This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139322e302f32302d3332203d3e20323632383535.roa
File: 3137372e31322e3139322e302f32302d3332203d3e20323632383535.roa (raw, json)
Hash identifier: WmeJgjrmwROhRbbWee9vDCMrNuagfu7h+E98SOQHZe4=
Subject key identifier: DB:5D:5C:44:ED:74:0C:F6:34:8A:47:A7:23:2B:F7:7B:4E:F9:13:A0
Certificate issuer: /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Certificate serial: 54F8A3880575B6DB457C3D5C1E1E1AF445DB0E53
Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139322e302f32302d3332203d3e20323632383535.roa
Signing time: Tue 16 Dec 2025 18:22:21 +0000
ROA not before: Tue 16 Dec 2025 18:17:21 +0000
ROA not after: Tue 15 Dec 2026 18:22:21 +0000
asID: 262855
IP address blocks: 177.12.192.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 21:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f8:a3:88:05:75:b6:db:45:7c:3d:5c:1e:1e:1a:f4:45:db:0e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Validity
Not Before: Dec 16 18:17:21 2025 GMT
Not After : Dec 15 18:22:21 2026 GMT
Subject: CN=DB5D5C44ED740CF6348A47A7232BF77B4EF913A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:7d:0d:5f:ea:21:6b:c0:a2:07:fc:b4:c5:
e8:ed:ee:29:cc:99:84:7d:64:b1:42:16:53:29:2d:
63:27:40:aa:71:a8:3f:64:51:db:f7:63:c1:8f:3a:
96:9e:99:11:e0:7b:7f:31:cb:32:c4:ac:d4:f9:b3:
72:5a:85:7a:86:ee:5c:c6:e2:04:db:d1:e1:7b:46:
33:fe:46:1f:f5:aa:fb:a3:42:73:54:37:c0:eb:85:
33:48:c6:fc:40:4b:87:e0:27:e0:02:d6:eb:22:58:
ca:25:52:9b:36:e3:de:47:a8:6f:88:8c:e5:08:7c:
75:cc:4e:42:a9:40:56:7f:23:d4:03:da:d0:a6:64:
c9:3a:c7:49:07:44:8a:74:3b:3e:32:24:20:44:d6:
b6:86:9c:2e:71:77:8f:1f:4d:83:d5:66:c7:a3:20:
4b:64:6c:dd:e0:b5:2b:5c:f1:b5:34:10:7c:c2:f8:
b9:5d:9b:de:75:ec:26:fb:ca:92:2b:8f:bb:3b:48:
26:2b:f5:1f:9b:30:45:a3:8c:e4:62:b3:ff:bf:7b:
d6:8e:23:86:9c:60:bf:8f:d2:72:88:bc:2e:fa:81:
8f:02:5a:b3:d1:eb:76:d7:3f:16:f3:8d:c2:ee:ae:
81:ee:85:97:a1:7f:31:e0:2d:54:bc:68:9c:0c:28:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:5C:44:ED:74:0C:F6:34:8A:47:A7:23:2B:F7:7B:4E:F9:13:A0
X509v3 Authority Key Identifier:
keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139322e302f32302d3332203d3e20323632383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:f2:79:23:a9:e9:a6:5d:91:16:dc:7f:39:74:cc:db:86:16:
e7:c0:be:96:aa:c8:92:43:5e:8c:ad:1a:d8:40:57:a5:ff:3e:
a7:90:43:78:2c:23:a4:99:16:45:ab:36:d4:20:ae:3f:1e:42:
f3:d4:b7:23:74:2e:cf:09:74:83:da:19:04:4f:d9:21:f4:0a:
a2:d5:a0:db:46:f7:11:6d:58:34:ec:18:c8:31:b8:67:da:2f:
1b:f6:4e:0a:f8:09:6b:b4:8b:32:9e:4f:2e:ac:f1:67:7a:03:
2d:61:98:95:8a:a5:07:9c:79:97:5f:41:75:2c:f3:30:5a:2a:
5a:b9:5d:43:17:40:8e:b9:46:6c:d4:fc:56:7a:0e:db:79:2e:
4a:e2:cf:cc:d8:ce:e8:4b:0b:a6:92:45:cb:43:8f:46:bd:bf:
8a:0b:8f:b4:4e:ca:1b:ee:24:a0:7c:a2:ba:0a:0a:3f:05:97:
7c:88:7d:fc:06:35:c1:3b:db:a7:82:0e:1d:c8:83:01:a3:b3:
68:b0:2d:c4:d0:58:a1:cb:bb:21:d7:02:c5:e1:a6:24:7b:6c:
db:33:0f:89:8d:89:6a:f1:ef:0c:68:0f:82:c8:2f:af:ec:c4:
d6:b0:b3:03:68:b1:b5:59:10:1b:b8:83:b7:34:af:0b:6f:a4:
00:3d:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:21:41 2025 by rpki-client