This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/3138392e38392e3233362e302f32342d3234203d3e203238313838.roa
File: 3138392e38392e3233362e302f32342d3234203d3e203238313838.roa (raw, json)
Hash identifier: 4MofNCNroJdbxb2HaWbcshJY8p1PvOwv24OCtGJWpIg=
Subject key identifier: 7B:96:E3:C8:25:42:B5:87:9A:A6:0E:27:C3:78:62:2F:0C:03:8F:47
Certificate issuer: /CN=45A9D6A3E95D9881210149B7208CB8921A7716CB
Certificate serial: 3542668B1A15C6F48F84A65054581DE779778E78
Authority key identifier: 45:A9:D6:A3:E9:5D:98:81:21:01:49:B7:20:8C:B8:92:1A:77:16:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/3138392e38392e3233362e302f32342d3234203d3e203238313838.roa
Signing time: Tue 23 Dec 2025 15:18:40 +0000
ROA not before: Tue 23 Dec 2025 15:13:40 +0000
ROA not after: Tue 22 Dec 2026 15:18:40 +0000
asID: 28188
IP address blocks: 189.89.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.crl
rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 08:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:42:66:8b:1a:15:c6:f4:8f:84:a6:50:54:58:1d:e7:79:77:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45A9D6A3E95D9881210149B7208CB8921A7716CB
Validity
Not Before: Dec 23 15:13:40 2025 GMT
Not After : Dec 22 15:18:40 2026 GMT
Subject: CN=7B96E3C82542B5879AA60E27C378622F0C038F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:9b:85:ff:84:db:d6:37:d6:7f:73:c1:83:
aa:39:09:c3:17:ac:e1:4a:55:a1:e2:b6:e6:ab:39:
8f:dc:44:2e:20:13:49:af:51:d9:82:4d:4a:09:bf:
35:68:69:6c:75:83:bd:fe:89:d1:85:74:b9:5c:eb:
b3:86:11:39:76:24:5b:17:9d:70:a2:59:14:d8:f4:
f5:e8:9c:f1:b4:43:b8:aa:c5:8f:eb:e8:a1:8b:a9:
66:bc:6a:a0:e2:1c:e3:44:4d:03:8a:68:69:53:1c:
a7:d9:85:ef:28:06:fc:eb:73:9a:cb:76:d4:c8:c1:
a5:c6:11:0b:07:39:61:b5:1b:9e:8c:7b:9b:39:43:
70:ef:d5:85:7f:7e:f1:c3:42:3a:98:f7:af:44:ec:
05:d8:77:a9:01:6e:49:dc:b7:2f:97:aa:3e:48:51:
c8:3d:44:12:4c:a3:e7:6a:92:d9:96:48:6b:78:17:
8c:c9:bd:6c:d5:d4:f4:5e:8c:da:d0:89:bc:ef:94:
4a:0b:a8:0d:d5:01:03:5a:83:e6:d6:43:b6:59:76:
23:94:e8:6b:04:10:41:2c:62:eb:84:0e:c2:51:96:
13:61:39:b0:da:fe:6f:e4:88:b7:f6:82:3e:31:2a:
85:10:ee:e1:26:6f:2c:55:9a:2e:96:b4:6b:05:5e:
74:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:E3:C8:25:42:B5:87:9A:A6:0E:27:C3:78:62:2F:0C:03:8F:47
X509v3 Authority Key Identifier:
keyid:45:A9:D6:A3:E9:5D:98:81:21:01:49:B7:20:8C:B8:92:1A:77:16:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/3138392e38392e3233362e302f32342d3234203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.236.0/24
Signature Algorithm: sha256WithRSAEncryption
02:29:a8:78:94:8f:2f:47:5e:c2:ba:0c:72:d4:ef:54:13:c5:
d5:95:b1:e6:3d:1f:41:cb:65:bf:77:f6:1f:bb:67:d5:c2:f5:
97:96:58:13:d5:dc:43:19:25:eb:2b:b5:f4:8d:aa:cd:3f:1b:
be:37:f7:4c:47:de:92:c3:3c:04:e0:43:fe:17:d9:55:f1:c2:
0b:f1:33:e3:03:2d:31:6c:da:f7:d0:17:12:46:86:23:8e:1c:
d2:78:96:a1:4d:20:74:b5:f8:bb:9d:b6:17:25:b2:fd:d7:49:
6d:45:e7:cf:c5:40:9e:f5:c4:a7:07:7d:32:74:b0:51:8e:31:
08:c5:cb:c3:cc:38:31:b4:6b:d1:20:45:48:0b:38:2f:13:9e:
4e:68:14:8c:69:89:e3:9e:49:18:96:fd:32:9d:75:50:f3:d0:
24:6b:be:e4:58:11:57:ab:73:87:55:86:54:e5:70:fb:ec:48:
75:3c:f6:eb:71:fb:74:e3:9c:1e:72:3f:fb:e7:42:26:c0:ce:
1b:49:f4:76:c6:fe:a5:01:27:d4:27:5b:52:9c:d0:6b:82:29:
7d:2f:44:66:4b:05:1e:78:a5:c6:30:66:04:a5:60:2c:78:a4:
4d:9e:50:37:93:e0:55:b5:91:42:ee:ae:90:92:ff:41:a4:f5:
12:c7:c7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:39:15 2025 by rpki-client