This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: Z3zwSaa5IIs9r97cdkBIVnv3e03PzVGFvphNvLUjjVQ=
Subject key identifier: 1E:42:84:03:E7:B2:A0:68:DE:66:A7:43:41:48:18:3E:5C:E1:F9:0F
Certificate issuer: /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial: 7B6F98B8CEF8F8E523FFDE3BE3EC9612ADB6B60C
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
Signing time: Fri 15 Aug 2025 22:00:54 +0000
ROA not before: Fri 15 Aug 2025 21:55:54 +0000
ROA not after: Fri 14 Aug 2026 22:00:54 +0000
asID: 28238
IP address blocks: 187.0.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:6f:98:b8:ce:f8:f8:e5:23:ff:de:3b:e3:ec:96:12:ad:b6:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Validity
Not Before: Aug 15 21:55:54 2025 GMT
Not After : Aug 14 22:00:54 2026 GMT
Subject: CN=1E428403E7B2A068DE66A7434148183E5CE1F90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:96:fa:cd:bb:e5:1f:f8:f7:ed:cd:03:f4:
1c:88:50:37:90:ea:be:98:5a:21:b7:fc:18:9b:41:
54:b1:40:5b:1c:79:82:64:c3:c4:d3:87:76:fe:aa:
84:27:99:0c:fd:4b:c0:0c:91:50:77:59:ed:62:de:
3a:3e:8a:e6:e8:13:e6:cf:77:4c:b7:37:f4:64:13:
18:af:87:f9:76:33:9a:e1:b1:89:69:34:09:17:73:
6c:69:6f:1c:be:cc:b5:25:af:16:70:49:ac:ad:ec:
9c:23:42:b5:44:f2:df:f3:18:e8:64:c5:ba:29:f5:
e4:f5:43:6d:70:50:a6:9c:6c:08:c3:dc:4d:46:ce:
a5:f1:60:0a:7c:94:d6:ba:08:09:ac:ed:e6:0a:8b:
87:40:3a:e7:45:76:78:d9:7d:17:33:84:00:21:c4:
4a:5b:2d:cf:84:d7:bc:c1:38:17:0e:e8:bc:ee:36:
ee:e8:bd:a0:9e:02:3a:a8:22:1e:d7:69:b1:e1:30:
6e:1e:a8:98:8f:70:94:2f:3c:d1:df:d0:bc:c3:16:
de:35:22:49:19:6b:5b:b3:c1:04:05:77:a2:8b:ad:
d4:5d:cf:e8:1d:9f:47:8c:96:c8:68:50:7c:3b:cc:
d7:77:5a:04:ee:43:5a:7e:d5:68:74:5b:9f:9d:c5:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:84:03:E7:B2:A0:68:DE:66:A7:43:41:48:18:3E:5C:E1:F9:0F
X509v3 Authority Key Identifier:
keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.130.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b4:04:23:e7:f6:f6:86:68:ed:68:d1:51:c7:6d:fc:28:66:
74:0f:53:cc:52:f7:87:1e:86:42:06:f5:c4:e0:eb:71:02:87:
46:8f:30:33:58:6b:ff:2e:ee:dd:a6:15:a8:3e:d2:aa:09:2d:
38:6f:bc:b2:f3:98:09:db:39:d7:75:8f:a9:0f:e5:e0:2c:8d:
7b:d9:13:b4:4f:0c:02:a4:68:57:a0:a0:17:4b:3a:6a:71:77:
56:30:71:b9:b6:35:c9:23:0a:66:fa:ec:65:b4:c8:01:eb:79:
13:2d:81:ae:65:f2:6a:83:8a:ad:20:8f:1d:c2:71:e7:46:5c:
cb:2b:81:e7:fb:6e:59:34:04:16:dc:97:a3:74:ca:08:d2:64:
be:f0:26:a9:9c:85:ba:78:93:de:19:13:12:37:61:8c:bf:29:
22:32:8d:a1:64:f2:9d:f7:43:11:bb:e7:11:58:57:bf:fa:28:
e2:46:42:ee:84:84:a8:7f:30:6b:ab:b1:b7:e7:d0:8b:7c:e9:
90:0d:79:b8:39:c2:0b:46:7f:e5:76:b8:1c:cd:c5:f2:2b:fb:
88:39:1a:57:75:d4:88:82:ff:dd:6f:ce:21:78:f0:ec:46:cf:
75:a0:1c:5a:74:a2:00:2a:85:fe:2b:f8:27:81:f3:58:80:0d:
6f:fc:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:06:14 2025 by rpki-client