This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa
File: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (raw, json)
Hash identifier: PQsgNSsgskPeLZQGXPAMXVYKEdP2IuUyHYAUcQCjM68=
Subject key identifier: 72:B7:1D:82:6C:CE:1B:8D:30:A5:46:A9:C8:E8:82:CB:21:7E:3C:3E
Certificate issuer: /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial: 3E41B324FE9F474D0FF02241C1B8EBEB2D4117D0
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa
Signing time: Fri 28 Nov 2025 13:35:11 +0000
ROA not before: Fri 28 Nov 2025 13:30:11 +0000
ROA not after: Fri 27 Nov 2026 13:35:11 +0000
asID: 266446
IP address blocks: 200.80.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 01:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:41:b3:24:fe:9f:47:4d:0f:f0:22:41:c1:b8:eb:eb:2d:41:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Validity
Not Before: Nov 28 13:30:11 2025 GMT
Not After : Nov 27 13:35:11 2026 GMT
Subject: CN=72B71D826CCE1B8D30A546A9C8E882CB217E3C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6d:65:ed:dc:6e:73:4e:15:9a:09:98:b5:75:
9b:96:03:42:3f:a9:8d:ab:73:a5:be:22:3b:48:0a:
13:07:62:b2:4e:b8:c9:07:79:cb:0d:ce:f8:8c:a3:
9d:97:4b:71:d5:6b:e2:b4:b3:8b:f6:a7:8d:52:c7:
bd:dc:3a:5e:07:0c:8d:e8:62:a3:99:14:59:16:d6:
e1:99:2f:30:2f:25:12:e8:14:52:39:df:ab:b1:22:
d3:53:b5:ea:5d:d6:6b:77:6e:cd:68:14:3e:7b:1f:
a0:67:f4:d5:19:8d:24:a8:60:6c:d9:ad:cd:15:66:
35:9c:48:b2:15:5c:fe:87:9d:04:6d:2d:53:6c:c1:
f7:ff:89:bb:d5:52:d7:12:a5:1a:e0:fc:ec:77:60:
91:fb:80:ec:f5:05:f1:3c:bb:7e:dc:32:ac:a0:9d:
23:cc:4c:1d:7b:24:4c:84:94:7c:b8:36:a5:a5:04:
f4:97:a4:d1:23:cd:fd:eb:ac:9f:a0:37:f0:3c:88:
94:c0:94:35:ed:b2:cd:ab:8f:34:2f:6f:5c:84:e3:
c4:40:8e:06:ee:0f:73:8b:e7:61:f8:c0:49:22:a0:
f9:ff:49:82:15:18:f2:24:e4:30:8c:fd:92:5d:11:
39:76:9d:f3:5a:bb:66:b2:33:d0:8a:e4:1c:c6:d3:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B7:1D:82:6C:CE:1B:8D:30:A5:46:A9:C8:E8:82:CB:21:7E:3C:3E
X509v3 Authority Key Identifier:
keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.80.111.0/24
Signature Algorithm: sha256WithRSAEncryption
58:73:30:30:a7:ef:0b:b1:9e:95:9e:34:71:11:a1:f0:cf:ca:
fe:9c:f2:92:18:e3:60:8d:03:50:c6:41:59:50:f2:c6:0d:79:
f8:d1:f2:b4:71:de:af:31:e7:6b:97:b3:16:b0:8d:f3:8f:8a:
e3:5e:14:a7:81:53:34:64:82:4e:2f:6e:bb:f2:59:64:a9:da:
59:f8:fa:37:53:b7:3b:bd:67:97:89:a8:dc:f7:21:2f:bf:60:
17:ae:9f:d4:89:c5:1f:1a:98:0a:79:85:d8:0b:71:9e:4c:20:
47:97:d8:e9:80:75:c1:5b:f3:4d:8c:5b:81:b8:be:e1:65:ab:
01:ad:35:0b:f0:a3:33:2d:1d:76:98:d5:52:46:5c:98:6c:4d:
79:eb:d6:30:c7:15:d6:d9:fb:c1:67:11:3e:5a:76:be:88:e3:
07:98:aa:f7:8f:98:f0:f4:37:ab:0a:bc:8f:d7:2b:a6:29:70:
b0:96:81:cc:78:07:98:bc:a3:32:8d:5e:d0:2c:cc:a4:11:d0:
88:44:30:54:8b:88:92:cf:b0:bb:26:f3:d9:64:db:a4:75:d3:
8b:7e:8f:2a:e7:44:47:05:d4:d8:ed:e1:0d:a7:4f:14:35:af:
0e:56:16:e2:85:65:56:41:fd:b1:03:95:b8:5d:51:cc:be:dd:
3c:7e:85:33
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPkGzJP6fR00P8CJBwbjr6y1BF9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBRjRBMDExNDcwNUU3OTMwNDBERjIwQjNFODc5RTU5
NzRDN0M4RDAeFw0yNTExMjgxMzMwMTFaFw0yNjExMjcxMzM1MTFaMDMxMTAvBgNV
BAMTKDcyQjcxRDgyNkNDRTFCOEQzMEE1NDZBOUM4RTg4MkNCMjE3RTNDM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtbWXt3G5zThWaCZi1dZuWA0I/
qY2rc6W+IjtIChMHYrJOuMkHecsNzviMo52XS3HVa+K0s4v2p41Sx73cOl4HDI3o
YqOZFFkW1uGZLzAvJRLoFFI536uxItNTtepd1mt3bs1oFD57H6Bn9NUZjSSoYGzZ
rc0VZjWcSLIVXP6HnQRtLVNswff/ibvVUtcSpRrg/Ox3YJH7gOz1BfE8u37cMqyg
nSPMTB17JEyElHy4NqWlBPSXpNEjzf3rrJ+gN/A8iJTAlDXtss2rjzQvb1yE48RA
jgbuD3OL52H4wEkioPn/SYIVGPIk5DCM/ZJdETl2nfNau2ayM9CK5BzG0wtJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcrcdgmzOG40wpUapyOiCyyF+PD4wHwYDVR0j
BBgwFoAU+q9KARRwXnkwQN8gs+h55ZdMfI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4
d2EvMC9GQUFGNEEwMTE0NzA1RTc5MzA0MERGMjBCM0U4NzlFNTk3NEM3QzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQUY0QTAxMTQ3MDVFNzkz
MDQwREYyMEIzRTg3OUU1OTc0QzdDOEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzUXRwNXFiOGZyTlhFNG9HNVhmY1FzSlJTTnJZYlVCYVVUN1Jka3NUOHdhLzAv
MzIzMDMwMmUzODMwMmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIUG8wDQYJKoZIhvcNAQELBQADggEBAFhzMDCn
7wuxnpWeNHERofDPyv6c8pIY42CNA1DGQVlQ8sYNefjR8rRx3q8x52uXsxawjfOP
iuNeFKeBUzRkgk4vbrvyWWSp2ln4+jdTtzu9Z5eJqNz3IS+/YBeun9SJxR8amAp5
hdgLcZ5MIEeX2OmAdcFb802MW4G4vuFlqwGtNQvwozMtHXaY1VJGXJhsTXnr1jDH
FdbZ+8FnET5adr6I4weYqvePmPD0N6sKvI/XK6YpcLCWgcx4B5i8ozKNXtAszKQR
0IhEMFSLiJLPsLsm89lk26R104t+jyrnREcF1Njt4Q2nTxQ1rw5WFuKFZVZB/bED
lbhdUcy+3Tx+hTM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:57:11 2025 by rpki-client