This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa
File: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (raw, json)
Hash identifier: i7qWGxCvReMf6vdtfyBKGIZrBhkQCOSHjGlClwR9kWM=
Subject key identifier: 58:54:F7:58:52:09:46:40:D5:CD:0A:54:B4:EB:25:D9:44:86:AC:94
Certificate issuer: /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial: 573FBD6F281E84E753B1746D10048E0BCFDE105A
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa
Signing time: Sat 27 Dec 2025 14:56:31 +0000
ROA not before: Sat 27 Dec 2025 14:51:31 +0000
ROA not after: Sat 26 Dec 2026 14:56:31 +0000
asID: 270551
IP address blocks: 189.50.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3f:bd:6f:28:1e:84:e7:53:b1:74:6d:10:04:8e:0b:cf:de:10:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Validity
Not Before: Dec 27 14:51:31 2025 GMT
Not After : Dec 26 14:56:31 2026 GMT
Subject: CN=5854F75852094640D5CD0A54B4EB25D94486AC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:6c:04:d7:cc:d3:ad:88:28:8d:ca:72:c0:
56:40:c7:47:93:e1:bb:c5:4a:5b:ac:40:0f:1a:a2:
b3:d8:56:7c:96:c5:29:6e:7d:54:a1:3d:b8:d9:f0:
cd:de:56:2c:a8:99:8a:ba:85:e8:af:0a:d2:1d:5c:
4a:83:89:4b:68:fa:89:b8:90:ca:25:09:66:60:1c:
02:38:c0:5a:68:42:71:9d:4a:12:e9:a6:b5:c6:b1:
73:5c:1a:6f:ac:d3:b2:55:38:fc:81:ea:74:6f:64:
dd:5a:b7:f7:1f:3e:64:ee:b1:77:a4:87:fa:2c:60:
90:05:d7:de:86:f2:b3:38:e1:b8:58:1c:eb:e0:eb:
07:c9:18:44:15:71:5c:99:ce:46:3b:7f:f4:28:b5:
67:69:72:ae:00:ad:4e:42:b8:ab:07:50:3e:ac:f9:
01:1d:21:6b:f5:5e:a1:c4:fb:5d:be:f5:d0:87:c0:
aa:77:68:98:9d:3b:93:99:85:fd:ca:20:a8:59:ee:
bb:d0:7b:56:91:32:51:7f:55:1e:26:ba:8e:44:d8:
e6:83:34:57:c6:9d:17:5e:19:ab:f9:e7:52:46:f8:
9b:1e:e6:48:76:80:08:09:ae:3c:37:81:9f:a2:df:
1d:27:2b:1f:98:c1:66:83:77:f4:e8:77:34:3a:af:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:F7:58:52:09:46:40:D5:CD:0A:54:B4:EB:25:D9:44:86:AC:94
X509v3 Authority Key Identifier:
keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.50.221.0/24
Signature Algorithm: sha256WithRSAEncryption
29:06:ad:cc:59:a5:0e:8f:70:40:c1:11:2f:c8:fa:e5:48:64:
8b:98:ac:3b:fa:5b:3d:af:bd:dd:a1:eb:7e:c6:cd:b1:75:af:
bb:e6:70:8d:c3:9c:5c:de:16:df:8f:c9:b9:89:9f:48:a4:cf:
cb:80:41:d4:eb:6e:2c:97:e0:b9:b8:3d:40:4a:68:cd:cb:2b:
af:34:12:96:db:88:12:26:99:31:18:d0:2b:ca:7f:c0:ea:1e:
88:b9:1a:61:25:14:d8:e7:c1:1d:eb:ae:17:0e:b1:99:b1:c0:
34:c8:46:04:7d:a0:3d:7d:ef:ea:b0:ea:83:c8:a0:93:60:08:
c9:f5:00:50:03:89:88:6a:c9:33:0a:0b:07:a1:7a:8b:a7:b6:
0f:9e:eb:d4:48:86:09:39:4f:7a:96:d2:9a:84:d4:a7:09:15:
bb:e6:5e:b0:52:30:c6:7c:c8:60:ad:19:1f:f2:d3:64:a7:04:
43:b5:c9:53:ac:31:74:dd:fd:6d:7b:88:aa:a1:0b:70:6f:97:
ea:c5:ef:85:90:b9:08:0c:70:0f:46:6e:7d:d9:fc:2b:52:e6:
df:56:3f:5d:15:5d:54:8c:f9:9b:3e:82:be:a2:01:15:8a:cb:
b5:59:1b:bc:68:fc:45:e7:68:99:0a:9d:50:45:bd:f8:b2:6f:
66:43:20:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVz+9bygehOdTsXRtEASOC8/eEFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyQTFBMDk0MjQ1RDQwNzQ3NEY5MzE4NkNFM0YyNUZG
QkJFRTU5RTAeFw0yNTEyMjcxNDUxMzFaFw0yNjEyMjYxNDU2MzFaMDMxMTAvBgNV
BAMTKDU4NTRGNzU4NTIwOTQ2NDBENUNEMEE1NEI0RUIyNUQ5NDQ4NkFDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscmwE18zTrYgojcpywFZAx0eT
4bvFSlusQA8aorPYVnyWxSlufVShPbjZ8M3eViyomYq6heivCtIdXEqDiUto+om4
kMolCWZgHAI4wFpoQnGdShLpprXGsXNcGm+s07JVOPyB6nRvZN1at/cfPmTusXek
h/osYJAF196G8rM44bhYHOvg6wfJGEQVcVyZzkY7f/QotWdpcq4ArU5CuKsHUD6s
+QEdIWv1XqHE+12+9dCHwKp3aJidO5OZhf3KIKhZ7rvQe1aRMlF/VR4muo5E2OaD
NFfGnRdeGav551JG+Jse5kh2gAgJrjw3gZ+i3x0nKx+YwWaDd/TodzQ6r8znAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWFT3WFIJRkDVzQpUtOsl2USGrJQwHwYDVR0j
BBgwFoAUPSoaCUJF1AdHT5MYbOPyX/u+5Z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEM1dDNWbXI5ajdheDFBWEdLMXVzd1FHeHREcXlaVGtMRk1MZ1puVGNu
UmcvMC8zRDJBMUEwOTQyNDVENDA3NDc0RjkzMTg2Q0UzRjI1RkZCQkVFNTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMkExQTA5NDI0NUQ0MDc0
NzRGOTMxODZDRTNGMjVGRkJCRUU1OUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDNXQzVm1yOWo3YXgxQVhHSzF1c3dRR3h0RHF5WlRrTEZNTGdablRjblJnLzAv
MzEzODM5MmUzNTMwMmUzMjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9Mt0wDQYJKoZIhvcNAQELBQADggEBACkGrcxZ
pQ6PcEDBES/I+uVIZIuYrDv6Wz2vvd2h637GzbF1r7vmcI3DnFzeFt+PybmJn0ik
z8uAQdTrbiyX4Lm4PUBKaM3LK680EpbbiBImmTEY0CvKf8DqHoi5GmElFNjnwR3r
rhcOsZmxwDTIRgR9oD197+qw6oPIoJNgCMn1AFADiYhqyTMKCweheountg+e69RI
hgk5T3qW0pqE1KcJFbvmXrBSMMZ8yGCtGR/y02SnBEO1yVOsMXTd/W17iKqhC3Bv
l+rF74WQuQgMcA9Gbn3Z/CtS5t9WP10VXVSM+Zs+gr6iARWKy7VZG7xo/EXnaJkK
nVBFvfiyb2ZDIL4=
-----END CERTIFICATE-----
Generated at Sat Dec 27 21:05:48 2025 by rpki-client