This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3130382e302f32322d3332203d3e20323634313631.roa
File: 3133312e3139362e3130382e302f32322d3332203d3e20323634313631.roa (raw, json)
Hash identifier: Pc2W77mzDzb9eGkHGomsE5bgY56UX0b8TcDJZAGfobc=
Subject key identifier: F3:CB:C5:E3:B5:E3:2B:27:B3:81:25:CE:A0:C4:07:3A:2B:E2:F1:DD
Certificate issuer: /CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
Certificate serial: 0BD307C271499E66148F148465F4D8937832DA5D
Authority key identifier: 7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3130382e302f32322d3332203d3e20323634313631.roa
Signing time: Fri 07 Nov 2025 19:10:16 +0000
ROA not before: Fri 07 Nov 2025 19:05:16 +0000
ROA not after: Fri 06 Nov 2026 19:10:16 +0000
asID: 264161
IP address blocks: 131.196.108.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl
rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 13:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d3:07:c2:71:49:9e:66:14:8f:14:84:65:f4:d8:93:78:32:da:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
Validity
Not Before: Nov 7 19:05:16 2025 GMT
Not After : Nov 6 19:10:16 2026 GMT
Subject: CN=F3CBC5E3B5E32B27B38125CEA0C4073A2BE2F1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:82:0d:ce:9b:36:76:37:57:4a:11:d0:d4:22:
37:f5:16:da:f7:e3:c3:d2:23:5a:3f:1e:c1:c5:d8:
0b:34:b5:ba:03:26:a7:5a:6c:c4:50:73:eb:2b:22:
ea:e0:31:3a:a9:fe:9e:1c:dd:06:1f:60:ac:08:c2:
c4:e7:09:ec:21:b1:8b:46:44:36:89:7d:66:c8:b0:
e3:f3:58:ec:92:9c:44:80:f0:06:63:0b:b7:59:95:
a4:e3:8f:e4:0f:dc:be:26:71:70:96:a2:e1:8c:84:
4b:44:b3:b7:ee:96:2a:e2:8d:e7:3b:d3:8c:93:29:
d8:cc:5c:37:3a:dc:fb:1a:56:bb:14:73:82:06:67:
af:fe:53:06:29:f8:e6:01:7f:75:0e:7c:3a:e5:46:
6b:c8:f2:76:86:9a:13:2f:9c:29:23:d9:18:73:72:
c0:a0:ba:06:d5:55:18:a8:ac:28:54:29:8f:ec:92:
de:e9:6b:0f:6b:5d:32:35:b7:97:f1:15:a3:2c:bd:
52:87:59:4a:a5:30:d7:c9:83:a4:cb:54:08:a7:4c:
44:11:fa:5f:14:e0:70:a1:f6:a1:ee:ef:53:bd:f8:
c6:8f:f4:9d:0e:d8:da:c2:08:40:9e:f4:74:6a:51:
41:12:12:2c:4c:00:cd:3d:52:35:0c:1c:0a:42:cd:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:C5:E3:B5:E3:2B:27:B3:81:25:CE:A0:C4:07:3A:2B:E2:F1:DD
X509v3 Authority Key Identifier:
keyid:7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3130382e302f32322d3332203d3e20323634313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:b0:5c:e1:b6:b1:13:63:20:3f:b6:d6:3c:09:54:f5:c8:5d:
13:e6:07:5d:a1:8e:7c:c8:e4:37:28:f7:61:7e:3f:79:af:cf:
a8:2c:12:de:4a:82:c6:84:bf:aa:cf:8b:ff:72:04:cf:4b:ef:
d9:17:d5:e3:68:28:fa:26:82:95:c2:74:07:7d:16:14:85:03:
8c:5b:d7:ba:0c:13:74:91:56:85:98:44:d1:1c:39:1d:72:db:
ab:67:e1:2c:e6:d6:56:a7:5a:44:4c:38:30:c9:09:39:6d:d2:
73:42:8a:61:9f:ff:7e:c2:bf:f1:a9:61:65:ca:84:c7:4f:50:
7b:96:65:fa:53:ac:51:37:19:16:9c:36:d7:ca:18:a6:6a:52:
c4:75:76:ce:5b:53:43:72:42:8e:ea:3c:48:1c:94:e3:23:9d:
fd:01:43:62:f8:68:50:b8:2e:1b:2b:d7:b3:e8:a5:90:62:e1:
ad:c9:a5:10:4a:38:f8:04:0a:44:ff:d7:d5:b5:ae:24:a5:e6:
35:eb:5d:16:53:2d:4b:0d:b2:ac:3c:eb:8d:3e:dd:6a:6c:8c:
d2:d5:6b:f3:d4:10:08:fb:a4:3e:f4:c5:89:71:2b:7a:9b:94:
94:b7:72:a0:83:98:11:ea:c6:3f:fc:e5:4b:07:d8:19:be:f1:
c8:c2:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:47:36 2025 by rpki-client