This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3332203d3e203238333630.roa
File: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: yLrRsxvxNQ7srGQojZPXX0cbxmBmVtpgVwKZy5I9PUQ=
Subject key identifier: A0:9C:C4:27:BF:D4:F7:6F:C8:56:A5:3E:AE:3C:7B:A9:3C:74:B1:B4
Certificate issuer: /CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Certificate serial: 232441255744E4A04D766EB6000B624775E9EA19
Authority key identifier: 71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3332203d3e203238333630.roa
Signing time: Wed 17 Dec 2025 21:11:28 +0000
ROA not before: Wed 17 Dec 2025 21:06:28 +0000
ROA not after: Wed 16 Dec 2026 21:11:28 +0000
asID: 28360
IP address blocks: 189.76.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 02:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:24:41:25:57:44:e4:a0:4d:76:6e:b6:00:0b:62:47:75:e9:ea:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Validity
Not Before: Dec 17 21:06:28 2025 GMT
Not After : Dec 16 21:11:28 2026 GMT
Subject: CN=A09CC427BFD4F76FC856A53EAE3C7BA93C74B1B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:21:d2:da:42:4d:7e:ac:d8:ab:e8:96:f3:
b7:50:1d:9c:c0:86:0f:fe:16:09:50:92:74:11:f9:
12:ae:ad:5c:bb:37:69:14:8a:9d:f6:c8:28:8e:1e:
64:ed:15:9b:ad:9a:04:45:25:25:77:f7:4f:db:33:
63:9e:0e:08:e1:28:31:7b:c6:30:71:89:f1:34:12:
21:a2:8d:69:b5:52:6d:3e:9d:2c:1c:e9:3d:c2:05:
a5:82:d3:a5:9f:e4:04:57:ad:54:8a:2d:ea:0a:6b:
26:1c:e9:59:f6:17:fb:f3:d1:1e:4a:55:dd:08:5b:
bf:4f:e9:d7:ec:8d:65:f5:b6:51:78:72:8a:7f:58:
5f:8a:12:d1:22:2c:36:35:e2:7d:22:11:67:ce:9f:
2a:20:8f:db:bb:9a:1b:98:2d:64:71:4a:e8:6b:f2:
1b:c3:9e:f7:cc:68:13:9f:ab:47:fe:17:55:2e:17:
47:ab:f2:82:b8:16:54:6d:01:9d:78:5d:aa:df:22:
a3:53:ae:3e:83:de:ad:3f:7e:2b:c0:9d:15:eb:17:
9a:64:2e:86:46:49:1e:e3:16:ec:be:87:8a:24:97:
8c:50:23:76:42:cb:c0:6e:3a:59:50:95:e2:74:f4:
30:a7:0f:ce:fd:70:14:a0:4f:4d:7f:72:26:94:28:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9C:C4:27:BF:D4:F7:6F:C8:56:A5:3E:AE:3C:7B:A9:3C:74:B1:B4
X509v3 Authority Key Identifier:
keyid:71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.208.0/20
Signature Algorithm: sha256WithRSAEncryption
cc:28:14:10:fa:d3:d4:bf:18:dc:48:5a:0e:98:9f:61:85:96:
3e:e6:a4:ee:1f:cd:fc:86:c6:46:36:7a:5a:73:13:37:4c:d4:
15:18:47:ab:16:ef:a5:2b:fa:2c:f2:be:d1:fe:fd:26:d4:b3:
f8:82:c1:3e:64:8d:af:e8:01:22:03:af:4a:88:15:b5:e3:c5:
35:d7:90:58:ed:5e:f8:c0:40:2a:44:97:f6:96:b5:bf:9a:ff:
f5:82:08:da:39:0c:99:fb:12:42:78:ec:2c:1b:35:aa:fe:b7:
83:7b:33:a8:d2:b6:b8:d1:dd:60:b6:66:71:09:1f:49:7b:9b:
44:29:6f:c9:7d:b5:16:fc:42:e2:7f:38:0e:5d:94:84:21:3a:
ff:98:a9:55:75:42:b2:a8:02:23:99:57:bf:7c:6d:5d:e2:e7:
aa:5e:90:3e:82:e0:b4:d5:4f:9e:73:e6:40:15:ff:99:6a:12:
ed:77:89:e8:66:1f:6c:a0:02:f6:02:df:a2:ab:7a:28:0b:72:
96:7f:a8:37:da:e6:63:be:e5:9e:dc:e6:05:3f:ca:f0:23:1f:
11:0c:0a:a5:54:cc:b5:2a:1e:af:d0:c2:81:95:46:53:9f:8a:
ae:71:32:22:a2:0f:bf:14:1c:74:c1:38:0c:83:41:37:73:6c:
0c:0f:31:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIyRBJVdE5KBNdm62AAtiR3Xp6hkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE1NUY5NUYzRjUwNDA2QUU2OEE5Q0NGNTE0ODM0ODNE
MjUxQkI3MDAeFw0yNTEyMTcyMTA2MjhaFw0yNjEyMTYyMTExMjhaMDMxMTAvBgNV
BAMTKEEwOUNDNDI3QkZENEY3NkZDODU2QTUzRUFFM0M3QkE5M0M3NEIxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2CHS2kJNfqzYq+iW87dQHZzA
hg/+FglQknQR+RKurVy7N2kUip32yCiOHmTtFZutmgRFJSV390/bM2OeDgjhKDF7
xjBxifE0EiGijWm1Um0+nSwc6T3CBaWC06Wf5ARXrVSKLeoKayYc6Vn2F/vz0R5K
Vd0IW79P6dfsjWX1tlF4cop/WF+KEtEiLDY14n0iEWfOnyogj9u7mhuYLWRxSuhr
8hvDnvfMaBOfq0f+F1UuF0er8oK4FlRtAZ14XarfIqNTrj6D3q0/fivAnRXrF5pk
LoZGSR7jFuy+h4okl4xQI3ZCy8BuOllQleJ09DCnD879cBSgT01/ciaUKKNZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoJzEJ7/U92/IVqU+rjx7qTx0sbQwHwYDVR0j
BBgwFoAUcVX5Xz9QQGrmipzPUUg0g9JRu3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC83MTU1Rjk1RjNGNTA0MDZBRTY4QTlDQ0Y1MTQ4MzQ4M0QyNTFCQjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNTVGOTVGM0Y1MDQwNkFF
NjhBOUNDRjUxNDgzNDgzRDI1MUJCNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzODM5MmUzNzM2MmUzMjMwMzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvUzQMA0GCSqGSIb3DQEBCwUAA4IBAQDMKBQQ+tPU
vxjcSFoOmJ9hhZY+5qTuH838hsZGNnpacxM3TNQVGEerFu+lK/os8r7R/v0m1LP4
gsE+ZI2v6AEiA69KiBW148U115BY7V74wEAqRJf2lrW/mv/1ggjaOQyZ+xJCeOws
GzWq/reDezOo0ra40d1gtmZxCR9Je5tEKW/JfbUW/ELifzgOXZSEITr/mKlVdUKy
qAIjmVe/fG1d4ueqXpA+guC01U+ec+ZAFf+ZahLtd4noZh9soAL2At+iq3ooC3KW
f6g32uZjvuWe3OYFP8rwIx8RDAqlVMy1Kh6v0MKBlUZTn4qucTIiog+/FBx0wTgM
g0E3c2wMDzFu
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:04:48 2025 by rpki-client