This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32332d3233203d3e203532383338.roa
File: 3137372e36362e3130302e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier: 8sRsuo181BmBIniHfltKFWzo6b/9tqkirzNxhJ2+oBU=
Subject key identifier: CD:31:01:E8:01:42:63:19:F0:60:19:AE:AB:43:DD:DC:72:26:B6:BC
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 654AE350BFA1283AF9C30620C1AC141160C9EE01
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32332d3233203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:42:18 +0000
ROA not before: Wed 03 Dec 2025 00:37:18 +0000
ROA not after: Wed 02 Dec 2026 00:42:18 +0000
asID: 52838
IP address blocks: 177.66.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4a:e3:50:bf:a1:28:3a:f9:c3:06:20:c1:ac:14:11:60:c9:ee:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:37:18 2025 GMT
Not After : Dec 2 00:42:18 2026 GMT
Subject: CN=CD3101E801426319F06019AEAB43DDDC7226B6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cb:87:d4:ee:ff:9f:c9:fa:63:99:62:eb:be:
78:41:5f:aa:db:96:5f:d2:20:66:37:71:43:3e:8c:
61:a3:ac:f9:0b:35:bf:b2:e6:5b:ee:3e:ca:b1:27:
b1:ab:4b:04:0e:92:3f:6b:f0:b3:a6:23:bf:f7:57:
5c:fb:b4:0a:fc:56:27:25:31:28:ff:f1:8b:9c:30:
36:c0:b7:7e:aa:d8:a7:d8:34:d2:26:bd:f6:d9:45:
0c:28:c3:bd:aa:11:66:27:5c:90:96:5f:44:97:d3:
97:56:e7:29:9f:6c:d2:1c:7d:05:5c:cc:de:b2:de:
39:ef:0d:9c:ab:ce:aa:15:69:ef:c0:81:12:6b:ce:
eb:8b:c6:8a:fa:ee:94:cf:c7:7a:9e:d7:a1:de:3a:
1f:09:b9:74:1e:c0:a8:ad:44:eb:ea:c8:e7:59:42:
2e:b0:b0:2c:4d:3c:2f:f8:df:bd:cb:0b:97:fa:be:
e2:e0:09:31:0d:1c:83:7e:8c:38:32:ef:63:51:45:
92:5d:1e:55:bc:b2:0c:ac:4e:30:10:f4:48:53:f6:
96:1d:85:24:78:8e:00:14:85:19:82:2f:d4:9d:2d:
25:06:5e:96:02:b5:5b:2b:a6:44:97:45:15:dc:c1:
4d:e8:04:41:79:e1:5f:cf:f5:ed:05:30:54:41:a4:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:01:E8:01:42:63:19:F0:60:19:AE:AB:43:DD:DC:72:26:B6:BC
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32332d3233203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.100.0/23
Signature Algorithm: sha256WithRSAEncryption
43:75:7c:17:6c:c7:7f:03:44:e0:29:a8:b5:dd:f2:82:a2:0b:
7e:e4:0c:d0:9a:99:bd:a0:e4:41:87:1b:10:eb:8d:d9:cc:f4:
5b:73:a3:e1:75:3d:8b:3a:22:56:c1:b2:bc:50:73:c8:87:71:
bc:d8:73:f6:2b:eb:03:8f:3e:43:dd:92:e9:3a:0d:18:34:e7:
fe:4e:c7:35:5f:dc:2d:42:02:82:e9:d1:e7:ea:fc:3b:d9:36:
e8:84:5d:3d:c3:93:7d:fc:4d:30:bb:6c:e2:dd:18:14:d1:01:
77:0a:5c:58:10:95:56:5c:c1:a8:10:28:73:e5:f6:04:33:7e:
61:de:7e:d3:12:ec:2c:83:68:6c:e4:80:52:67:9e:b6:b8:b8:
76:97:70:53:40:6e:7e:fe:fd:44:91:54:d7:0a:81:09:98:54:
b3:f7:25:49:c2:0b:14:19:ef:d5:76:43:56:08:eb:46:fc:3d:
fe:4b:0f:62:4d:9d:b0:1c:61:fd:39:a7:06:af:5e:59:21:3b:
0c:2e:7f:b4:61:0f:f1:39:06:7e:aa:94:46:be:70:85:0a:49:
17:a4:2c:72:7d:56:89:0b:39:5b:5f:58:e0:0f:44:81:e1:6b:
f3:4a:23:9f:1a:6a:f8:30:7c:e2:d8:2b:8f:46:8c:d4:1a:a2:
4d:dc:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:04 2025 by rpki-client