This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa
File: 3138372e31392e36312e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier: ZOD6c18guikPxJeNZ51cNtNINWsn/vBxcPdxARn9M6A=
Subject key identifier: AB:18:87:03:B6:3A:E3:57:22:22:B2:33:6F:0B:51:90:E4:7E:21:66
Certificate issuer: /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial: 6A8606E2A8A3A753BC911DF38E971B6E2A39BA23
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa
Signing time: Fri 12 Sep 2025 14:33:35 +0000
ROA not before: Fri 12 Sep 2025 14:28:35 +0000
ROA not after: Fri 11 Sep 2026 14:33:35 +0000
asID: 28128
IP address blocks: 187.19.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:86:06:e2:a8:a3:a7:53:bc:91:1d:f3:8e:97:1b:6e:2a:39:ba:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Validity
Not Before: Sep 12 14:28:35 2025 GMT
Not After : Sep 11 14:33:35 2026 GMT
Subject: CN=AB188703B63AE3572222B2336F0B5190E47E2166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:dc:49:e7:20:28:0f:fe:14:bf:fe:da:2e:
84:57:61:9b:d7:c5:b3:45:a1:e3:2f:e4:ad:5f:7e:
42:ba:f4:74:a3:ba:65:0e:ec:a2:d8:6d:d4:5b:6a:
2c:4d:9f:e3:a0:4b:0e:b1:9e:20:c8:6c:fc:18:29:
71:f8:54:df:23:69:a0:a4:46:5e:7b:7c:fc:7d:28:
41:75:c6:52:09:e6:35:28:c6:27:9e:f9:a0:7c:e5:
ec:6f:de:ba:ae:d2:94:f1:dc:76:b9:2d:88:0a:18:
01:4b:f8:25:54:52:7f:8e:b5:e5:8b:c3:b1:8c:0a:
39:a0:16:1e:d5:e1:86:9d:87:48:b9:8b:cf:ff:e5:
2e:69:2d:5a:e7:2e:2d:d2:e2:11:03:e5:aa:11:9f:
20:35:5c:1f:a3:2a:65:f5:30:e6:41:4e:24:3c:69:
04:67:4d:ec:bf:6d:14:c8:3c:92:95:f1:c9:8e:31:
14:e4:ff:53:e5:3a:09:9e:87:5f:e3:32:ff:dc:5a:
cc:a9:64:1e:10:65:47:43:35:25:64:bf:fb:98:ce:
a1:4f:ba:cc:ca:9c:65:d3:e5:4d:60:0b:37:d6:9f:
6f:19:92:1e:fe:cd:00:63:23:01:90:df:cf:c7:d0:
98:30:8c:d6:37:f1:76:84:c7:92:a7:6c:60:85:9a:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:18:87:03:B6:3A:E3:57:22:22:B2:33:6F:0B:51:90:E4:7E:21:66
X509v3 Authority Key Identifier:
keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.61.0/24
Signature Algorithm: sha256WithRSAEncryption
42:52:35:a3:88:93:a3:da:d0:07:c0:98:f1:a5:0f:a4:3c:1d:
09:60:66:b0:e1:f1:31:87:1e:aa:a6:fa:39:61:61:d6:93:1e:
b8:6c:05:ef:67:2a:b9:7d:d9:f8:84:7b:98:bd:d1:56:49:a6:
15:b2:9d:fd:5e:0f:58:d0:0c:38:1b:28:de:6e:f3:58:46:79:
b2:33:bd:59:e7:7f:ea:7c:23:44:4c:f7:6e:15:72:cd:99:fa:
4c:dd:28:84:72:88:b0:67:a5:4f:ed:f6:b0:99:6e:84:8f:e1:
d2:2f:3f:f8:0b:d4:e6:04:45:9d:ba:10:00:f6:ba:d2:cf:f9:
fd:63:aa:28:d0:52:7f:42:1c:ab:df:98:f5:3b:b8:f2:72:a5:
79:a2:fb:4d:e2:2c:90:f5:a2:9e:58:a8:99:b6:bb:68:ba:77:
c9:80:a5:7f:7c:35:c0:f6:8c:01:c3:4e:9c:17:13:04:5d:e3:
35:10:94:06:a9:8b:62:cd:46:43:49:d4:bb:36:b8:14:3a:9d:
b4:03:33:b8:7b:69:89:45:0b:bc:f1:55:81:05:5b:68:23:82:
05:12:18:51:6a:77:4e:34:8d:f4:7e:2b:88:81:6e:88:fd:5e:
60:40:8d:23:9e:87:36:1f:7e:7e:7a:85:9b:49:a5:26:79:ed:
36:e0:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:46:27 2025 by rpki-client