This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e33382e38382e302f32312d3332203d3e20323632343032.roa
File: 3137372e33382e38382e302f32312d3332203d3e20323632343032.roa (raw, json)
Hash identifier: UnR67soChHlRk8QUdbjQlItIF0A1r5PM5+YUCLkOpm0=
Subject key identifier: 4A:B9:51:4B:60:97:6F:C1:99:F5:6A:8F:D2:BA:9E:A6:2B:03:33:3E
Certificate issuer: /CN=6089F3D89107738F93CB916607B5E12C0D11B759
Certificate serial: 68292B23F52F85437018C9D49EBBB0F44A28DCDE
Authority key identifier: 60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer
Subject info access: rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e33382e38382e302f32312d3332203d3e20323632343032.roa
Signing time: Mon 15 Dec 2025 22:17:31 +0000
ROA not before: Mon 15 Dec 2025 22:12:31 +0000
ROA not after: Mon 14 Dec 2026 22:17:31 +0000
asID: 262402
IP address blocks: 177.38.88.0/21 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:29:2b:23:f5:2f:85:43:70:18:c9:d4:9e:bb:b0:f4:4a:28:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6089F3D89107738F93CB916607B5E12C0D11B759
Validity
Not Before: Dec 15 22:12:31 2025 GMT
Not After : Dec 14 22:17:31 2026 GMT
Subject: CN=4AB9514B60976FC199F56A8FD2BA9EA62B03333E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:3f:91:d4:47:9c:42:29:ec:3a:c2:31:35:
d1:aa:e3:00:73:b9:d7:26:06:e4:46:ad:19:ae:a7:
20:a9:ae:c3:e3:73:7c:cc:7a:bb:eb:a5:25:a5:33:
32:f8:40:50:2c:92:34:8a:ed:b1:2b:e4:d2:c3:2d:
3e:30:a5:ef:44:bd:0f:91:f4:01:2a:a9:ce:62:b2:
4d:ba:85:74:c2:9d:b9:10:7b:9f:27:a1:cf:42:f8:
ed:c2:a7:9d:b9:cb:9c:fa:e6:62:7b:d3:7b:04:66:
e3:06:2b:7b:d3:84:f1:e4:f2:93:ad:98:54:7c:f7:
bf:e8:37:78:5f:1c:1d:2d:e3:71:81:5d:1f:97:c2:
5c:60:2c:d9:78:07:88:8d:a7:b7:43:03:85:b8:d4:
43:3e:ec:39:46:82:20:c7:47:5b:4c:4c:6b:5c:78:
71:ca:34:df:65:9c:57:48:28:c8:8c:b7:65:32:32:
ac:95:bf:65:86:22:88:b8:48:47:f8:25:32:9f:4f:
11:6e:27:da:5a:36:e2:ce:99:d7:a1:aa:32:cb:40:
3c:dc:36:18:de:1f:6d:c5:78:68:ca:1a:8f:66:17:
06:12:4c:f4:22:c2:b1:f0:01:b0:30:9a:31:6a:bd:
c8:d8:8c:66:95:96:26:9d:f5:8c:7f:61:fc:11:f1:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:51:4B:60:97:6F:C1:99:F5:6A:8F:D2:BA:9E:A6:2B:03:33:3E
X509v3 Authority Key Identifier:
keyid:60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/6089F3D89107738F93CB916607B5E12C0D11B759.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e33382e38382e302f32312d3332203d3e20323632343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:e7:15:ed:e0:2a:21:2a:26:60:6a:dc:90:2e:da:7b:fa:4c:
d9:a6:f0:6e:ec:0e:35:49:bf:36:a2:11:a1:a4:1b:fe:08:e0:
1b:f0:2f:f9:4a:46:1b:39:c4:d0:ed:a5:67:ea:2d:11:f5:82:
ff:c3:27:9f:cf:89:a8:c2:bc:ce:36:83:26:c1:5b:57:eb:e0:
7c:60:5e:da:46:25:db:11:56:d3:f9:26:9d:c8:a6:b8:69:cb:
ef:11:08:bc:ed:fe:21:75:b2:e5:04:4e:cf:c8:be:e4:a6:8f:
0f:53:e7:5f:1b:50:ae:17:9f:7c:ad:53:22:c2:f7:18:b9:36:
a0:d3:39:b8:ee:cb:05:e2:2b:58:31:e4:5d:86:19:4d:96:0c:
e3:8b:2b:f0:64:7e:42:c2:77:12:d9:57:8e:8f:00:0b:d8:a6:
0c:a9:50:f9:77:36:93:98:99:36:1a:e5:3c:7a:e6:2d:07:25:
f6:4b:8e:0c:83:c6:48:d9:55:26:db:83:69:d0:32:3f:f4:49:
dc:01:e8:23:0a:53:66:7f:78:48:c7:78:60:09:05:f7:12:7e:
be:5d:68:15:27:39:e1:45:cc:a7:4a:89:c3:15:91:b0:65:42:
87:46:1c:2a:35:8e:dc:66:1e:81:45:d2:87:18:01:d2:04:9e:
c1:02:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:27 2025 by rpki-client