This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133392e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: rba7zrAnDNmWApUUfFNLY+YKgUPNDXk/+AJGilNKyO0=
Subject key identifier: 6B:96:E4:44:61:EE:75:DB:DE:D8:9D:85:6B:7A:92:03:45:B4:CD:97
Certificate issuer: /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial: 37DFA7553F627984AFC30A0ADB7B72974867F129
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
Signing time: Fri 15 Aug 2025 22:00:54 +0000
ROA not before: Fri 15 Aug 2025 21:55:54 +0000
ROA not after: Fri 14 Aug 2026 22:00:54 +0000
asID: 28238
IP address blocks: 187.0.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:df:a7:55:3f:62:79:84:af:c3:0a:0a:db:7b:72:97:48:67:f1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Validity
Not Before: Aug 15 21:55:54 2025 GMT
Not After : Aug 14 22:00:54 2026 GMT
Subject: CN=6B96E44461EE75DBDED89D856B7A920345B4CD97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:b0:eb:3b:6d:cf:37:cf:00:9c:41:9a:a1:
25:10:b3:b0:27:9e:f9:bb:c7:c1:12:db:05:33:fc:
4d:1a:be:c4:a4:f6:a7:5c:88:2b:c5:f4:e3:fb:07:
a2:b8:89:38:00:f0:29:5d:14:83:75:3c:6e:ac:2d:
36:ce:6e:03:a5:e6:12:8e:07:bb:87:5d:01:6d:be:
1c:c1:b0:a8:80:a8:a8:fd:11:7f:da:07:87:5c:24:
53:8a:67:c2:b4:17:89:51:40:c6:0a:2b:9d:d8:57:
aa:7f:dc:ea:92:0e:91:af:cb:9e:bc:7d:8d:82:41:
ac:e0:41:18:1a:72:b7:59:64:85:39:04:95:ee:cb:
25:d2:cc:3b:83:e2:af:d4:f9:17:b0:00:63:b9:fb:
2d:ba:0d:7a:c8:4c:da:07:4a:d5:09:4e:6e:1b:7c:
ba:5f:47:83:6a:58:85:72:5f:0f:10:5c:d3:19:8e:
ac:bc:cd:34:5a:a1:77:b5:e0:93:27:51:68:07:d9:
8a:ea:73:4d:5e:04:57:a2:da:36:a0:98:3d:7d:f4:
e6:b2:96:be:46:09:a0:7a:4e:58:2d:9d:c3:1b:c9:
cc:45:b4:94:75:d5:bf:f4:d3:03:5e:20:91:8f:f4:
5d:9e:58:f9:21:0b:ff:9b:cd:33:22:7e:3e:b4:c6:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:E4:44:61:EE:75:DB:DE:D8:9D:85:6B:7A:92:03:45:B4:CD:97
X509v3 Authority Key Identifier:
keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:53:96:3d:88:7e:bc:36:40:40:2f:c6:c4:f7:4a:3f:39:c5:
db:e4:aa:a6:80:44:eb:7b:22:49:41:eb:2e:0c:47:1e:11:a3:
6a:03:91:4e:dc:dc:25:c4:99:14:0c:29:1b:3f:04:ae:fa:fe:
f2:db:fb:af:24:4a:48:84:cb:82:33:14:da:ae:74:04:7e:7a:
6c:f2:2b:dd:6b:49:4f:c1:84:55:fc:fc:51:b4:f9:1f:60:49:
db:96:c9:96:30:a9:05:b5:74:b6:21:01:6a:37:b9:90:73:24:
f8:2c:af:2d:67:3a:3d:c0:24:07:48:9e:35:23:c3:96:36:4b:
5d:87:bd:a0:75:64:5a:78:8b:a3:17:65:9d:31:ef:25:02:f0:
0b:d5:55:7f:a6:6a:76:47:f6:fc:b9:25:84:bb:14:45:96:b2:
e9:07:50:49:aa:47:f3:1f:a7:c1:c8:2e:e6:9c:58:fe:e7:bb:
fe:a8:b5:02:23:68:14:97:dd:ee:4b:a7:34:cd:d4:25:ea:2a:
3c:5d:f3:ff:0e:18:d8:3b:66:1d:2e:0d:d9:57:27:45:60:8f:
28:01:b4:f7:25:7c:5a:bc:57:96:96:71:87:7c:e9:cb:3d:ab:
db:35:01:12:9f:30:00:39:21:57:45:f6:6b:a4:6e:1f:4e:3d:
27:26:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:06:14 2025 by rpki-client