This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa
File: 3139302e392e3132372e302f32342d3234203d3e20323731363733.roa (raw, json)
Hash identifier: fCtxBgUjEIK10Q/wo720O2TGWtm4JXe0tsIL+mToQRE=
Subject key identifier: D2:CD:7C:C5:97:C6:25:59:D3:99:2E:DE:AB:68:CD:BF:06:BB:19:BF
Certificate issuer: /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial: 04C7504C94910F7D659C6A70EE8E608C8DD7F287
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access: rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa
Signing time: Fri 19 Dec 2025 18:58:12 +0000
ROA not before: Fri 19 Dec 2025 18:53:12 +0000
ROA not after: Fri 18 Dec 2026 18:58:12 +0000
asID: 271673
IP address blocks: 190.9.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c7:50:4c:94:91:0f:7d:65:9c:6a:70:ee:8e:60:8c:8d:d7:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Validity
Not Before: Dec 19 18:53:12 2025 GMT
Not After : Dec 18 18:58:12 2026 GMT
Subject: CN=D2CD7CC597C62559D3992EDEAB68CDBF06BB19BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:70:56:e7:d6:87:eb:71:aa:e5:26:73:26:
db:34:1c:70:0d:a9:62:75:6f:39:0f:3b:1c:93:fb:
75:23:5b:cd:40:25:b6:2c:8e:6f:31:b8:df:e3:94:
9d:d8:73:22:af:51:56:cf:4f:1b:a9:f8:e4:87:f1:
8a:96:a6:1e:21:43:fe:26:9f:35:d2:71:8a:50:d3:
bc:4c:04:f5:24:3c:d2:10:73:21:5b:8f:0a:0c:10:
40:d8:92:7f:65:4e:e6:aa:cc:fc:f1:0d:37:a1:c1:
3d:c2:ea:42:35:95:7d:68:26:ba:e0:7d:31:d2:59:
6c:64:6b:68:b0:41:07:0c:df:4c:a3:a7:37:bd:a5:
99:77:8f:bf:e0:a6:1e:48:0c:9d:cd:9f:c0:05:03:
cc:f6:b0:b3:df:75:83:d0:16:d4:1d:5b:79:b2:e9:
34:26:58:be:a4:b8:1f:99:c0:6b:a6:9b:7a:cd:d7:
40:b0:40:36:1b:5d:fe:2e:04:05:a2:1f:82:42:21:
fb:08:e9:6c:df:ed:b9:a0:e9:80:e6:70:46:99:cb:
28:01:76:e5:e7:5a:86:87:25:b2:9b:01:e7:47:d0:
ec:37:2a:4a:e0:5e:05:5f:34:a1:a8:84:b5:2e:b1:
38:c7:89:dd:b6:90:4f:a0:96:c1:75:70:d7:ab:2b:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:7C:C5:97:C6:25:59:D3:99:2E:DE:AB:68:CD:BF:06:BB:19:BF
X509v3 Authority Key Identifier:
keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:23:6b:4a:eb:b1:74:84:77:4d:6c:5e:f0:c5:88:18:5a:c5:
b9:e5:54:7a:e5:23:21:1d:4e:15:0d:dc:84:3a:92:00:36:db:
81:e4:ba:03:f5:ee:4b:b6:d9:02:1d:66:3a:4d:d4:5d:0a:79:
62:73:42:55:ab:46:ce:57:4c:22:8a:e2:9e:bb:7a:9e:17:a8:
6b:72:ba:eb:58:92:9b:43:b0:32:63:f2:80:63:94:5c:e0:80:
b8:8e:ea:91:44:8c:52:9d:d0:22:ad:7d:c2:ae:0f:62:4c:62:
bd:de:6b:88:59:f3:10:a5:6c:35:14:3b:eb:9f:52:ad:9d:a4:
b1:f0:c4:87:16:21:cf:10:f4:dd:f7:55:4f:13:d7:42:f5:16:
fe:46:6b:5c:3c:ba:9b:6c:9c:fb:3a:a9:1d:f8:7f:65:48:ca:
8e:99:13:9f:1c:c1:19:29:cc:20:0e:a1:f9:45:47:5c:8b:aa:
0a:9d:65:2a:20:d9:6d:69:40:7e:6c:8c:c6:86:67:f3:18:d8:
cd:82:9a:9a:36:f6:ad:66:84:24:69:04:2a:dd:6a:f4:f3:4d:
60:ea:9c:da:32:ca:5b:be:5b:58:5f:ec:23:e7:3d:49:34:8c:
1c:6d:49:85:a8:50:c7:74:03:5e:35:aa:02:81:fc:16:55:bb:
48:b9:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:12:56 2025 by rpki-client