This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa
File: 3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa (raw, json)
Hash identifier: XTL2XQ+LL2NXKxD24aEhuEN0ClcRPgcmfzGvRgXpCw8=
Subject key identifier: F0:86:8B:89:4E:5D:44:26:53:99:B4:3D:E8:B1:D1:BE:7E:12:05:2C
Certificate issuer: /CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59
Certificate serial: 0C150B2067451EA134BE02AF9915ADC675011BCC
Authority key identifier: B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa
Signing time: Tue 09 Dec 2025 19:08:56 +0000
ROA not before: Tue 09 Dec 2025 19:03:56 +0000
ROA not after: Tue 08 Dec 2026 19:08:56 +0000
asID: 61670
IP address blocks: 131.100.107.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl
rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 12:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:15:0b:20:67:45:1e:a1:34:be:02:af:99:15:ad:c6:75:01:1b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59
Validity
Not Before: Dec 9 19:03:56 2025 GMT
Not After : Dec 8 19:08:56 2026 GMT
Subject: CN=F0868B894E5D44265399B43DE8B1D1BE7E12052C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:6c:84:61:4b:6e:23:74:87:85:68:d7:8e:
55:a2:bb:7f:e2:76:ac:48:7e:e5:e8:09:e0:a5:d3:
dd:11:28:69:e0:63:11:91:ea:d0:0e:69:39:03:ee:
6f:9e:fb:2b:6f:d9:bd:3c:3f:a5:be:88:79:34:55:
f6:63:37:d0:d3:95:11:16:e8:41:ea:4b:5f:22:6b:
ae:31:9e:bb:32:01:af:ce:dd:9f:81:79:d2:c6:d0:
a1:f9:d4:33:a7:65:e3:5c:75:30:b0:64:b5:08:27:
99:63:06:fb:6f:16:f8:bf:77:ee:46:33:81:b0:61:
f7:11:97:9c:81:fb:34:d1:0b:5b:2a:b8:8a:d5:6a:
f1:8a:6a:c7:df:c5:0f:f3:e3:8e:15:3a:fe:e2:2e:
98:87:ff:03:07:80:83:52:a4:ef:8e:86:1d:6a:7c:
bb:3c:7e:66:68:a1:98:97:cb:81:14:f1:f0:0e:14:
de:7d:df:43:a6:2d:63:a3:42:70:5a:6a:60:ea:26:
18:70:4e:5e:22:1d:54:46:dc:1f:dc:dd:b6:5b:c7:
95:be:81:8a:79:53:1d:31:f3:84:a9:37:d8:23:67:
06:18:c2:ec:ce:6a:a2:ad:93:88:84:10:30:d8:46:
25:8d:ed:85:78:17:e4:23:58:7f:a1:cc:0d:81:c4:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:8B:89:4E:5D:44:26:53:99:B4:3D:E8:B1:D1:BE:7E:12:05:2C
X509v3 Authority Key Identifier:
keyid:B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.107.128/25
Signature Algorithm: sha256WithRSAEncryption
73:e9:ee:21:9a:c1:9a:8d:3f:76:a0:35:03:bf:4a:0d:7f:57:
6d:c8:f0:2e:2e:0d:63:ae:fb:3c:14:f6:f8:78:6f:2b:10:a9:
17:e0:71:bb:8c:f2:ad:cf:ba:c7:65:4f:33:71:27:2f:8f:fe:
54:33:fc:74:d7:1f:d0:33:a1:6d:28:62:e5:fc:57:1d:29:f9:
60:3c:77:ac:ed:75:0f:96:a3:ed:57:dc:de:8b:73:66:7e:00:
1a:d1:14:d9:c7:6c:b0:50:4d:0c:87:d2:90:a8:3d:86:0e:b6:
88:b1:0f:4a:e5:bc:31:2a:6e:71:22:6a:74:a4:7a:12:df:f3:
7d:6b:52:d5:84:c0:bb:b5:40:3e:ac:46:2f:c3:f2:47:d9:d1:
42:12:4d:33:c5:29:ed:c8:a3:3b:7f:7d:32:ec:ed:c4:3b:90:
20:4d:ea:23:29:7d:f6:9d:0a:c0:b2:1a:72:13:c0:cf:22:e3:
ad:df:47:c9:99:1e:22:76:91:0c:fd:0e:d4:f9:64:dc:01:5c:
b7:2e:4e:e8:8f:52:de:65:86:cb:ee:c7:d5:a2:09:5a:69:7b:
23:e6:6b:32:86:e7:94:23:84:a4:29:e6:0a:8f:38:a6:99:49:
91:b0:05:12:df:ad:ea:42:ae:6e:cd:f9:7e:a7:62:34:8b:e3:
e3:ea:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:53:12 2025 by rpki-client