This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
File: 3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa (raw, json)
Hash identifier: VTAIIEmqMwwldvkp4cMdTv6SSUfSMuC6taaOCGuIjz4=
Subject key identifier: FA:58:C4:00:8F:98:79:38:CF:16:93:63:E3:7F:D3:C5:42:D8:EE:21
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 081EAABD5FA8B010A0C359744EAA18DBFEE80249
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
Signing time: Wed 10 Dec 2025 03:07:33 +0000
ROA not before: Wed 10 Dec 2025 03:02:33 +0000
ROA not after: Wed 09 Dec 2026 03:07:33 +0000
asID: 266020
IP address blocks: 170.245.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 08:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1e:aa:bd:5f:a8:b0:10:a0:c3:59:74:4e:aa:18:db:fe:e8:02:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Dec 10 03:02:33 2025 GMT
Not After : Dec 9 03:07:33 2026 GMT
Subject: CN=FA58C4008F987938CF169363E37FD3C542D8EE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:4a:7f:a2:77:55:95:55:87:a0:85:2a:9d:
21:1e:c0:e2:f7:a6:73:3d:fc:1a:84:b2:88:8b:ae:
da:54:1e:f4:52:40:7e:4e:72:99:f2:04:91:f9:79:
00:50:c3:89:5e:15:80:00:b5:40:c6:d2:be:fd:48:
11:31:f6:df:45:81:1b:77:b1:01:52:de:13:c0:ae:
7b:88:3c:45:70:02:0b:b9:1b:cc:42:f0:ea:c8:2b:
69:cc:93:c3:46:97:47:f5:a7:5b:3c:14:df:9e:89:
49:76:96:0d:e3:1e:84:26:ea:44:c1:9e:90:d0:e6:
fa:b1:19:99:72:02:ce:09:83:7f:2f:91:b1:29:a8:
af:97:f9:30:d2:df:f9:b4:bf:f2:47:47:8e:dc:4b:
f9:20:88:76:ad:3c:5d:5c:f0:21:fa:c8:88:01:c0:
b6:f1:d3:74:37:18:fc:18:11:5d:3a:07:dd:c6:71:
be:63:65:83:9d:d3:90:d7:4f:e6:fa:c0:5b:a8:42:
cc:8a:d5:ec:6e:78:f9:26:eb:b4:33:43:9a:ce:4b:
34:6c:a8:ff:da:19:43:06:95:49:7f:79:ee:84:3a:
68:5a:d6:35:34:4f:2d:29:96:0e:58:24:7d:2c:a5:
64:68:6d:46:fa:9a:61:f7:2c:f9:c0:38:a6:2b:d3:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:C4:00:8F:98:79:38:CF:16:93:63:E3:7F:D3:C5:42:D8:EE:21
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.236.0/22
Signature Algorithm: sha256WithRSAEncryption
60:aa:7c:55:00:92:06:e1:88:94:78:80:a4:95:00:d2:b1:00:
3a:8d:3a:1f:fa:dd:37:ae:15:4c:27:f6:81:90:4e:e8:5f:62:
a0:11:bc:b7:c9:8d:21:bb:79:74:3a:80:1f:4a:8b:9e:55:f1:
12:4d:c4:5a:ff:e8:6f:4d:88:f1:b8:b8:03:e5:ce:77:09:71:
a7:ed:bd:09:1b:9d:4a:39:77:de:56:ef:af:3a:bd:04:4c:a9:
10:0e:54:ff:36:98:90:fc:23:37:c8:3f:1e:81:98:61:f3:8c:
74:65:76:ad:fd:08:ea:1d:fb:35:e1:37:9d:41:a6:5a:73:cf:
67:8e:65:51:9a:69:2b:a4:20:33:c0:11:2b:9d:8c:02:e9:44:
4e:4f:55:3b:f9:0e:47:29:48:12:c9:8a:42:5c:26:f0:be:d7:
37:25:bc:6c:85:6b:87:e2:04:67:79:37:74:be:c3:5e:7c:ab:
3f:7a:6c:eb:06:bd:1f:da:c6:34:d4:4d:b2:74:5a:ea:96:83:
5a:68:0a:cb:4b:b1:52:b9:8d:70:2f:9c:16:78:bc:d5:b3:49:
ba:d0:de:dd:e8:93:0b:06:91:c9:bc:71:18:be:ab:6d:cd:80:
f7:b2:4b:c9:e7:1e:8f:bc:99:4b:c4:c7:d7:73:68:d7:29:02:
52:25:9b:16
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCB6qvV+osBCgw1l0TqoY2/7oAkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMzEyQjMwNTFGN0VDNEUzMDIxQ0UyMTk1NkQwQTJB
NTBGNzZFRjAeFw0yNTEyMTAwMzAyMzNaFw0yNjEyMDkwMzA3MzNaMDMxMTAvBgNV
BAMTKEZBNThDNDAwOEY5ODc5MzhDRjE2OTM2M0UzN0ZEM0M1NDJEOEVFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvUp/ondVlVWHoIUqnSEewOL3
pnM9/BqEsoiLrtpUHvRSQH5OcpnyBJH5eQBQw4leFYAAtUDG0r79SBEx9t9FgRt3
sQFS3hPArnuIPEVwAgu5G8xC8OrIK2nMk8NGl0f1p1s8FN+eiUl2lg3jHoQm6kTB
npDQ5vqxGZlyAs4Jg38vkbEpqK+X+TDS3/m0v/JHR47cS/kgiHatPF1c8CH6yIgB
wLbx03Q3GPwYEV06B93Gcb5jZYOd05DXT+b6wFuoQsyK1exuePkm67QzQ5rOSzRs
qP/aGUMGlUl/ee6EOmha1jU0Ty0plg5YJH0spWRobUb6mmH3LPnAOKYr02iBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+ljEAI+YeTjPFpNj43/TxULY7iEwHwYDVR0j
BBgwFoAUK7MSswUffsTjAhziGVbQoqUPdu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB
RU4vMC8yQkIzMTJCMzA1MUY3RUM0RTMwMjFDRTIxOTU2RDBBMkE1MEY3NkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjMxMkIzMDUxRjdFQzRF
MzAyMUNFMjE5NTZEMEEyQTUwRjc2RUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr17DANBgkqhkiG9w0BAQsFAAOCAQEAYKp8
VQCSBuGIlHiApJUA0rEAOo06H/rdN64VTCf2gZBO6F9ioBG8t8mNIbt5dDqAH0qL
nlXxEk3EWv/ob02I8bi4A+XOdwlxp+29CRudSjl33lbvrzq9BEypEA5U/zaYkPwj
N8g/HoGYYfOMdGV2rf0I6h37NeE3nUGmWnPPZ45lUZppK6QgM8ARK52MAulETk9V
O/kORylIEsmKQlwm8L7XNyW8bIVrh+IEZ3k3dL7DXnyrP3ps6wa9H9rGNNRNsnRa
6paDWmgKy0uxUrmNcC+cFni81bNJutDe3eiTCwaRybxxGL6rbc2A97JLyecej7yZ
S8TH13No1ykCUiWbFg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:53:52 2025 by rpki-client