This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa
File: 3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa (raw, json)
Hash identifier: rXM7GKqcxb2cqOBtQhOsxm2LAE5NpKUDzN6brXsZDbc=
Subject key identifier: C2:36:02:27:C9:C3:56:14:74:0D:FF:58:FC:B0:94:96:4E:EE:3C:6B
Certificate issuer: /CN=FD419A93880C50E8553950967A4679AE5C75624E
Certificate serial: 3BA71E59A5F6BCB02404C2FB460F39DFB7683618
Authority key identifier: FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa
Signing time: Fri 19 Dec 2025 12:36:45 +0000
ROA not before: Fri 19 Dec 2025 12:31:45 +0000
ROA not after: Fri 18 Dec 2026 12:36:45 +0000
asID: 264030
IP address blocks: 143.137.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl
rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 06:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a7:1e:59:a5:f6:bc:b0:24:04:c2:fb:46:0f:39:df:b7:68:36:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD419A93880C50E8553950967A4679AE5C75624E
Validity
Not Before: Dec 19 12:31:45 2025 GMT
Not After : Dec 18 12:36:45 2026 GMT
Subject: CN=C2360227C9C35614740DFF58FCB094964EEE3C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:68:99:14:c5:cb:6a:1a:e4:10:fc:42:6c:
c8:15:d3:7e:50:99:40:e6:fe:6c:12:f0:46:6d:74:
64:ed:e9:fb:75:1f:5d:fc:65:ee:4d:82:e0:d3:eb:
d9:11:fd:8d:e8:8c:e8:cd:1d:de:fc:2a:99:ba:07:
5b:ab:a4:f6:da:fd:39:a0:0c:43:42:64:9b:40:6a:
97:ad:15:73:ca:c7:60:06:ae:30:29:7a:f0:3c:f5:
6b:d8:88:5d:c0:ba:89:9f:75:b0:f8:73:ed:e0:54:
0c:1f:ec:c6:a0:34:db:56:eb:79:7f:5a:e0:bf:07:
1c:ad:5a:89:c6:f2:1e:a3:95:74:ee:c9:81:19:42:
af:21:f5:a5:53:7b:76:97:52:96:89:ab:86:7d:1c:
c8:a5:d4:4d:ce:80:fe:54:79:87:dc:de:bf:4d:c9:
ba:58:ed:7e:8d:b5:4a:ef:15:82:98:14:4d:27:bf:
55:00:5d:ce:15:9d:ed:34:a0:ad:82:f9:a1:23:49:
45:af:dc:4d:57:69:ac:19:56:e8:56:88:35:ed:b6:
2d:c2:2e:c1:d2:7e:de:78:38:4d:3e:9a:ab:63:fe:
54:6d:e0:b0:c0:af:15:2b:b2:36:f6:1b:66:c0:90:
8a:53:8f:3b:24:23:b5:ea:ad:4f:2e:a9:ed:f9:68:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:02:27:C9:C3:56:14:74:0D:FF:58:FC:B0:94:96:4E:EE:3C:6B
X509v3 Authority Key Identifier:
keyid:FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.40.0/22
Signature Algorithm: sha256WithRSAEncryption
75:26:24:98:32:f0:4c:5a:56:28:68:5c:8c:13:24:c5:bd:f4:
8f:f1:42:01:87:12:dc:52:52:57:8f:b0:07:92:a7:9e:65:ed:
99:5e:e0:9f:eb:79:6e:e4:0d:bd:ed:69:5b:f7:d8:94:2d:eb:
d4:3e:3a:c1:62:73:f5:aa:3c:07:ed:8d:a2:05:27:29:7e:e4:
2f:bd:9f:e3:0c:98:c3:60:c4:79:7d:5a:4c:87:f4:2d:8d:14:
11:32:25:1f:54:21:49:0d:78:33:74:a3:07:f1:ea:b4:8e:19:
ca:87:d4:22:6b:ca:b3:77:10:d9:e9:62:26:d8:38:7c:21:bc:
08:02:36:1f:dd:4c:a9:3c:fd:2f:b4:0e:f4:c1:0b:36:9b:ba:
6c:6d:54:4c:2b:80:46:4e:8b:d1:b6:cd:6a:01:6d:28:b1:71:
d9:bb:7a:d7:60:d0:ab:8b:04:29:7d:21:f5:ef:18:70:43:18:
78:0e:08:13:10:61:a1:7a:22:81:40:9b:f5:9e:ae:c1:f9:33:
69:49:f7:1d:e8:b0:97:f7:7a:b5:58:5c:d0:6e:3c:4a:50:ba:
57:78:b7:28:d0:9a:61:fc:7a:4b:da:5e:4c:ed:8f:e9:29:2a:
66:e0:a5:f9:a0:c1:68:47:5b:ea:e1:2c:2b:7a:30:35:74:13:
da:a2:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:04:05 2025 by rpki-client