This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa
File: 3138372e31392e35332e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier: d/gH6WtRYAXmiGRuyPvwuRt0VzP29anYz3V6iM+Ekg4=
Subject key identifier: 49:DD:A7:34:2A:85:13:5C:A0:28:39:A1:90:9E:5D:10:B6:C3:C2:D9
Certificate issuer: /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial: 6E1ACE56CD43028F56100B060F6BAC4AD1906A0D
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa
Signing time: Fri 12 Sep 2025 14:33:21 +0000
ROA not before: Fri 12 Sep 2025 14:28:21 +0000
ROA not after: Fri 11 Sep 2026 14:33:21 +0000
asID: 28128
IP address blocks: 187.19.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1a:ce:56:cd:43:02:8f:56:10:0b:06:0f:6b:ac:4a:d1:90:6a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Validity
Not Before: Sep 12 14:28:21 2025 GMT
Not After : Sep 11 14:33:21 2026 GMT
Subject: CN=49DDA7342A85135CA02839A1909E5D10B6C3C2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:2b:11:24:c2:fb:ef:47:33:ed:8e:f3:6c:
af:77:1d:b1:52:2a:70:a8:3c:61:23:f9:08:28:36:
55:45:2d:7f:79:19:64:4e:ec:14:29:d7:72:bf:a7:
c8:f3:19:7c:3c:c1:16:77:27:be:b2:82:56:ae:db:
51:28:04:fd:d2:d7:0b:8f:66:21:6a:c6:01:a8:1f:
d7:60:46:52:66:57:25:42:bc:a3:48:28:f9:6c:11:
58:91:7f:fd:06:67:bd:64:8f:be:9c:00:63:5f:35:
92:01:bb:10:26:95:9c:38:b3:0d:d4:d2:dd:00:ca:
07:86:bf:94:ca:1e:d1:1f:4a:35:8b:2e:28:e9:43:
97:2e:ac:fc:9f:20:e7:8c:ff:f8:f4:bf:6f:8a:51:
ca:c6:24:2c:2c:d4:2e:72:01:5d:04:5e:13:d7:68:
fe:b7:7f:4f:ec:1b:89:74:01:84:45:74:5c:69:36:
aa:c5:7c:72:df:5c:8a:ab:11:69:1f:0f:9a:db:0c:
68:05:2b:3f:fc:cc:9f:54:3e:bd:dd:a0:80:c6:7c:
df:83:7b:41:7f:02:43:32:3b:bc:46:ea:9d:07:6d:
40:a6:c7:15:db:37:6e:2c:0a:11:e5:c9:6b:59:0e:
43:a1:9c:c8:86:8f:19:ec:05:37:12:a7:7a:5f:05:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:A7:34:2A:85:13:5C:A0:28:39:A1:90:9E:5D:10:B6:C3:C2:D9
X509v3 Authority Key Identifier:
keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
20:05:fb:6c:74:54:fb:eb:f2:01:df:2a:e9:2c:6c:00:a6:21:
fc:29:1e:aa:01:59:fc:51:9a:1d:69:f3:60:f5:1e:f3:41:10:
45:c6:2a:ec:b7:87:bc:67:7e:7d:6f:af:1d:a5:e3:54:e2:d0:
11:6a:47:2e:f3:cf:75:db:f5:23:85:ff:73:ce:fc:f9:b8:5f:
5d:de:05:ed:fb:7b:13:9f:23:d3:0e:ba:7c:55:85:23:2a:e2:
cc:cf:da:e5:81:b8:b8:4d:fc:b0:77:93:d5:99:6a:7c:85:91:
f8:3a:86:3b:34:e9:c9:5e:d6:81:df:95:3e:3e:48:d3:4a:af:
6b:5c:8a:48:11:94:30:b6:9e:ef:b0:c2:f5:a2:0e:d7:47:aa:
28:86:d9:17:d3:8b:72:bb:6b:60:0e:9d:03:52:85:ef:0b:ed:
53:af:99:a7:85:a0:0e:f4:13:ec:e3:ec:ef:ff:ec:68:ae:38:
b6:a9:11:10:a0:29:d1:ec:e6:d1:ab:d9:28:9a:7c:4a:32:3b:
d8:e8:09:ca:c1:e7:50:9d:14:58:7b:d2:39:29:21:0b:75:96:
1f:0f:45:e2:81:d1:c6:94:89:dd:f2:35:1b:16:75:cb:62:67:
b4:36:e3:ec:9c:94:0e:88:f3:61:9e:b5:f6:05:50:d8:7c:3a:
a2:98:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:46:27 2025 by rpki-client