This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa
File: 3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier: EB8CmSXksockv1IlYYCg4B8qcrRvwJUiQ4+a/rHltC4=
Subject key identifier: 09:38:3A:18:DF:5C:19:7E:7D:ED:8F:4D:04:1C:75:7B:84:F9:2C:7E
Certificate issuer: /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial: 55457DA163893AE3DC4B9C57116EBBCB17262668
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa
Signing time: Thu 18 Dec 2025 13:40:33 +0000
ROA not before: Thu 18 Dec 2025 13:35:33 +0000
ROA not after: Thu 17 Dec 2026 13:40:33 +0000
asID: 262868
IP address blocks: 177.20.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 18:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:45:7d:a1:63:89:3a:e3:dc:4b:9c:57:11:6e:bb:cb:17:26:26:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Validity
Not Before: Dec 18 13:35:33 2025 GMT
Not After : Dec 17 13:40:33 2026 GMT
Subject: CN=09383A18DF5C197E7DED8F4D041C757B84F92C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:96:ee:f9:22:a8:c6:63:f7:0f:cf:9f:5d:
16:3b:45:08:a0:b7:b5:ad:c1:1d:0a:15:0a:f9:ca:
8f:7a:e2:b9:75:0a:fd:a4:75:4c:12:27:42:cf:ea:
89:49:1c:ba:6b:05:a4:ed:1c:1b:f8:9e:7a:c4:b7:
d5:ac:7e:8d:46:56:d8:97:ed:3c:75:54:2c:30:e9:
d3:d7:67:2f:3e:d2:14:c0:57:2a:fc:41:93:a8:21:
eb:a5:fd:75:aa:51:40:15:3c:44:d5:91:d4:75:3c:
91:15:94:b3:96:d2:47:f2:91:f3:69:fb:6e:46:25:
8f:21:29:93:cb:8a:45:30:8f:84:d6:4a:d2:4d:70:
be:fb:66:79:b2:e6:2a:fd:e4:3b:92:f4:e6:c8:f1:
ed:b1:d8:8b:ec:ff:90:5a:4c:20:c2:2f:71:23:3f:
85:b7:cd:b9:91:24:14:09:16:8e:c4:3b:61:45:e6:
1b:fd:b7:61:c0:9c:e4:07:43:7b:32:5d:7d:86:c3:
09:ef:af:56:2b:9a:e0:6c:a8:08:a8:c3:b8:ee:74:
5a:af:4e:86:7a:fa:2c:cd:06:57:5f:95:22:6b:d7:
a2:98:70:8d:5e:99:f6:99:d7:2b:19:93:94:e9:bd:
cb:e3:b8:d2:3b:70:37:f1:6a:9f:1a:69:a4:34:b3:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:3A:18:DF:5C:19:7E:7D:ED:8F:4D:04:1C:75:7B:84:F9:2C:7E
X509v3 Authority Key Identifier:
keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231332e302f32342d3234203d3e20323632383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.20.213.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c8:39:da:eb:61:13:2b:0a:bd:75:cc:7d:0a:13:c7:8e:34:
64:99:25:59:c5:09:53:16:4f:2b:ba:7b:0f:d8:4c:20:4a:aa:
85:02:ce:fd:f5:45:a8:c7:a4:3c:a1:31:d8:81:33:ed:10:e5:
36:6c:9a:bf:c4:7e:8a:aa:31:46:df:29:0f:5a:7a:01:a9:9d:
6f:fe:41:70:cc:1f:38:d7:bf:9e:5d:89:9b:c0:9a:43:45:7d:
dd:a7:50:86:2f:61:88:03:b3:62:d1:d8:8f:e3:c4:d4:51:1d:
36:10:c2:ce:be:99:be:56:83:60:10:ef:46:2a:79:2a:30:97:
0d:17:35:08:f8:f4:16:86:f8:5a:42:55:fa:00:a9:0c:78:96:
b4:11:91:66:28:45:3b:22:22:10:43:3c:15:0e:c2:66:d3:82:
6b:11:c4:a7:4e:6d:47:43:72:5c:cb:a8:d0:a3:18:00:c5:ce:
9f:60:ce:3a:2d:b5:f9:40:0c:73:91:6b:82:23:2d:02:b1:29:
65:6a:53:be:e5:d4:5f:64:0a:91:d1:2a:59:87:b7:cb:61:ef:
e5:fe:11:3d:cc:ee:49:35:72:58:08:10:b9:b0:1c:e8:5f:e7:
fd:e6:81:96:58:aa:c9:74:2b:73:d9:e2:0d:3d:52:02:d3:b9:
07:62:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:26:11 2025 by rpki-client