This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa
File: 3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (raw, json)
Hash identifier: p9RhT4lVq5nKwyL7LrFDDbc9nTFkzyF7NHEulkLUAJU=
Subject key identifier: 8B:91:5C:74:52:ED:60:82:90:9F:97:27:CD:BC:59:7C:A2:7F:6A:C4
Certificate issuer: /CN=1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63
Certificate serial: 4D8999009252763F9AFE879C45F2427F225F3AD0
Authority key identifier: 1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa
Signing time: Mon 22 Dec 2025 12:05:55 +0000
ROA not before: Mon 22 Dec 2025 12:00:55 +0000
ROA not after: Mon 21 Dec 2026 12:05:55 +0000
asID: 273431
IP address blocks: 186.227.76.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.crl
rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 18:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:89:99:00:92:52:76:3f:9a:fe:87:9c:45:f2:42:7f:22:5f:3a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63
Validity
Not Before: Dec 22 12:00:55 2025 GMT
Not After : Dec 21 12:05:55 2026 GMT
Subject: CN=8B915C7452ED6082909F9727CDBC597CA27F6AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:e0:5c:07:bf:2d:c5:84:4f:fc:c5:a9:f3:
9a:ea:64:a8:c1:eb:12:cd:32:58:1b:46:aa:36:53:
90:ba:e7:8d:69:be:f4:66:fe:90:0d:78:e2:6d:b7:
de:84:24:63:bc:20:21:d2:76:a9:b2:c0:d6:19:13:
a8:90:0f:d2:ff:d2:d8:80:af:61:f1:b5:e5:23:3f:
93:40:bb:49:23:5d:1c:19:54:98:08:51:f7:c2:a5:
66:8e:5c:5b:08:6c:b2:1c:cd:78:96:51:ac:0f:c4:
d9:ff:bf:c4:aa:36:06:b2:e9:df:1c:d5:f4:d4:f7:
b4:f6:66:4b:62:6e:29:10:9b:bc:b8:8b:de:4e:e7:
63:b9:9e:1b:ff:82:71:59:1c:32:e2:c5:78:bf:e6:
a4:02:29:97:c2:c0:f1:e5:24:1d:f0:42:75:c9:db:
9b:db:34:a4:0f:c9:30:db:8b:a2:92:3d:28:05:96:
0c:d0:3a:f9:a2:23:c3:88:1c:2a:78:bb:bb:02:07:
0d:3b:a8:b3:09:0f:a2:45:34:65:0b:ca:62:c1:16:
38:0c:5f:23:8c:c4:b3:d7:18:b3:03:38:df:0d:7d:
3c:6a:f9:2c:66:c1:dd:40:da:03:9c:c7:60:8e:90:
f4:63:0f:d7:b6:09:86:34:b1:d6:ce:a7:82:5b:72:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:91:5C:74:52:ED:60:82:90:9F:97:27:CD:BC:59:7C:A2:7F:6A:C4
X509v3 Authority Key Identifier:
keyid:1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.227.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:0f:59:31:d4:f1:4f:84:52:44:63:4b:34:6f:e0:4a:17:0a:
03:5b:08:b8:a7:4c:23:63:51:40:7c:d5:43:1d:62:ef:78:ae:
67:4f:fe:1b:b3:b7:ec:59:bd:0c:da:c8:88:fb:41:0c:bf:bb:
b2:3d:cb:ca:47:81:46:b3:46:35:e6:e6:ef:f9:c4:89:6d:6f:
e4:06:1b:79:47:ae:eb:e0:97:e6:1e:8a:28:7b:34:26:ea:5f:
e9:1e:df:d5:0f:d4:da:42:6f:d1:46:4e:49:a5:f2:97:3f:1f:
a2:15:41:c1:de:64:42:05:85:85:85:15:6b:f1:30:0d:c0:b4:
ce:42:06:06:3a:00:1c:38:d0:fc:41:d6:16:1d:8c:fc:f0:e7:
3e:fb:03:d7:7b:84:b7:3f:d0:66:46:e5:09:8e:84:a4:de:7b:
13:5e:d3:95:88:2a:76:99:8d:ee:dd:f2:f9:0c:7f:5b:e6:e2:
71:d7:00:a4:5e:3b:aa:7e:06:26:fa:9a:6f:49:62:28:13:cb:
d6:6a:5d:52:d8:70:6e:c1:ac:07:64:8b:18:ba:a6:de:14:d3:
ee:c8:f8:c7:75:f7:fe:c0:94:51:75:b5:84:85:8b:30:7e:16:
b0:99:81:6e:92:99:f4:65:82:88:f9:3d:9a:95:ee:a7:fe:af:
82:fb:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:44:24 2025 by rpki-client