This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3231302e302f32332d3233203d3e203238323230.roa
File: 3138372e31382e3231302e302f32332d3233203d3e203238323230.roa (raw, json)
Hash identifier: Pr9cO4wNzStp/H54L6UgTxrSpzN3pC8ZLtVac3O/Bn4=
Subject key identifier: D7:B3:CE:8B:B7:DE:51:12:AF:51:86:EF:A9:B2:B7:AE:69:27:19:23
Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial: 443F143C508D8E349C7BABD69AB93272ED44ED50
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3231302e302f32332d3233203d3e203238323230.roa
Signing time: Tue 09 Dec 2025 05:56:52 +0000
ROA not before: Tue 09 Dec 2025 05:51:52 +0000
ROA not after: Tue 08 Dec 2026 05:56:52 +0000
asID: 28220
IP address blocks: 187.18.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 02:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3f:14:3c:50:8d:8e:34:9c:7b:ab:d6:9a:b9:32:72:ed:44:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Validity
Not Before: Dec 9 05:51:52 2025 GMT
Not After : Dec 8 05:56:52 2026 GMT
Subject: CN=D7B3CE8BB7DE5112AF5186EFA9B2B7AE69271923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:d8:81:55:c6:bb:ae:82:3f:e3:18:14:f7:
7b:7f:75:53:a5:5e:48:a2:5e:23:be:75:51:e3:ad:
90:67:ea:ff:61:3d:3c:48:c1:40:ac:c1:bd:c1:94:
33:c2:b3:47:69:af:ed:15:e6:a5:bb:1c:42:46:41:
a9:81:ea:71:5a:ad:7b:ec:e3:ea:4b:d7:f4:5e:47:
68:10:68:68:b3:01:33:18:49:64:3b:a4:b8:4f:2d:
49:21:fd:f6:9e:7d:4d:6a:75:49:7b:7b:74:5c:d9:
63:29:2b:99:81:ac:c2:9b:c8:8e:da:68:7c:95:ce:
df:04:eb:69:06:f9:a0:3c:00:73:67:ea:38:ae:12:
f6:df:a3:af:fa:a9:14:d7:12:99:16:7c:32:b0:6d:
ac:9a:16:5f:0d:95:c8:cd:85:27:a4:f7:eb:39:bc:
4e:ac:66:8a:c5:35:1d:95:e3:1e:a9:0a:b9:8f:a6:
48:5b:7e:8e:d0:36:88:f2:95:c1:57:4b:9a:92:52:
54:fc:16:50:86:27:12:d0:ff:07:c9:a1:60:aa:b0:
5f:6d:f2:c8:66:fa:45:c3:3d:ba:eb:99:c3:c3:3f:
01:43:8b:9c:bf:bd:d8:c3:62:b2:e1:d1:36:31:cb:
d2:7a:02:fb:79:b6:6d:5c:50:10:f3:92:67:dd:05:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B3:CE:8B:B7:DE:51:12:AF:51:86:EF:A9:B2:B7:AE:69:27:19:23
X509v3 Authority Key Identifier:
keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3231302e302f32332d3233203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.18.210.0/23
Signature Algorithm: sha256WithRSAEncryption
09:88:f1:6f:d9:53:59:3f:53:57:2b:55:22:8c:1b:a5:a7:06:
63:37:66:5c:26:80:86:17:6c:8a:8a:2f:d6:db:a1:97:6a:f9:
a5:f2:76:b6:50:7b:86:6d:c1:a7:b4:ff:50:e4:55:ef:ba:24:
ab:ba:2f:85:6d:88:11:0e:e4:21:9b:47:e8:c0:cc:53:53:9b:
32:fb:fd:2a:c3:60:fd:ff:ec:58:2b:a3:04:2d:b5:2f:00:da:
6c:0e:0a:4d:6d:28:89:43:1e:77:de:99:10:e3:79:61:b4:e8:
48:2d:cf:f6:71:34:a7:28:a1:a3:cb:85:9e:d6:d9:73:e1:47:
d1:6c:88:bc:dd:35:8c:0b:ef:ea:e4:c8:5c:04:6b:16:e8:f6:
e6:d5:f5:10:e7:36:29:35:f1:b0:1a:0d:96:73:45:7e:13:f3:
4b:a6:1a:41:93:73:50:c5:99:bb:0f:58:2e:49:a0:43:08:65:
bd:67:98:ce:2b:76:7d:c9:ab:8c:e4:21:8c:29:bb:42:46:31:
3b:d5:fb:80:78:19:4a:c8:3d:1b:b8:b8:83:c9:56:b7:5f:dd:
de:23:a7:ca:57:70:04:50:3c:6a:1b:ef:1b:ec:09:eb:c8:4f:
9e:df:9f:fa:b4:9f:7b:f1:21:c6:07:99:b6:cb:2d:41:f7:7a:
9d:6a:b3:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURD8UPFCNjjSce6vWmrkycu1E7VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy
RTg5QUM3MjAeFw0yNTEyMDkwNTUxNTJaFw0yNjEyMDgwNTU2NTJaMDMxMTAvBgNV
BAMTKEQ3QjNDRThCQjdERTUxMTJBRjUxODZFRkE5QjJCN0FFNjkyNzE5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNediBVca7roI/4xgU93t/dVOl
XkiiXiO+dVHjrZBn6v9hPTxIwUCswb3BlDPCs0dpr+0V5qW7HEJGQamB6nFarXvs
4+pL1/ReR2gQaGizATMYSWQ7pLhPLUkh/faefU1qdUl7e3Rc2WMpK5mBrMKbyI7a
aHyVzt8E62kG+aA8AHNn6jiuEvbfo6/6qRTXEpkWfDKwbayaFl8NlcjNhSek9+s5
vE6sZorFNR2V4x6pCrmPpkhbfo7QNojylcFXS5qSUlT8FlCGJxLQ/wfJoWCqsF9t
8shm+kXDPbrrmcPDPwFDi5y/vdjDYrLh0TYxy9J6Avt5tm1cUBDzkmfdBfOBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU17POi7feURKvUYbvqbK3rmknGSMwHwYDVR0j
BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3
QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM3MmUzMTM4MmUzMjMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuxLSMA0GCSqGSIb3DQEBCwUAA4IBAQAJiPFv2VNZ
P1NXK1UijBulpwZjN2ZcJoCGF2yKii/W26GXavml8na2UHuGbcGntP9Q5FXvuiSr
ui+FbYgRDuQhm0fowMxTU5sy+/0qw2D9/+xYK6MELbUvANpsDgpNbSiJQx533pkQ
43lhtOhILc/2cTSnKKGjy4We1tlz4UfRbIi83TWMC+/q5MhcBGsW6Pbm1fUQ5zYp
NfGwGg2Wc0V+E/NLphpBk3NQxZm7D1guSaBDCGW9Z5jOK3Z9yauM5CGMKbtCRjE7
1fuAeBlKyD0buLiDyVa3X93eI6fKV3AEUDxqG+8b7AnryE+e35/6tJ978SHGB5m2
yy1B93qdarOe
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:05:04 2025 by rpki-client