This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa
File: 3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier: 2vHMOjPT7zj4B0k99AvS5GA71k0boa5WPOAR/UxqJFg=
Subject key identifier: 9D:3C:B0:F7:8C:2A:07:4D:E0:03:ED:3A:C8:B0:90:10:F1:D7:76:21
Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Certificate serial: 1CC8BB40C254C151C7DB78FF2C855DB04AB436F1
Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa
Signing time: Tue 09 Dec 2025 23:46:58 +0000
ROA not before: Tue 09 Dec 2025 23:41:58 +0000
ROA not after: Tue 08 Dec 2026 23:46:58 +0000
asID: 267991
IP address blocks: 192.100.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 23:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c8:bb:40:c2:54:c1:51:c7:db:78:ff:2c:85:5d:b0:4a:b4:36:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Validity
Not Before: Dec 9 23:41:58 2025 GMT
Not After : Dec 8 23:46:58 2026 GMT
Subject: CN=9D3CB0F78C2A074DE003ED3AC8B09010F1D77621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:e8:1e:e3:e1:da:27:8c:ce:10:ac:d2:d0:
cc:0c:e8:7a:24:3a:de:5d:ef:83:54:af:e3:57:52:
c0:4b:68:12:43:bf:dd:11:3a:a9:4d:59:fd:92:95:
fe:b9:64:2e:b3:73:eb:b6:ae:0a:72:26:1b:1f:35:
6d:8f:ff:71:e8:1b:a9:4b:b1:b5:30:32:dc:30:9e:
f0:52:81:e8:d9:cb:be:69:b4:49:8a:68:cb:3d:6d:
a3:78:00:07:bd:15:a8:51:10:c5:e6:fc:37:b2:c6:
a4:08:a2:33:ee:a3:6f:64:20:10:96:ab:d7:f1:5c:
a4:93:ab:f4:80:9a:32:37:a0:8b:fc:1e:03:01:83:
9d:5c:a1:72:0f:fb:33:e5:7e:d4:37:c6:b9:8a:8d:
5f:02:1d:93:95:be:4b:de:51:47:6e:47:2c:70:bb:
0f:68:eb:5c:27:fb:88:09:0f:04:70:89:30:d5:6b:
7d:05:72:7c:15:af:07:6f:45:1e:98:37:cc:1b:ee:
d0:ec:3d:19:8f:31:b6:fb:d7:9f:07:93:a8:04:f0:
21:9b:44:b7:91:52:bd:a9:7d:c5:d7:7c:e2:b3:99:
6d:e0:35:96:52:e0:00:e1:d0:4e:68:a2:06:10:d6:
f8:8d:f1:e2:a9:f7:e3:f5:c9:e2:fd:70:48:b8:46:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3C:B0:F7:8C:2A:07:4D:E0:03:ED:3A:C8:B0:90:10:F1:D7:76:21
X509v3 Authority Key Identifier:
keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5b:e5:b2:fd:b3:97:f2:2b:27:33:89:95:62:01:63:f0:3d:
42:1d:12:8c:f8:91:32:5d:ad:83:33:5f:70:6c:7f:17:19:aa:
10:00:a9:97:d7:ea:b0:ad:24:d9:1d:cc:14:39:82:a7:70:31:
ed:5f:99:94:ff:a7:41:7d:ab:55:d9:87:96:13:52:2e:07:0f:
e3:27:52:40:2e:84:59:bb:b0:83:36:31:75:24:13:9f:6e:8e:
7f:4c:1d:60:07:8e:4b:70:d7:4b:a4:61:99:ff:8c:fb:65:af:
16:87:90:f2:7b:54:4d:56:cf:bc:c0:d2:c4:c8:f1:7a:9c:6e:
0b:be:03:92:5e:db:e3:87:59:21:2e:54:f2:67:90:64:8c:71:
87:ed:02:79:eb:2f:3e:e7:e9:25:94:5b:89:c8:69:43:c9:55:
12:ab:63:d3:fe:71:61:c0:c8:07:1d:43:35:18:76:4f:ed:3e:
e5:d4:43:ca:43:e6:1c:82:82:cf:18:e2:4a:8b:49:6c:cf:1d:
0e:04:7f:fb:07:17:85:ee:56:01:da:c7:2d:11:e3:39:22:84:
7d:ef:e4:5a:71:2f:20:d0:d0:a7:4d:9c:2f:60:00:33:84:eb:
77:ad:34:f8:c6:6b:a6:16:d8:fe:09:a0:de:4f:0e:6f:7d:3d:
5f:26:d8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:36:48 2025 by rpki-client