This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
File: 3137372e382e302e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: J5yI9xjznCFv5e7ueNtYPGONSpWj8VioeKDNbiQR3n4=
Subject key identifier: B7:37:5A:5A:6E:9D:93:D6:6A:95:2D:AD:A9:38:47:39:CF:99:A6:62
Certificate issuer: /CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Certificate serial: 1C3F9C90F25960B7EA0562D0403A9E41BB4A4667
Authority key identifier: 71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
Signing time: Wed 17 Dec 2025 21:11:58 +0000
ROA not before: Wed 17 Dec 2025 21:06:58 +0000
ROA not after: Wed 16 Dec 2026 21:11:58 +0000
asID: 28360
IP address blocks: 177.8.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 02:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3f:9c:90:f2:59:60:b7:ea:05:62:d0:40:3a:9e:41:bb:4a:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Validity
Not Before: Dec 17 21:06:58 2025 GMT
Not After : Dec 16 21:11:58 2026 GMT
Subject: CN=B7375A5A6E9D93D66A952DADA9384739CF99A662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:58:37:c5:ba:27:9a:b1:74:e6:71:e0:0e:
08:73:21:1e:de:d8:b6:ef:22:2e:93:b8:e3:e0:25:
69:0d:a4:8a:5b:5a:bd:b6:63:5c:71:8c:d0:c5:80:
ec:57:54:ea:8a:ec:9a:e3:e6:70:e0:ab:5a:ec:d7:
bc:f5:84:67:3e:f2:55:6e:af:1f:d8:91:d9:80:4b:
c4:96:e1:a2:39:00:1e:df:3f:3d:09:8c:95:88:56:
3e:49:e5:10:9d:02:d3:37:28:3c:0a:2f:64:59:03:
60:5b:50:d9:40:f9:98:83:8b:08:99:8e:fb:de:52:
9c:d3:a1:c7:16:c6:98:2d:f4:61:c1:d7:68:1c:04:
1e:bc:06:af:db:12:65:eb:00:fc:86:86:27:4a:52:
bf:0c:f5:e3:b6:32:dd:a8:ff:c0:ab:0a:9d:01:50:
d2:ae:7b:18:cc:e9:6b:24:11:38:5d:f4:a0:3f:79:
ff:65:62:64:a6:a2:68:d6:67:d1:6d:a2:d8:1b:27:
01:41:b1:cd:32:31:57:99:d2:73:22:7b:36:0b:a5:
7c:34:f6:31:c0:c4:e7:7d:3a:5a:1f:25:37:e8:fc:
5e:53:0e:a1:07:77:cd:52:5f:b4:e4:33:03:2f:68:
1e:37:95:e6:bb:b0:fd:8f:9e:c3:4c:03:8d:ed:6f:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:37:5A:5A:6E:9D:93:D6:6A:95:2D:AD:A9:38:47:39:CF:99:A6:62
X509v3 Authority Key Identifier:
keyid:71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:33:ad:05:fb:b6:5f:fb:a0:78:a8:d9:c7:b8:c5:80:64:8a:
2d:1e:2c:1d:25:4e:cd:f3:09:7b:b9:66:6b:76:d0:b5:b1:6a:
45:e1:3a:4b:97:88:79:da:f9:af:18:6d:a4:06:43:8e:2a:ac:
e8:c0:53:89:85:93:86:d8:90:45:6d:0f:08:23:54:c9:a5:f7:
9b:04:3c:5a:f3:ca:45:58:b4:64:e4:e4:20:a2:0a:50:b8:1b:
ba:74:c2:c2:0f:62:84:3a:da:49:a7:83:39:d9:a2:81:0b:9a:
7d:db:d0:21:2c:e4:cd:06:81:69:ed:32:30:ee:bb:85:3a:b7:
b9:b9:cf:75:d3:46:59:b9:52:7f:d8:15:b5:41:5c:1b:c3:09:
51:0a:b8:3f:72:1f:2b:63:62:4e:0e:ad:1e:9f:dd:70:29:ed:
1d:bf:c6:2e:f1:1c:5a:15:15:1b:6f:05:04:31:eb:f2:c4:22:
41:60:5f:e6:fd:e6:de:7e:0d:51:f4:c1:27:56:68:7d:55:80:
71:06:71:69:10:7c:0a:cd:a5:b5:7c:ef:50:73:42:4b:eb:e6:
a4:d3:a0:e5:e8:26:8d:54:21:29:db:46:52:2c:ba:b8:b5:41:
f4:d6:f1:44:98:25:cc:1d:bd:0b:6b:79:6d:68:a0:60:44:8a:
52:a0:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:16:04 2025 by rpki-client