This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35372e302f32342d3234203d3e203238313238.roa
File: 3138372e31392e35372e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier: ByzY/Jf+BU+syRNm3liA/hS9djR249OCGvXB2SksYoE=
Subject key identifier: 20:24:B5:14:76:82:EA:0E:20:94:1F:59:D0:A4:DE:47:12:1B:4D:2A
Certificate issuer: /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial: 2D2ECB6B9C2680BC48A9A2FC3828737EF244D032
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35372e302f32342d3234203d3e203238313238.roa
Signing time: Fri 12 Sep 2025 14:33:28 +0000
ROA not before: Fri 12 Sep 2025 14:28:28 +0000
ROA not after: Fri 11 Sep 2026 14:33:28 +0000
asID: 28128
IP address blocks: 187.19.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2e:cb:6b:9c:26:80:bc:48:a9:a2:fc:38:28:73:7e:f2:44:d0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Validity
Not Before: Sep 12 14:28:28 2025 GMT
Not After : Sep 11 14:33:28 2026 GMT
Subject: CN=2024B5147682EA0E20941F59D0A4DE47121B4D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:64:d5:cb:7b:ff:17:b2:d0:56:0d:64:52:
83:36:72:59:6e:f6:f8:c0:05:0b:e3:95:7d:0a:37:
3b:e9:4c:81:cb:bd:6f:54:9d:7e:15:ba:8a:10:e2:
5b:7e:e3:50:76:1e:0e:b3:22:54:1c:6f:c2:18:89:
a2:a1:84:a5:05:d5:7e:3f:3e:fb:07:15:41:0e:4c:
48:4c:e0:be:e0:b4:c8:7a:62:b2:b0:d9:f6:91:dc:
94:a4:48:88:a3:b2:43:6f:fa:bf:1c:9c:e9:d4:5d:
98:10:34:dc:7c:99:54:c0:4e:e7:9c:1c:8e:e9:27:
b7:01:35:90:2b:4f:a5:2b:e1:31:b1:af:5b:08:1e:
e6:fc:25:3c:ce:df:c5:68:cd:ca:bb:48:c8:22:65:
2d:aa:6f:f1:6b:2b:67:8c:f6:40:31:75:67:fb:00:
98:36:50:e5:f8:1e:a3:b1:c9:5d:3a:14:54:ba:29:
f8:2f:0a:cd:e8:49:d1:02:50:2e:48:e4:47:80:6b:
d7:72:3c:f2:ea:f7:49:3a:49:f5:f0:50:36:cc:7a:
5e:53:84:28:e0:b8:3e:c0:81:2e:2d:a7:16:f4:ed:
7e:0d:82:32:0d:30:7f:82:04:91:f2:81:df:00:eb:
64:82:d0:47:0d:ce:d7:19:90:03:ad:c6:72:a4:36:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:24:B5:14:76:82:EA:0E:20:94:1F:59:D0:A4:DE:47:12:1B:4D:2A
X509v3 Authority Key Identifier:
keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35372e302f32342d3234203d3e203238313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d8:7a:8d:23:36:1f:dd:d1:5b:2f:a4:85:5c:2f:aa:0f:3e:
85:4e:e7:81:9d:81:99:57:e1:fe:45:67:40:cd:63:9d:d6:ff:
46:74:a8:06:4c:91:0e:46:52:bd:2e:15:16:e6:12:ac:7b:da:
f4:85:40:a0:f0:95:15:c6:8d:4b:e2:31:e2:39:52:5e:51:c3:
a6:b6:eb:1f:7f:c9:6b:ca:1e:4b:d0:34:85:c7:56:b7:c5:67:
f7:b9:7a:00:10:57:fb:6c:0e:97:85:84:da:1f:f4:5a:8c:28:
53:84:f2:b6:66:aa:21:87:e5:13:1c:7f:0b:22:c7:26:cb:c6:
f3:5a:9d:bc:37:88:b2:76:29:26:ec:0f:36:bc:73:42:0c:d6:
71:87:28:f9:6d:e7:d9:e0:26:58:1c:d5:12:ea:85:1f:12:12:
32:89:cf:7d:eb:ad:ab:22:fe:7f:fa:66:96:db:66:2a:34:45:
c8:ce:77:9b:b8:d3:e7:da:52:2a:d8:00:d2:f4:31:36:e9:21:
4d:a5:60:11:db:60:cd:39:71:9d:84:2e:23:cb:cc:41:19:6b:
49:37:b5:44:a7:02:30:bc:44:26:b5:08:0b:f9:0b:a3:6c:c5:
f1:32:e7:00:52:39:aa:34:2d:b4:fc:b2:34:cd:cb:f2:d9:1e:
49:e8:c4:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULS7La5wmgLxIqaL8OChzfvJE0DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQjkxNEJDMEM2Q0RBNkQzN0MyQ0IwNzA4RjdGNzI4
RjlDNTI3MjAeFw0yNTA5MTIxNDI4MjhaFw0yNjA5MTExNDMzMjhaMDMxMTAvBgNV
BAMTKDIwMjRCNTE0NzY4MkVBMEUyMDk0MUY1OUQwQTRERTQ3MTIxQjREMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrF2TVy3v/F7LQVg1kUoM2cllu
9vjABQvjlX0KNzvpTIHLvW9UnX4VuooQ4lt+41B2Hg6zIlQcb8IYiaKhhKUF1X4/
PvsHFUEOTEhM4L7gtMh6YrKw2faR3JSkSIijskNv+r8cnOnUXZgQNNx8mVTATuec
HI7pJ7cBNZArT6Ur4TGxr1sIHub8JTzO38Vozcq7SMgiZS2qb/FrK2eM9kAxdWf7
AJg2UOX4HqOxyV06FFS6KfgvCs3oSdECUC5I5EeAa9dyPPLq90k6SfXwUDbMel5T
hCjguD7AgS4tpxb07X4NgjINMH+CBJHygd8A62SC0EcNztcZkAOtxnKkNuVpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUICS1FHaC6g4glB9Z0KTeRxIbTSowHwYDVR0j
BBgwFoAUBhuRS8DGzabTfCywcI9/co+cUnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC8wNjFCOTE0QkMwQzZDREE2RDM3QzJDQjA3MDhGN0Y3MjhGOUM1MjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MUI5MTRCQzBDNkNEQTZE
MzdDMkNCMDcwOEY3RjcyOEY5QzUyNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzEzODM3MmUzMTM5MmUzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsTOTANBgkqhkiG9w0BAQsFAAOCAQEAPdh6jSM2H93R
Wy+khVwvqg8+hU7ngZ2BmVfh/kVnQM1jndb/RnSoBkyRDkZSvS4VFuYSrHva9IVA
oPCVFcaNS+Ix4jlSXlHDprbrH3/Ja8oeS9A0hcdWt8Vn97l6ABBX+2wOl4WE2h/0
WowoU4TytmaqIYflExx/CyLHJsvG81qdvDeIsnYpJuwPNrxzQgzWcYco+W3n2eAm
WBzVEuqFHxISMonPfeutqyL+f/pmlttmKjRFyM53m7jT59pSKtgA0vQxNukhTaVg
EdtgzTlxnYQuI8vMQRlrSTe1RKcCMLxEJrUIC/kLo2zF8TLnAFI5qjQttPyyNM3L
8tkeSejEQA==
-----END CERTIFICATE-----
Generated at Tue Dec 16 13:45:19 2025 by rpki-client