This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa
File: 3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa (raw, json)
Hash identifier: ALzCk7B7idvt6Tymivn/nTBr/Yqiw9y4NIMiCobwFP4=
Subject key identifier: D5:98:D3:2A:49:22:DF:5B:0B:5A:12:9B:4A:B9:82:71:C0:F1:6F:C9
Certificate issuer: /CN=7D92F334494EDE5B42E5400F9902062BD822C1E8
Certificate serial: 3BC1ABA355337F159B73A79A2BA17B6160E3EC7D
Authority key identifier: 7D:92:F3:34:49:4E:DE:5B:42:E5:40:0F:99:02:06:2B:D8:22:C1:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa
Signing time: Mon 22 Dec 2025 23:18:59 +0000
ROA not before: Mon 22 Dec 2025 23:13:59 +0000
ROA not after: Mon 21 Dec 2026 23:18:59 +0000
asID: 270553
IP address blocks: 189.85.108.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.crl
rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c1:ab:a3:55:33:7f:15:9b:73:a7:9a:2b:a1:7b:61:60:e3:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D92F334494EDE5B42E5400F9902062BD822C1E8
Validity
Not Before: Dec 22 23:13:59 2025 GMT
Not After : Dec 21 23:18:59 2026 GMT
Subject: CN=D598D32A4922DF5B0B5A129B4AB98271C0F16FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:56:d4:a0:20:2a:f8:02:40:07:9d:b7:69:
28:c7:15:7e:02:dc:e6:c7:0e:2d:30:40:c9:e0:7c:
25:23:2a:6f:93:05:27:dc:a3:12:e6:b8:08:18:be:
c9:76:8c:41:b9:1d:34:10:d3:37:56:85:22:7b:ae:
80:e6:f1:6f:83:0f:a0:4b:7e:10:93:2f:e2:14:81:
fb:a3:89:93:f8:74:ec:a9:8f:fe:36:f6:5b:39:a2:
25:bd:ee:6c:a6:4d:a5:cb:d2:aa:83:49:42:85:2e:
93:2f:80:6f:3e:f0:90:4c:99:4d:5c:bb:de:d2:af:
95:0d:94:35:ce:93:3d:e2:1a:0a:e6:fa:e3:c6:ad:
04:d7:ea:fd:8a:43:09:ea:f9:2b:4b:a8:6d:56:3c:
ed:8c:8b:7a:ab:b3:98:08:91:75:fa:91:b7:10:46:
69:fb:17:8c:67:05:e4:da:7b:31:c9:a2:0e:0a:65:
16:4e:c2:de:c8:3c:a6:ad:f5:2e:61:65:69:98:b8:
be:c8:2d:7a:b3:f2:13:6b:43:c3:a4:6c:b6:7d:1c:
97:e9:55:92:5c:cb:3f:b4:4c:4b:ed:eb:78:f1:b1:
2d:78:5b:48:08:d1:19:d5:6b:6f:1c:e2:e6:a4:d4:
4e:71:67:54:9e:1c:9a:96:e9:e2:72:19:b9:69:53:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:D3:2A:49:22:DF:5B:0B:5A:12:9B:4A:B9:82:71:C0:F1:6F:C9
X509v3 Authority Key Identifier:
keyid:7D:92:F3:34:49:4E:DE:5B:42:E5:40:0F:99:02:06:2B:D8:22:C1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:e9:e5:6f:30:06:eb:21:9d:5a:1f:ce:17:86:05:a9:56:7c:
b6:76:8e:44:f0:68:c5:a5:02:5f:4e:b6:7f:33:70:7a:6e:43:
54:86:ac:d3:87:03:9c:60:de:bc:53:e3:10:53:43:2b:38:a8:
03:d1:f9:58:74:5f:0e:66:28:80:c7:7e:16:21:24:54:73:39:
db:96:94:81:c7:47:ec:22:c7:86:13:68:97:58:dc:cc:33:a6:
c4:15:04:9a:c9:33:a6:ab:2c:2d:66:a3:86:b4:2f:3c:01:8e:
b4:a7:99:02:ca:fd:59:1e:3c:17:71:3f:98:ea:72:16:08:b9:
99:9c:ef:95:77:a6:93:ad:9e:0f:96:bb:26:2f:ea:04:6f:9b:
fb:95:e4:a0:3e:2d:bf:90:74:dd:d8:16:bd:6f:68:e1:e1:e5:
08:5f:82:d7:69:71:bc:b7:94:f0:b1:5c:2a:b3:25:81:59:b2:
cc:a0:60:f7:af:5c:b3:7b:c9:25:c6:86:d9:97:65:aa:8f:4b:
24:6e:9c:87:01:dc:71:d3:e2:83:51:d2:22:ea:88:0b:9e:b2:
14:03:5e:be:4e:2d:44:b3:fd:e3:c5:bf:2d:36:9a:87:7a:0b:
81:23:41:d9:c5:fb:18:c4:e0:d5:71:86:fa:da:81:6d:0f:5d:
f9:de:83:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO8Gro1UzfxWbc6eaK6F7YWDj7H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q5MkYzMzQ0OTRFREU1QjQyRTU0MDBGOTkwMjA2MkJE
ODIyQzFFODAeFw0yNTEyMjIyMzEzNTlaFw0yNjEyMjEyMzE4NTlaMDMxMTAvBgNV
BAMTKEQ1OThEMzJBNDkyMkRGNUIwQjVBMTI5QjRBQjk4MjcxQzBGMTZGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCFbUoCAq+AJAB523aSjHFX4C
3ObHDi0wQMngfCUjKm+TBSfcoxLmuAgYvsl2jEG5HTQQ0zdWhSJ7roDm8W+DD6BL
fhCTL+IUgfujiZP4dOypj/429ls5oiW97mymTaXL0qqDSUKFLpMvgG8+8JBMmU1c
u97Sr5UNlDXOkz3iGgrm+uPGrQTX6v2KQwnq+StLqG1WPO2Mi3qrs5gIkXX6kbcQ
Rmn7F4xnBeTaezHJog4KZRZOwt7IPKat9S5hZWmYuL7ILXqz8hNrQ8OkbLZ9HJfp
VZJcyz+0TEvt63jxsS14W0gI0RnVa28c4uak1E5xZ1SeHJqW6eJyGblpUzstAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1ZjTKkki31sLWhKbSrmCccDxb8kwHwYDVR0j
BBgwFoAUfZLzNElO3ltC5UAPmQIGK9giwegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZhMVJOV0xRWktYMm1LR1gzQUJOekRmMkdVRW1IdHVkbjhpYUF3UEo1
OWIvMC83RDkyRjMzNDQ5NEVERTVCNDJFNTQwMEY5OTAyMDYyQkQ4MjJDMUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEOTJGMzM0NDk0RURFNUI0
MkU1NDAwRjk5MDIwNjJCRDgyMkMxRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2YTFSTldMUVpLWDJtS0dYM0FCTnpEZjJHVUVtSHR1ZG44aWFBd1BKNTliLzAv
MzEzODM5MmUzODM1MmUzMTMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzNTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9VWwwDQYJKoZIhvcNAQELBQADggEBALfp5W8w
BushnVofzheGBalWfLZ2jkTwaMWlAl9Otn8zcHpuQ1SGrNOHA5xg3rxT4xBTQys4
qAPR+Vh0Xw5mKIDHfhYhJFRzOduWlIHHR+wix4YTaJdY3MwzpsQVBJrJM6arLC1m
o4a0LzwBjrSnmQLK/VkePBdxP5jqchYIuZmc75V3ppOtng+WuyYv6gRvm/uV5KA+
Lb+QdN3YFr1vaOHh5Qhfgtdpcby3lPCxXCqzJYFZssygYPevXLN7ySXGhtmXZaqP
SyRunIcB3HHT4oNR0iLqiAueshQDXr5OLUSz/ePFvy02mod6C4EjQdnF+xjE4NVx
hvragW0PXfneg24=
-----END CERTIFICATE-----
Generated at Tue Dec 23 05:35:12 2025 by rpki-client