This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233382e302f32342d3234203d3e20323636303230.roa
File: 3137302e3234352e3233382e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier: i8NmCsgriLCrYXfQhdBzbJxVEczE2tS28QNFrFuWtAY=
Subject key identifier: 57:5B:03:CB:78:19:10:3B:CA:08:74:19:AA:A2:D1:67:6F:03:7A:B5
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 4B3C1AEBCEDFB88F0574610FDAEF168AB32DB5EB
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233382e302f32342d3234203d3e20323636303230.roa
Signing time: Wed 10 Dec 2025 03:07:33 +0000
ROA not before: Wed 10 Dec 2025 03:02:33 +0000
ROA not after: Wed 09 Dec 2026 03:07:33 +0000
asID: 266020
IP address blocks: 170.245.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 07:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3c:1a:eb:ce:df:b8:8f:05:74:61:0f:da:ef:16:8a:b3:2d:b5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Dec 10 03:02:33 2025 GMT
Not After : Dec 9 03:07:33 2026 GMT
Subject: CN=575B03CB7819103BCA087419AAA2D1676F037AB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:26:63:36:5e:a0:dc:03:74:01:f3:26:a1:
aa:2a:d1:a1:9a:b1:a8:12:ac:3e:b5:ee:7f:93:ab:
01:6a:5c:12:fd:cc:b8:53:85:51:3b:d6:8a:19:b3:
b9:52:53:be:d1:ee:f4:bb:bd:0f:7f:d1:12:2d:83:
39:50:94:75:b3:23:76:76:3f:05:57:ca:87:d4:2c:
ce:9c:f7:3e:c3:36:02:f2:29:d9:f2:7f:e6:48:1f:
f9:60:2c:40:0d:a5:3f:63:65:58:49:4f:4b:ba:f4:
98:e9:a8:0d:ca:db:fa:4f:e0:77:60:8e:80:60:52:
6d:73:97:82:97:b9:82:67:ae:93:87:a6:13:4b:66:
4e:3f:84:af:a7:d1:57:a7:b2:50:c3:06:7c:c6:e9:
34:ab:6d:45:5d:4b:71:8f:b1:82:53:68:5a:1a:ec:
e0:62:f3:2f:8e:73:19:f1:85:51:eb:b0:b7:d3:75:
2b:28:bb:8d:e5:3a:ad:e8:ba:90:b7:c4:28:31:e9:
02:31:bd:a5:bb:f9:14:00:23:e9:e1:8a:64:7f:09:
3c:91:9e:6a:33:af:93:6c:34:16:d9:72:c5:f5:43:
05:cc:c5:dc:45:73:44:07:59:79:9c:5b:a8:cc:78:
18:d1:b4:27:57:55:ce:79:2d:b7:80:98:51:10:c0:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:03:CB:78:19:10:3B:CA:08:74:19:AA:A2:D1:67:6F:03:7A:B5
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233382e302f32342d3234203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
11:50:13:9b:f0:ac:59:20:ae:a0:47:0e:50:76:cd:59:b5:08:
33:0a:58:98:fa:83:d6:56:f7:5d:5f:16:b2:a0:52:f0:d6:20:
96:6f:37:15:d1:91:58:fb:98:a0:e3:fe:2e:ff:2b:f6:34:3a:
ec:b2:ae:dd:8e:37:0a:cc:8a:5c:02:23:72:0c:8d:81:c9:55:
22:e2:0c:ce:ab:7a:6d:d3:c8:b5:eb:82:ed:0c:72:ad:47:32:
62:ba:05:1c:08:69:34:da:88:1c:37:f9:fe:77:9e:01:8d:43:
42:5e:ba:78:ab:b5:a7:a6:94:c1:34:ab:7c:63:63:e0:2e:08:
89:ed:a3:33:1c:c8:54:56:ba:ba:03:a2:22:c1:cb:9c:9b:4f:
2f:70:b1:7c:68:0e:a3:89:0f:6f:11:b7:bc:76:1c:8d:31:74:
b5:f2:5c:35:c3:26:48:2b:92:39:82:b7:d9:98:cf:c0:35:62:
a0:84:8d:7d:9b:58:78:ce:36:6e:32:62:5d:b3:eb:9f:87:63:
ff:b1:c1:9d:28:45:73:24:2d:23:a9:3d:b7:55:73:c6:f7:90:
9e:6d:e7:b9:40:e6:1b:85:07:08:d4:d6:7d:b3:fc:7f:ff:9b:
2d:51:71:7b:1a:df:dc:42:fd:44:ce:e2:66:d5:dd:38:a7:bc:
14:aa:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:53:51 2025 by rpki-client