c8:11:3b:75:d8:9f:02:3c:8d:2e:3c:48:00:20:f0:14:df:
3b:d8:f5:a7:48:bb:a0:07:0e:8b:d4:09:97:2b:58:b2:7f:83:
fa:3a:8a:96:29:c4:2d:3c:8c:61:f3:14:94:90:06:15:39:26:
fc:66:af:42:f0:8d:ab:eb:ad:9e:2e:e7:79:78:85:a4:fa:fb:
a0:ff:5a:f3:9b:13:9c:f0:ff:1f:be:51:91:1b:db:50:ad:61:
14:12:9b:ca:a8:2a:db:84:ba:1c:a4:d7:3d:f2:c4:2f:e0:94:
a4:cc:f1:39:40:3b:e9:04:91:b1:17:09:1f:d4:9e:fc:2c:bb:
49:08:6f:5c:be:b4:31:ae:83:53:31:c7:69:7b:d3:1a:8b:f5:
01:5d:8f:59:8e:63:e6:d0:28:d7:35:c3:3e:e5:14:0a:8b:9d:
c2:df:5c:ac:a2:7f:dc:0c:ed:e3:b0:40:3e:96:c6:6c:86:41:
8b:b0:de:7c:a6:93:db:e3:00:c4:d5:8f:ed:64:89:d4:01:40:
78:20:21:b1:c2:bc:c3:4b:7d:ab:c6:9c:5d:ec:8d:4d:6e:39:
85:f6:d9:93:79:6f:84:76:07:18:9e:7b:db:57:76:91:81:21:
46:a7:f0:37:4d:b3:24:c0:35:86:50:b6:76:7f:89:2b:24:10:
49:1e:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:52:47 2025 by rpki-client