This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136302e302f32322d3332203d3e203631363735.roa
File: 3133312e3130382e3136302e302f32322d3332203d3e203631363735.roa (raw, json)
Hash identifier: h5Dt5n6tDsdYIQbUKXm3OpZL6ja0L6HKsFqcCmdoUx8=
Subject key identifier: 08:2E:B4:16:1F:F3:B6:05:13:3D:35:94:41:30:32:54:B2:F3:7E:0B
Certificate issuer: /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial: 0F84B5412AADF3E14C89A667BAA83F20A6C5BA07
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136302e302f32322d3332203d3e203631363735.roa
Signing time: Mon 29 Dec 2025 21:20:25 +0000
ROA not before: Mon 29 Dec 2025 21:15:25 +0000
ROA not after: Mon 28 Dec 2026 21:20:25 +0000
asID: 61675
IP address blocks: 131.108.160.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 03 Jan 2026 01:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:84:b5:41:2a:ad:f3:e1:4c:89:a6:67:ba:a8:3f:20:a6:c5:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
Validity
Not Before: Dec 29 21:15:25 2025 GMT
Not After : Dec 28 21:20:25 2026 GMT
Subject: CN=082EB4161FF3B605133D359441303254B2F37E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7e:97:db:d1:25:b9:24:4c:f7:42:b4:48:3e:
62:c0:80:d1:a3:d4:73:f3:f6:be:76:f7:ba:1f:42:
b7:23:af:58:9c:c3:ff:e4:45:44:00:fb:10:08:66:
44:e0:36:11:2c:5a:4d:24:c8:2a:ee:a0:15:a9:e7:
90:b2:c4:81:9e:1c:8c:66:1b:8b:60:6a:70:88:f8:
0e:9a:61:31:9f:55:f6:86:b9:fe:f5:59:2f:ff:fb:
dd:8c:8f:08:6b:e6:15:1e:63:ca:d1:7e:80:da:c9:
1d:d0:43:b3:e1:f9:93:e3:5c:9b:81:e9:77:0d:df:
21:c6:1d:83:63:3c:4b:ae:2f:7a:0a:22:46:a9:d8:
96:9e:2e:3b:3c:43:f9:3a:89:d5:4b:a6:75:33:84:
eb:72:a9:06:97:83:ad:a9:d5:21:37:01:70:94:37:
ad:18:ba:cd:6c:16:4d:25:4f:ff:f9:cb:2e:ad:6c:
d5:af:14:ee:07:64:e4:df:b8:89:36:f1:fd:cc:0e:
a6:44:65:fd:10:8d:ae:69:cd:8f:12:b9:ad:2f:18:
36:7d:89:ad:98:ae:dd:55:48:9e:90:98:66:64:0b:
df:a9:34:67:77:00:c2:06:54:ff:0b:fe:78:b7:4c:
9c:75:06:14:5e:83:0a:a4:d2:89:ca:03:65:26:01:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:B4:16:1F:F3:B6:05:13:3D:35:94:41:30:32:54:B2:F3:7E:0B
X509v3 Authority Key Identifier:
keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136302e302f32322d3332203d3e203631363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c6:0f:f9:7a:92:56:c8:a3:40:38:09:61:e3:36:40:90:d3:
f1:7b:00:f0:7b:3d:b6:f8:20:55:5e:c0:04:ea:e9:ec:9f:58:
bf:68:c3:16:36:f7:d5:6b:46:d4:3b:9a:f0:97:37:72:b1:e0:
05:d0:f7:37:ea:59:be:4d:fc:ff:6f:56:af:c2:fc:45:53:5c:
6a:85:b5:79:e4:25:36:8e:39:d6:1c:87:e0:14:be:c5:a7:a7:
74:08:2d:20:aa:8b:49:cf:58:b9:7a:1d:51:65:ee:cd:20:b5:
ce:ff:b4:9f:67:03:2e:ab:96:ff:98:ee:b4:fa:db:de:84:82:
18:08:cd:6c:30:00:ac:a0:8e:57:f8:57:3c:da:27:ab:c8:62:
0e:e8:25:61:4a:df:0a:49:e8:7f:62:99:d0:4e:82:a2:ba:54:
c3:12:c4:9f:7e:0e:c8:70:41:2d:74:33:30:7c:70:6e:3d:ca:
53:99:f0:e9:4c:10:76:32:ef:de:79:a0:dc:f1:53:07:9c:22:
32:bc:35:d6:67:9d:b0:0a:bf:b1:87:cb:72:0f:ee:aa:63:95:
8c:af:11:9f:ae:6a:4a:c8:08:20:5b:b5:f6:16:ff:0d:a6:73:
fe:a0:e4:b4:98:6a:bf:0c:40:8f:fb:06:dd:98:e4:74:cb:4f:
67:41:fd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 13:18:03 2026 by rpki-client