This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39342e302f32332d3233203d3e203532383338.roa
File: 3134332e3230322e39342e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier: /ouZFBlrR7dOCYxv+cI20O5sb31ELdGMF+czC1K552Q=
Subject key identifier: C1:77:A1:D7:E6:48:92:FB:60:B9:DC:EA:D9:B3:D5:CC:C8:D8:73:5F
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 7DABDC4AE2328211A9BFBFEEA6498605871A2143
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39342e302f32332d3233203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:37:51 +0000
ROA not before: Wed 03 Dec 2025 00:32:51 +0000
ROA not after: Wed 02 Dec 2026 00:37:51 +0000
asID: 52838
IP address blocks: 143.202.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ab:dc:4a:e2:32:82:11:a9:bf:bf:ee:a6:49:86:05:87:1a:21:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:32:51 2025 GMT
Not After : Dec 2 00:37:51 2026 GMT
Subject: CN=C177A1D7E64892FB60B9DCEAD9B3D5CCC8D8735F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:89:c9:e2:30:3d:f8:54:07:55:d8:3a:3c:
cb:42:b4:39:98:3e:b0:80:6b:1a:e6:9f:bc:ea:a6:
68:d8:80:1e:bb:4f:20:76:cd:e4:bf:d1:d4:a8:4b:
dd:07:23:33:78:66:7d:44:a0:0a:62:f2:1e:77:a7:
37:42:11:5e:53:f3:99:2e:26:f8:04:31:d0:db:56:
cd:0c:35:fc:46:a7:d8:42:cb:03:09:9d:fd:58:28:
79:57:0d:8f:37:85:f0:db:b1:bd:c2:3a:0c:6e:c5:
de:c9:52:8e:72:a5:80:b4:b5:69:28:25:0d:61:e4:
6d:80:7d:94:62:01:93:8b:0c:e2:c1:0b:c7:0c:50:
25:5b:29:f7:eb:d3:24:86:a6:08:ae:db:4c:49:b3:
c8:20:10:44:f2:2a:f9:ff:17:f2:48:10:ca:a0:10:
97:eb:90:d8:0a:6b:5b:f0:b4:fd:d7:ec:1d:f4:f3:
46:30:2f:2a:03:eb:d5:56:91:aa:ab:04:3e:ad:d2:
03:9a:8b:aa:4f:d7:b1:21:00:25:5a:11:7b:b6:e5:
41:92:d6:a1:da:34:30:f9:76:ed:8f:1a:0f:9b:ac:
0a:a8:aa:ab:01:c4:a1:c8:b1:20:e8:11:3d:95:64:
23:53:9e:72:13:02:7c:74:f2:81:9c:d4:14:d6:79:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:A1:D7:E6:48:92:FB:60:B9:DC:EA:D9:B3:D5:CC:C8:D8:73:5F
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39342e302f32332d3233203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.94.0/23
Signature Algorithm: sha256WithRSAEncryption
55:9a:3d:92:c6:5e:0d:58:ba:61:4c:ca:41:58:5f:c1:a0:e9:
38:97:6e:60:f9:62:76:3e:f7:11:02:81:36:d7:2f:f8:cb:b7:
8b:26:b8:b2:ce:e7:29:b3:4e:6f:90:35:82:b8:a3:cd:fa:74:
0a:e6:33:23:f7:b6:a4:38:06:58:dc:32:7e:6d:91:c4:e8:f1:
21:30:e9:e1:d7:a2:e9:18:e7:12:74:db:24:61:4f:5b:f9:73:
a4:1a:a9:13:86:30:f7:45:42:2c:c9:92:9f:fd:f9:2d:ea:67:
5c:04:a6:72:e4:cf:e2:23:81:2d:bb:d3:bc:1c:77:1a:f5:3a:
7a:4a:bb:91:2f:16:45:d5:8c:7c:94:9a:72:35:a4:46:a5:7f:
3c:4c:19:e8:34:ef:6a:04:e9:ef:ca:a5:9f:14:e3:2a:d7:9f:
22:b3:7e:d0:2a:5a:46:e8:5d:67:96:96:d2:f4:cc:94:63:d4:
94:4c:9a:8d:99:f6:84:df:25:6a:89:fe:c6:a8:4e:8f:82:9e:
02:be:01:d3:f6:de:32:18:33:23:a6:4b:75:e0:11:17:74:4d:
9a:21:06:6c:65:3b:68:0d:50:85:ed:de:fd:bd:76:61:14:15:
50:ff:ed:b8:9f:65:5c:92:aa:e0:dc:91:07:49:e2:e9:be:38:
4a:5f:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:07:42 2025 by rpki-client