This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32322d3232203d3e203532383338.roa
File: 3137372e36362e3130302e302f32322d3232203d3e203532383338.roa (raw, json)
Hash identifier: C8/cQxPPrPYXYcM2eqEAu00sST9NiXuPhcqfVNm32Nc=
Subject key identifier: 58:AA:83:AA:E5:AD:17:92:C0:52:4A:E9:78:A3:61:28:DA:E5:D7:72
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 5D095A85DC8B7F747830CCD43D19760989CB0B44
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32322d3232203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:41:10 +0000
ROA not before: Wed 03 Dec 2025 00:36:10 +0000
ROA not after: Wed 02 Dec 2026 00:41:10 +0000
asID: 52838
IP address blocks: 177.66.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:09:5a:85:dc:8b:7f:74:78:30:cc:d4:3d:19:76:09:89:cb:0b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:36:10 2025 GMT
Not After : Dec 2 00:41:10 2026 GMT
Subject: CN=58AA83AAE5AD1792C0524AE978A36128DAE5D772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:22:d7:1d:3a:e8:62:d3:c3:30:42:fe:bc:
67:19:dd:2f:6f:1b:59:bb:cf:30:b7:e0:8c:08:b6:
38:21:10:92:8f:86:c9:1b:62:24:6e:2d:5a:70:1b:
c4:28:e0:42:34:6a:75:3e:1a:a6:37:d8:ee:69:08:
e7:7f:9a:ba:50:f8:ef:03:d3:90:60:db:b1:b2:db:
a4:36:51:13:93:7e:f4:20:14:27:06:8c:74:8d:19:
fe:fd:bc:41:5b:f1:24:7d:c5:ac:17:1d:b1:f8:99:
b8:78:23:12:34:62:ce:7d:fc:c8:b8:80:11:7e:8d:
7b:b7:36:97:02:2c:1d:b4:9b:2c:0b:f2:ba:db:0c:
9f:25:04:7f:90:f7:b3:fc:ce:dc:90:62:19:f8:ac:
a8:1f:28:ef:69:f9:90:2a:44:b3:64:3f:85:f3:9f:
38:67:71:0f:76:e6:1a:9a:57:1d:4a:ca:aa:05:62:
f8:82:58:fa:87:86:4d:f3:85:d2:46:f0:75:ae:70:
ea:da:9b:69:02:a6:68:69:a2:6c:ba:65:09:c3:1f:
eb:04:1a:57:38:5c:9c:ae:6c:c6:eb:a1:82:f3:ce:
d7:b5:3c:88:cd:65:d4:ff:f0:0b:00:2e:d0:e8:53:
3f:23:5d:d5:43:95:69:e2:b2:85:30:d7:10:09:a8:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:83:AA:E5:AD:17:92:C0:52:4A:E9:78:A3:61:28:DA:E5:D7:72
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32322d3232203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:2f:70:79:cd:42:2a:5a:59:8b:26:a0:03:cc:55:74:28:41:
e7:f2:6a:b6:a5:cf:c5:8c:9f:34:75:5f:95:ce:ce:11:31:ef:
f6:b3:75:21:fd:88:06:3b:42:61:21:b1:8d:1a:00:21:b5:74:
c8:29:68:ed:12:76:00:c7:5c:19:30:8a:3a:65:26:ec:37:fe:
43:11:39:57:c2:e2:f3:72:c9:e5:a2:72:1c:6e:cb:c8:47:7b:
3b:05:dd:6e:95:81:66:b0:dd:34:dc:7a:5e:6e:5d:86:5e:e5:
5e:16:8d:93:73:0e:a0:39:51:43:52:7e:0f:2d:3d:e1:0b:00:
d4:13:85:a1:da:da:4a:04:4e:4d:d4:89:17:76:c1:5e:01:e3:
a5:b0:01:d6:40:3a:0e:fa:63:8c:21:30:65:ae:19:8e:ba:64:
f5:9f:e6:a4:b5:6c:e5:04:b9:56:10:65:8e:e1:ff:61:00:48:
03:23:8c:e4:f9:b9:5f:3c:c3:08:f3:53:c6:7d:90:91:82:4d:
b3:4b:63:2c:1f:33:2e:64:d3:7d:9c:d7:ca:6d:e4:c7:19:67:
88:7a:8b:d0:29:45:25:3c:5b:3a:e5:87:21:4e:e4:88:49:5b:
5a:4a:08:2d:3b:30:01:89:52:81:eb:73:63:8f:fe:4e:85:1f:
9e:00:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:04 2025 by rpki-client