This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e322e302f32332d3332203d3e20323633393830.roa
File: 3139312e33372e322e302f32332d3332203d3e20323633393830.roa (raw, json)
Hash identifier: uC80NSAZBlZtKUSJfaJoVNSiK8NUVF7U+l+fsS49bU0=
Subject key identifier: 66:76:C8:13:03:C5:A7:F2:C1:1B:EE:D6:8D:5F:EC:B2:DD:8D:57:20
Certificate issuer: /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial: 6F75ABCA2F6FD773EF14238923A90B7D4F0368BB
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e322e302f32332d3332203d3e20323633393830.roa
Signing time: Thu 18 Dec 2025 12:33:10 +0000
ROA not before: Thu 18 Dec 2025 12:28:10 +0000
ROA not after: Thu 17 Dec 2026 12:33:10 +0000
asID: 263980
IP address blocks: 191.37.2.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 03:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:75:ab:ca:2f:6f:d7:73:ef:14:23:89:23:a9:0b:7d:4f:03:68:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Validity
Not Before: Dec 18 12:28:10 2025 GMT
Not After : Dec 17 12:33:10 2026 GMT
Subject: CN=6676C81303C5A7F2C11BEED68D5FECB2DD8D5720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:db:16:d9:2d:c6:45:40:39:1f:b4:5c:4e:
5d:a5:55:51:07:24:6c:3b:ad:fb:c7:39:b1:14:68:
29:d5:74:66:26:0c:9d:60:05:0c:e2:1f:40:7c:d9:
23:52:9f:fd:63:0c:2e:3a:55:4c:c1:f9:33:47:c8:
ea:c1:0b:e4:d8:89:d7:f1:00:f5:5d:01:bd:35:7c:
d8:0d:94:8c:c8:54:a5:09:2a:67:9e:ef:b1:f4:6c:
c0:aa:6f:ee:4b:85:e0:77:6d:ff:2c:3e:fb:6d:0f:
54:22:8b:82:d0:e7:f4:ac:1f:4b:b2:d1:fd:49:d0:
64:e6:0d:a7:66:fc:92:49:cd:0a:04:d9:a1:1b:f7:
f0:4f:e3:9d:7d:ea:ac:9e:44:bd:d6:23:53:8b:84:
d2:2d:08:02:8f:cb:24:10:b1:e7:1d:04:d5:85:02:
43:90:e5:80:11:8d:7a:f5:26:a5:fd:43:7a:b1:64:
da:f6:b7:ae:85:c4:b0:a8:5a:33:af:2c:75:8a:55:
1e:14:77:da:76:d8:a3:b7:cc:ea:3e:9a:c6:9a:da:
45:d9:da:d1:ba:75:51:15:ca:ae:c5:5e:58:0d:07:
15:da:65:83:0c:64:59:6b:a8:fe:4d:a7:c4:17:f1:
c1:5e:3f:f9:45:42:63:e5:66:8e:c8:c7:79:26:cd:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:C8:13:03:C5:A7:F2:C1:1B:EE:D6:8D:5F:EC:B2:DD:8D:57:20
X509v3 Authority Key Identifier:
keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e322e302f32332d3332203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.2.0/23
Signature Algorithm: sha256WithRSAEncryption
68:df:1b:b7:f8:f6:68:e5:8c:83:0b:65:a4:77:1f:b9:4c:cb:
b2:44:52:c9:b9:54:3c:31:77:3c:d6:2e:1c:d9:4f:85:6d:16:
68:4c:b0:bc:24:ea:34:aa:0d:bc:d2:7f:86:7f:bd:0f:30:de:
5c:c9:1d:e4:fc:60:7a:b9:8a:03:2b:bd:ba:2e:9a:b4:f3:26:
cc:de:4a:27:13:3f:ea:65:e1:b5:fc:5a:aa:b0:79:8b:75:75:
6f:43:19:99:ad:6a:53:a1:1c:fd:5b:e6:21:ab:50:35:c6:94:
d6:c8:4d:d8:a3:54:77:8b:b3:59:fa:95:7e:b3:b0:eb:be:4c:
fe:46:2d:56:c9:87:82:f7:b3:f6:20:2a:8a:55:f3:2b:4f:c9:
3f:17:3e:ad:6d:bf:6b:2e:7c:7d:81:89:26:53:37:89:de:d2:
76:8a:20:0a:8a:0b:07:53:c1:6b:56:a6:8e:5d:21:a2:d0:31:
ba:fb:47:85:94:ed:f6:4c:43:76:10:02:b8:4a:f4:8e:7e:d9:
7c:38:da:77:f4:88:fa:7b:0f:7c:a6:2c:03:d9:6a:30:03:fd:
cf:3f:a6:c5:1d:41:69:b5:73:c8:7b:18:fe:5c:ee:34:d8:3c:
b0:e7:1a:0b:9a:f6:c5:ff:f8:55:b4:84:b2:52:8c:6e:95:4a:
53:59:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:12:40 2025 by rpki-client