This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135362e302f32342d3234203d3e20323635323536.roa
File: 3136382e302e3135362e302f32342d3234203d3e20323635323536.roa (raw, json)
Hash identifier: CwpBEA+1K+H+wzAy+9F3z6X7si7YqsYsrNZSHsAz8NE=
Subject key identifier: E9:0A:A0:99:11:55:5E:40:41:E8:2D:69:28:B3:21:FF:9B:71:4C:9C
Certificate issuer: /CN=1D98467C905A92172F884A0A1419F30237985451
Certificate serial: 60D7166CA60C41F0F38EDF98F5BC63BF8EA43CBA
Authority key identifier: 1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135362e302f32342d3234203d3e20323635323536.roa
Signing time: Sat 30 Aug 2025 00:11:59 +0000
ROA not before: Sat 30 Aug 2025 00:06:59 +0000
ROA not after: Sat 29 Aug 2026 00:11:59 +0000
asID: 265256
IP address blocks: 168.0.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d7:16:6c:a6:0c:41:f0:f3:8e:df:98:f5:bc:63:bf:8e:a4:3c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D98467C905A92172F884A0A1419F30237985451
Validity
Not Before: Aug 30 00:06:59 2025 GMT
Not After : Aug 29 00:11:59 2026 GMT
Subject: CN=E90AA09911555E4041E82D6928B321FF9B714C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:d5:aa:ed:df:a4:88:41:b0:da:65:01:90:
b4:08:5f:96:5f:c9:04:cf:58:d7:03:6a:d7:7d:b7:
82:89:e2:27:6e:e0:c4:22:e7:12:d0:5f:0a:b9:83:
f3:80:97:a2:d7:9a:ba:14:dc:a2:f3:a3:35:aa:c1:
24:90:ab:d0:b7:62:09:71:ef:21:6c:3c:db:02:20:
27:73:3b:e6:55:57:9f:49:74:85:e0:9f:a6:f6:ca:
21:9c:ad:fb:ea:41:b6:3f:16:8c:3e:78:7d:b9:3b:
6f:6d:f9:70:c9:45:9b:d4:81:7b:7e:e4:0c:13:ce:
07:9f:58:63:00:72:48:d7:27:07:e5:c4:d2:a1:70:
80:a4:3f:fe:52:28:95:e9:01:7e:89:e0:22:3a:4d:
4a:db:b2:12:d5:91:e3:e7:cf:81:ae:0a:53:90:54:
9f:a9:15:a3:c1:ae:83:8c:38:7e:dc:52:3a:12:b0:
15:f4:0b:21:07:af:e3:3f:cf:2e:63:26:0c:81:ee:
39:ec:e6:3a:31:6d:be:02:4c:f2:e3:0d:d3:d6:cb:
85:e3:6a:2a:85:fb:9c:62:bc:e8:1f:ea:04:83:8d:
89:e7:2a:1a:5d:2e:05:9a:b1:7e:81:c5:eb:b8:c7:
b2:11:56:f4:fe:19:16:f5:ad:75:b0:79:fa:f9:5e:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:A0:99:11:55:5E:40:41:E8:2D:69:28:B3:21:FF:9B:71:4C:9C
X509v3 Authority Key Identifier:
keyid:1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135362e302f32342d3234203d3e20323635323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4a:2b:38:99:97:fb:9b:2d:4c:7f:cb:b0:41:97:70:c5:f5:
19:0c:f4:28:ca:1a:b3:6f:85:97:d7:67:70:fa:e7:d1:74:45:
bb:2c:5c:1e:4a:8c:ba:fe:31:cc:d9:d0:f5:3f:56:41:97:15:
94:72:bc:9a:7d:44:96:be:79:e1:78:2c:32:b1:1f:55:65:00:
20:01:5d:d0:db:29:d2:6a:62:b3:ee:82:2c:7a:67:5e:c6:b9:
93:f8:cb:ed:86:87:6c:85:0c:56:c6:46:6e:98:02:8f:6a:98:
f3:e5:9e:ce:d2:7f:33:61:81:4a:29:35:44:b4:f5:db:f2:8f:
b5:6e:cb:e9:b7:63:49:f0:60:c0:17:61:2c:e6:28:de:a1:f4:
ee:53:b6:7e:e2:3b:fd:89:3b:17:48:8b:cd:96:e1:3c:a4:96:
5a:0d:94:f4:45:13:d2:bd:87:74:1a:db:e7:90:5f:f6:6c:87:
f3:b5:c9:10:4b:e8:d2:78:a7:5c:86:a2:78:38:6d:b1:3d:22:
16:2c:69:39:d0:5c:24:89:f0:0e:0b:ec:72:ac:09:45:b4:72:
3e:ed:b3:c1:85:b0:1b:4a:0b:e4:99:d7:c5:32:0e:71:c8:41:
ef:19:88:c0:b5:ce:c5:6c:79:a1:0c:66:b9:92:6d:92:22:ac:
ca:1e:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:53:45 2025 by rpki-client