This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa
File: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (raw, json)
Hash identifier: UNBJL3+Jfrpnhgzu9LluGhpOeESNxwfl/1Sl45hvKUg=
Subject key identifier: B4:D6:47:E5:8B:25:A5:A8:31:AF:65:D2:F4:9E:C3:ED:3D:49:5F:A4
Certificate issuer: /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial: 3E01E4D513A8D83D6639A49C884BA63E04EC9169
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa
Signing time: Sat 27 Dec 2025 14:56:32 +0000
ROA not before: Sat 27 Dec 2025 14:51:32 +0000
ROA not after: Sat 26 Dec 2026 14:56:32 +0000
asID: 270551
IP address blocks: 189.50.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:01:e4:d5:13:a8:d8:3d:66:39:a4:9c:88:4b:a6:3e:04:ec:91:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Validity
Not Before: Dec 27 14:51:32 2025 GMT
Not After : Dec 26 14:56:32 2026 GMT
Subject: CN=B4D647E58B25A5A831AF65D2F49EC3ED3D495FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:86:de:2b:57:1e:07:13:b4:a7:f5:14:74:
84:cc:ff:57:45:d1:53:94:2a:e7:40:e6:e6:12:5b:
78:44:5c:91:df:d4:ba:ec:68:bf:b7:ba:8f:a0:16:
9b:d1:6e:6c:ef:30:60:cc:42:90:7a:1c:d0:59:b8:
66:39:ca:2e:86:2c:a5:02:8c:2c:d6:4a:f0:b7:dd:
e2:35:e8:29:0e:18:cf:0c:16:b5:a0:b5:13:60:f7:
16:96:69:f2:5a:8c:4c:1a:20:3a:84:f5:38:72:a2:
12:cd:f6:e4:14:1a:6a:2d:8a:b0:36:18:9f:de:53:
53:a2:36:a9:4c:79:bb:1e:47:cb:7a:d8:90:65:de:
9e:e2:17:68:0e:3b:25:ff:f3:b0:67:af:f0:d1:2e:
55:dd:fb:a8:18:de:28:ff:8d:62:33:41:7d:b4:6f:
46:1d:8d:7c:6a:d8:ba:82:c0:82:0c:45:08:96:e0:
6f:af:e8:54:01:43:66:1b:5a:59:43:d1:89:6c:d4:
52:18:07:88:60:44:cb:cc:56:12:7a:86:1a:94:2f:
51:95:10:11:51:ea:19:67:2a:c2:e2:75:97:6d:e6:
58:e1:e2:a3:99:6a:60:88:2e:b7:a6:73:cb:e3:13:
e0:19:4a:92:50:9f:d0:01:5a:ea:07:4d:40:19:41:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:47:E5:8B:25:A5:A8:31:AF:65:D2:F4:9E:C3:ED:3D:49:5F:A4
X509v3 Authority Key Identifier:
keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.50.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bf:22:79:a1:7e:c7:da:d0:2e:0f:5e:86:9b:a6:fa:f0:58:
85:fb:b0:a9:02:04:e5:ed:f3:3b:69:11:62:39:ba:de:a5:b7:
ce:e4:1d:ce:99:43:ac:f9:08:c3:8c:72:ce:d7:5b:af:a1:e2:
a6:77:fe:9d:be:87:ea:dc:26:d7:b7:80:44:21:d3:b0:62:91:
4c:f0:68:19:a7:de:6c:51:91:f6:fa:bb:58:77:71:91:eb:cd:
73:85:36:0e:74:17:42:d2:bb:ca:d4:d4:58:b0:bc:4a:ca:dc:
a1:13:34:36:67:36:ee:06:ef:32:00:60:8b:d0:7b:bd:75:8d:
79:17:29:ba:43:64:c5:73:2c:12:ac:1d:e7:0d:fc:7c:54:f0:
d5:9c:11:ad:18:0b:fd:66:c7:f8:ae:d9:71:03:7b:44:2e:6a:
d7:2f:e2:50:dd:c4:bb:92:c2:34:7a:0a:bb:c2:e0:cb:e0:bd:
2a:09:52:57:e4:9f:93:ec:d8:70:ea:98:d0:a5:d1:9d:78:39:
cf:bf:fd:17:40:ad:c5:77:98:d4:94:60:53:03:00:2d:c1:35:
a2:55:72:ed:a8:b6:04:83:6c:10:93:70:a9:06:9e:29:22:e7:
53:d9:45:c5:9e:4b:fc:dc:3b:08:60:c5:f4:b1:3c:f9:16:78:
c7:c3:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:47:11 2025 by rpki-client