This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
File: 3137372e382e31362e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: Fx6SzPcfDj5R4xnwR0x0vGBdovhQ1r740yqT5NbK37Y=
Subject key identifier: 77:A9:C0:D9:AD:A7:0D:70:FA:D8:19:74:DE:2D:9B:15:E0:2B:B9:17
Certificate issuer: /CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Certificate serial: 3F49D4CEA4A9D6DF8D324BAE6D6D288AECA2C01C
Authority key identifier: 71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
Signing time: Wed 17 Dec 2025 21:12:11 +0000
ROA not before: Wed 17 Dec 2025 21:07:11 +0000
ROA not after: Wed 16 Dec 2026 21:12:11 +0000
asID: 28360
IP address blocks: 177.8.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 10:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:49:d4:ce:a4:a9:d6:df:8d:32:4b:ae:6d:6d:28:8a:ec:a2:c0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Validity
Not Before: Dec 17 21:07:11 2025 GMT
Not After : Dec 16 21:12:11 2026 GMT
Subject: CN=77A9C0D9ADA70D70FAD81974DE2D9B15E02BB917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:66:a6:d2:00:0e:9e:01:e1:6f:28:b1:14:
06:7c:c7:9d:bf:02:a0:3e:fa:8b:30:d0:d8:bc:73:
52:a4:c8:03:b9:e3:a3:e5:36:72:a4:d1:a0:2e:6d:
81:c4:b5:c7:e5:62:5a:57:8c:68:78:7d:d1:9a:93:
9c:fb:51:c4:a3:54:0a:7f:40:a1:50:e9:f5:7b:b9:
61:63:70:3e:4b:34:af:f2:02:b9:ea:5a:cf:4a:3b:
f8:a7:26:3c:bf:8b:0b:91:c1:fa:57:fa:8f:d6:52:
03:9c:e1:c0:d3:b0:f2:13:3f:9e:69:b5:8c:21:a4:
5b:4f:94:d7:42:de:32:7a:88:5a:80:96:d2:68:21:
6a:81:8a:0d:a0:3b:46:c2:6a:b6:c9:ed:4d:2d:6d:
c8:f9:b8:f6:01:59:9c:c9:5f:82:bd:28:4a:e3:2a:
54:d9:48:91:d6:6d:d6:5c:a2:78:0d:64:00:64:a4:
d0:ea:07:0c:81:16:c0:b8:4f:c1:d9:be:7d:92:91:
c7:18:0c:c8:74:5b:ac:cd:e8:1f:15:ad:09:aa:3d:
92:a1:18:c5:02:7b:5e:80:4c:ea:43:d7:d9:b0:07:
19:96:aa:84:db:ee:1e:c5:7e:5f:8d:c0:e8:6c:bd:
1a:d4:ff:5e:85:58:fa:79:0e:c9:53:26:b7:f1:d5:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:C0:D9:AD:A7:0D:70:FA:D8:19:74:DE:2D:9B:15:E0:2B:B9:17
X509v3 Authority Key Identifier:
keyid:71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:ff:87:f9:87:7e:be:db:9e:ab:11:41:3b:e2:d0:3a:14:3e:
7b:9e:7b:78:85:4d:a8:88:d9:38:ad:50:87:d4:fc:18:88:52:
e6:8a:92:6d:a5:f1:18:5b:9b:c6:34:70:a8:b6:92:85:70:97:
15:28:c2:39:75:b2:15:51:3f:01:26:c0:d3:c9:da:06:cc:77:
a4:6e:32:d2:05:a6:65:c7:78:6e:4b:31:56:29:dd:5d:3c:6b:
80:8e:40:3a:c6:6b:10:66:09:1c:1f:b2:c9:d8:95:ba:b8:65:
6e:d4:6f:e5:45:3f:f8:5c:8b:9a:86:c0:86:c0:93:73:21:d9:
f5:6a:8a:b5:f6:1b:4b:0e:25:d7:85:67:fb:92:5c:f8:89:1b:
bd:21:fe:e8:30:a4:e9:dd:29:7b:1f:5c:24:80:2c:7e:0f:32:
80:50:3a:50:09:6e:ad:d4:53:ab:0f:c7:39:d4:da:e2:8a:94:
6e:6a:8e:a5:c5:24:e9:b6:6e:8d:78:70:89:c4:4a:cf:2b:5c:
6a:8c:ca:20:04:02:b1:c0:c2:40:15:84:d6:04:76:37:bc:68:
9a:b0:2c:fc:6a:92:91:d2:87:ba:dc:d2:2b:3b:32:bb:ca:06:
57:20:00:cf:2f:4f:78:58:50:44:7a:10:6e:fa:94:69:63:5c:
ea:e5:91:a7
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUP0nUzqSp1t+NMkuubW0oiuyiwBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE1NUY5NUYzRjUwNDA2QUU2OEE5Q0NGNTE0ODM0ODNE
MjUxQkI3MDAeFw0yNTEyMTcyMTA3MTFaFw0yNjEyMTYyMTEyMTFaMDMxMTAvBgNV
BAMTKDc3QTlDMEQ5QURBNzBENzBGQUQ4MTk3NERFMkQ5QjE1RTAyQkI5MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9mam0gAOngHhbyixFAZ8x52/
AqA++osw0Ni8c1KkyAO546PlNnKk0aAubYHEtcflYlpXjGh4fdGak5z7UcSjVAp/
QKFQ6fV7uWFjcD5LNK/yArnqWs9KO/inJjy/iwuRwfpX+o/WUgOc4cDTsPITP55p
tYwhpFtPlNdC3jJ6iFqAltJoIWqBig2gO0bCarbJ7U0tbcj5uPYBWZzJX4K9KErj
KlTZSJHWbdZcongNZABkpNDqBwyBFsC4T8HZvn2SkccYDMh0W6zN6B8VrQmqPZKh
GMUCe16ATOpD19mwBxmWqoTb7h7Ffl+NwOhsvRrU/16FWPp5DslTJrfx1cSFAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUd6nA2a2nDXD62Bl03i2bFeAruRcwHwYDVR0j
BBgwFoAUcVX5Xz9QQGrmipzPUUg0g9JRu3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC83MTU1Rjk1RjNGNTA0MDZBRTY4QTlDQ0Y1MTQ4MzQ4M0QyNTFCQjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNTVGOTVGM0Y1MDQwNkFF
NjhBOUNDRjUxNDgzNDgzRDI1MUJCNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzEzNjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASxCBAwDQYJKoZIhvcNAQELBQADggEBADz/h/mHfr7bnqsR
QTvi0DoUPnuee3iFTaiI2TitUIfU/BiIUuaKkm2l8Rhbm8Y0cKi2koVwlxUowjl1
shVRPwEmwNPJ2gbMd6RuMtIFpmXHeG5LMVYp3V08a4COQDrGaxBmCRwfssnYlbq4
ZW7Ub+VFP/hci5qGwIbAk3Mh2fVqirX2G0sOJdeFZ/uSXPiJG70h/ugwpOndKXsf
XCSALH4PMoBQOlAJbq3UU6sPxznU2uKKlG5qjqXFJOm2bo14cInESs8rXGqMyiAE
ArHAwkAVhNYEdje8aJqwLPxqkpHSh7rc0is7MrvKBlcgAM8vT3hYUER6EG76lGlj
XOrlkac=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:06:37 2025 by rpki-client