This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133352e302f32342d3234203d3e20323634353437.roa
File: 3133382e302e3133352e302f32342d3234203d3e20323634353437.roa (raw, json)
Hash identifier: qfqNaTpcPPEmOyfxBAr7Vzfl2jDoweYnn26KgGzPlbU=
Subject key identifier: BA:32:9F:5B:9A:6C:66:27:09:AF:3A:E0:9B:04:09:7A:40:CE:84:1C
Certificate issuer: /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Certificate serial: 5C4C0DDADBD8AD9B1DC24D301B93936141E9723A
Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133352e302f32342d3234203d3e20323634353437.roa
Signing time: Mon 29 Dec 2025 14:18:00 +0000
ROA not before: Mon 29 Dec 2025 14:13:00 +0000
ROA not after: Mon 28 Dec 2026 14:18:00 +0000
asID: 264547
IP address blocks: 138.0.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 01 Jan 2026 02:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4c:0d:da:db:d8:ad:9b:1d:c2:4d:30:1b:93:93:61:41:e9:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Validity
Not Before: Dec 29 14:13:00 2025 GMT
Not After : Dec 28 14:18:00 2026 GMT
Subject: CN=BA329F5B9A6C662709AF3AE09B04097A40CE841C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:36:bd:e5:de:9a:bb:e0:a4:43:13:14:0a:
4e:24:ec:a3:aa:64:19:40:a2:87:02:ce:a9:a1:e7:
93:22:54:4f:71:f3:e2:44:6f:9a:79:83:c5:32:50:
f7:7b:3d:1c:e5:e3:c2:e8:7c:ab:4a:16:9b:7b:9d:
18:b7:90:7d:1d:ae:99:e6:69:d5:f0:39:e7:bb:95:
86:46:ed:f1:64:af:16:b6:f3:2f:51:3a:42:89:1d:
0a:7a:d0:14:ad:95:0c:4e:db:72:4f:fa:da:79:05:
16:fb:a2:e1:93:74:c5:57:85:fa:bf:5c:4e:bc:f9:
fd:a6:c1:1b:be:f7:6f:00:23:89:17:62:04:9a:10:
46:ff:66:e9:d0:c1:b9:8c:a1:42:b2:2a:08:ca:d8:
3e:2a:56:a2:92:ba:16:9e:d9:8f:88:5b:5b:17:e4:
ee:03:4a:4a:81:d7:b5:e5:54:7b:0f:49:74:a6:15:
5b:0e:b2:2f:6b:19:d3:ff:97:4a:2f:4e:b4:d3:a2:
70:b6:db:46:f6:40:91:27:cc:e2:a3:4a:75:e1:6d:
7d:1b:c8:c9:91:5f:3d:a9:71:04:72:f9:90:9b:1f:
41:7b:69:23:61:b3:0b:77:e7:b8:96:70:c3:75:4e:
07:e9:20:97:8c:6b:2d:fb:46:f7:75:9d:68:43:7e:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:9F:5B:9A:6C:66:27:09:AF:3A:E0:9B:04:09:7A:40:CE:84:1C
X509v3 Authority Key Identifier:
keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133352e302f32342d3234203d3e20323634353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:fe:2a:23:da:45:58:ea:cd:43:96:db:32:1d:90:37:e6:95:
08:38:95:8c:cc:f8:46:26:f1:6b:48:53:c9:d9:c5:e1:41:35:
ec:f2:43:46:69:90:a7:9f:2e:bd:f1:4f:79:38:bf:ab:88:20:
58:09:61:2e:a6:a9:2e:2a:1d:1c:7c:8e:fd:41:95:d1:d8:68:
81:1f:7e:df:d2:8e:35:09:7d:ca:68:d4:05:6e:e6:b0:5e:05:
c1:86:01:32:71:a7:7b:e3:65:2a:29:45:a5:94:e9:60:4b:74:
c4:c4:e1:db:c3:09:58:18:22:90:0f:db:a6:d4:3f:3c:a4:43:
b8:5d:da:b5:a7:a4:db:5a:88:51:8f:b6:87:e0:93:cf:bc:b6:
f7:30:e7:80:f0:2b:76:b9:ac:d6:2e:f1:7a:0b:13:6b:52:5e:
1c:97:f4:21:79:61:c1:5c:9c:22:75:65:66:69:ac:a3:5e:70:
ae:46:93:8d:d8:6b:bb:88:cd:fd:6c:a4:27:be:51:96:f2:a6:
a8:a5:bc:01:fe:95:a6:85:5b:61:f9:cc:e2:e9:f5:89:17:b7:
59:e7:1f:a6:40:52:84:9e:e6:99:c6:2b:e0:fb:ec:46:37:bd:
e0:d4:53:61:77:4b:c6:02:7a:44:6e:f1:34:84:56:8e:11:ec:
72:f1:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 03:44:26 2025 by rpki-client