This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
File: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier: WkczNhgV2X7EiWATkEF+uYWZgEmAAQ6rPaJHiZabWBI=
Subject key identifier: 65:DA:4C:15:33:5A:21:D8:3B:D8:68:72:26:F6:04:9D:D7:84:15:D6
Certificate issuer: /CN=78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30
Certificate serial: 2314A711B16819E2670D19292DAE0D1378EA5F6D
Authority key identifier: 78:BA:6E:CF:2E:6D:2F:FC:C5:79:5B:50:A5:D2:3E:3F:3E:A7:8A:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
Signing time: Mon 17 Nov 2025 18:28:08 +0000
ROA not before: Mon 17 Nov 2025 18:23:08 +0000
ROA not after: Mon 16 Nov 2026 18:28:08 +0000
asID: 263256
IP address blocks: 198.58.8.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.crl
rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:14:a7:11:b1:68:19:e2:67:0d:19:29:2d:ae:0d:13:78:ea:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30
Validity
Not Before: Nov 17 18:23:08 2025 GMT
Not After : Nov 16 18:28:08 2026 GMT
Subject: CN=65DA4C15335A21D83BD8687226F6049DD78415D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:b6:71:48:56:29:b2:83:04:58:59:53:25:
56:0e:fc:ee:20:27:b4:bc:12:e1:33:99:e8:43:7b:
c8:f1:a8:ad:61:14:86:69:0d:ae:12:92:68:0c:e3:
82:86:9b:2e:ff:c9:b6:5f:b6:15:5e:5b:71:7c:49:
86:d0:b4:dd:5b:65:ab:48:88:09:b9:0d:fb:29:e3:
7d:c7:7e:2a:f6:05:9d:7f:1e:d8:54:0d:1d:a0:cd:
6d:f9:f7:8b:a3:f7:b2:5c:24:d9:47:8d:b4:3c:60:
4c:52:34:7e:a7:8c:9c:0b:75:d3:6e:50:77:1d:af:
87:4b:b5:c2:a9:2c:65:a1:49:26:5f:62:97:ab:0c:
62:c5:54:91:4c:74:3a:49:56:bc:be:77:d9:8c:76:
8e:01:02:0a:5e:64:a6:eb:55:fe:80:37:ca:cc:51:
56:6f:d9:82:0c:11:19:2a:de:f4:06:bc:b9:58:0f:
8e:17:24:92:4d:f0:44:3f:89:28:b5:1f:76:ce:1e:
0d:6c:28:78:5c:36:ee:fd:46:aa:60:61:dc:04:b9:
1a:6b:c4:1e:68:5a:e3:7e:7e:c4:16:16:09:90:d7:
40:17:f7:91:c8:b9:38:d4:a5:15:55:89:c8:a3:63:
ab:35:87:98:97:2a:bb:3c:e7:59:48:89:b1:20:01:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DA:4C:15:33:5A:21:D8:3B:D8:68:72:26:F6:04:9D:D7:84:15:D6
X509v3 Authority Key Identifier:
keyid:78:BA:6E:CF:2E:6D:2F:FC:C5:79:5B:50:A5:D2:3E:3F:3E:A7:8A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BA6ECF2E6D2FFCC5795B50A5D23E3F3EA78A30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.58.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:55:90:a6:a8:35:73:10:d6:2d:d7:34:5d:d9:5e:db:3b:a4:
0d:37:e6:91:2d:b8:f4:00:bc:64:e3:36:d0:8f:65:a3:c6:46:
26:ba:85:e8:88:fc:71:08:b9:61:71:ef:94:2f:c7:f4:21:ad:
1e:63:b4:a6:2a:79:79:0a:9c:f2:a2:2f:3d:cf:dd:82:b5:5b:
59:5d:ce:03:86:6f:5b:24:4e:ea:f7:78:bb:7a:03:18:31:9d:
ed:3b:a0:97:7d:81:cb:83:a5:aa:b5:87:97:3d:ee:65:94:ef:
cc:60:55:25:9b:91:85:a2:d0:c8:01:6b:6c:a3:e6:a0:1a:cc:
a3:47:17:0b:e1:66:2b:84:ab:13:c9:5d:8b:a8:45:0a:e7:44:
ff:70:55:35:cd:36:e6:15:b0:e3:48:67:90:a0:59:18:fc:6a:
a9:8d:ae:39:74:d6:50:c5:d0:cb:ff:b3:c1:3e:a9:01:59:91:
e2:04:28:03:b7:c0:54:5e:0b:03:f6:80:5f:bd:85:94:d0:58:
ed:36:e0:a3:c3:b6:41:51:12:fc:52:eb:22:09:8a:24:58:58:
90:7e:f2:83:b6:8b:a8:30:a9:f3:53:4c:05:6a:d8:88:42:ac:
b4:73:fb:da:73:2b:b3:ce:e8:30:39:13:69:a7:a9:07:1a:af:
14:a4:9b:97
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIxSnEbFoGeJnDRkpLa4NE3jqX20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhCQTZFQ0YyRTZEMkZGQ0M1Nzk1QjUwQTVEMjNFM0Yz
RUE3OEEzMDAeFw0yNTExMTcxODIzMDhaFw0yNjExMTYxODI4MDhaMDMxMTAvBgNV
BAMTKDY1REE0QzE1MzM1QTIxRDgzQkQ4Njg3MjI2RjYwNDlERDc4NDE1RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekbZxSFYpsoMEWFlTJVYO/O4g
J7S8EuEzmehDe8jxqK1hFIZpDa4SkmgM44KGmy7/ybZfthVeW3F8SYbQtN1bZatI
iAm5Dfsp433Hfir2BZ1/HthUDR2gzW3594uj97JcJNlHjbQ8YExSNH6njJwLddNu
UHcdr4dLtcKpLGWhSSZfYperDGLFVJFMdDpJVry+d9mMdo4BAgpeZKbrVf6AN8rM
UVZv2YIMERkq3vQGvLlYD44XJJJN8EQ/iSi1H3bOHg1sKHhcNu79RqpgYdwEuRpr
xB5oWuN+fsQWFgmQ10AX95HIuTjUpRVVicijY6s1h5iXKrs851lIibEgAfJhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZdpMFTNaIdg72GhyJvYEndeEFdYwHwYDVR0j
BBgwFoAUeLpuzy5tL/zFeVtQpdI+Pz6nijAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC83OEJBNkVDRjJFNkQyRkZDQzU3OTVCNTBBNUQyM0UzRjNFQTc4QTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4QkE2RUNGMkU2RDJGRkND
NTc5NUI1MEE1RDIzRTNGM0VBNzhBMzAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzOTM4MmUzNTM4MmUzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMy
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsY6CDANBgkqhkiG9w0BAQsFAAOCAQEAnFWQpqg1cxDW
Ldc0Xdle2zukDTfmkS249AC8ZOM20I9lo8ZGJrqF6Ij8cQi5YXHvlC/H9CGtHmO0
pip5eQqc8qIvPc/dgrVbWV3OA4ZvWyRO6vd4u3oDGDGd7Tugl32By4OlqrWHlz3u
ZZTvzGBVJZuRhaLQyAFrbKPmoBrMo0cXC+FmK4SrE8ldi6hFCudE/3BVNc025hWw
40hnkKBZGPxqqY2uOXTWUMXQy/+zwT6pAVmR4gQoA7fAVF4LA/aAX72FlNBY7Tbg
o8O2QVES/FLrIgmKJFhYkH7yg7aLqDCp81NMBWrYiEKstHP72nMrs87oMDkTaaep
BxqvFKSblw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:04:54 2025 by rpki-client