This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3230312e37312e3230302e302f32322d3234203d3e20323730333031.roa
File: 3230312e37312e3230302e302f32322d3234203d3e20323730333031.roa (raw, json)
Hash identifier: bMaZFU6eTV4J8KyhJsYqEXDpoT4TyfYUZ/Sa0qHbE90=
Subject key identifier: 6C:74:9A:29:FE:24:DC:2E:31:39:68:16:8E:D2:4F:57:EF:C5:87:07
Certificate issuer: /CN=3EB8F32F868764375318F9AF4199127B28A8178E
Certificate serial: 24C14E68BECA917B229D9DEC59C9BF86E16B6BEF
Authority key identifier: 3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3230312e37312e3230302e302f32322d3234203d3e20323730333031.roa
Signing time: Mon 24 Nov 2025 12:34:26 +0000
ROA not before: Mon 24 Nov 2025 12:29:26 +0000
ROA not after: Mon 23 Nov 2026 12:34:26 +0000
asID: 270301
IP address blocks: 201.71.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl
rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 11:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c1:4e:68:be:ca:91:7b:22:9d:9d:ec:59:c9:bf:86:e1:6b:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EB8F32F868764375318F9AF4199127B28A8178E
Validity
Not Before: Nov 24 12:29:26 2025 GMT
Not After : Nov 23 12:34:26 2026 GMT
Subject: CN=6C749A29FE24DC2E313968168ED24F57EFC58707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:32:ab:98:4f:dd:6d:3c:5c:78:d7:25:41:
1f:de:bc:d5:f0:ec:15:47:65:bc:ea:09:ab:23:a6:
58:fb:40:e5:0b:a2:f8:fa:8e:aa:fc:7e:c0:90:77:
b5:70:07:2d:c1:63:df:02:bb:e9:2c:85:3a:83:04:
2b:7b:52:d4:06:fd:3c:ba:0f:54:07:53:17:68:d0:
48:58:4b:ce:31:c8:ab:7e:6d:60:cd:42:97:99:aa:
78:a1:31:8b:50:5c:9e:cd:1e:46:bd:73:5e:cb:b4:
03:00:94:38:e7:61:6f:ab:0e:f7:97:c9:10:f7:8a:
bc:2f:fe:67:b6:0c:de:0d:27:95:6f:b2:f4:b7:c2:
d2:93:f2:fc:7b:8a:33:12:27:89:4f:93:8a:65:07:
07:ab:71:5d:f6:4a:0f:75:88:db:92:9d:c2:2c:df:
e4:6b:2c:c4:47:e1:8c:83:2d:28:f5:0d:28:39:b2:
87:9c:3a:bb:9f:69:99:a4:cb:08:cd:45:95:29:c1:
0c:51:96:50:44:e1:bf:2f:45:86:0c:49:aa:47:15:
93:e6:61:ed:03:f9:dc:26:2f:49:36:b8:50:99:14:
66:65:35:b7:ec:3f:74:f9:58:ed:4b:e9:c8:5e:af:
40:73:29:f7:dd:67:9f:98:4e:9a:57:af:f6:12:1a:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:9A:29:FE:24:DC:2E:31:39:68:16:8E:D2:4F:57:EF:C5:87:07
X509v3 Authority Key Identifier:
keyid:3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3230312e37312e3230302e302f32322d3234203d3e20323730333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.71.200.0/22
Signature Algorithm: sha256WithRSAEncryption
38:74:83:2e:07:72:dd:da:ed:8e:0f:33:48:f0:9b:68:a8:d4:
d4:b5:c9:7a:50:3e:14:12:ab:66:d6:8a:bb:92:79:a3:d1:7d:
c3:74:0f:ad:8a:c2:82:3d:26:0c:d6:32:1e:48:75:b1:8b:02:
74:94:4b:2d:d5:e9:2e:a8:5b:eb:d3:2b:2f:ec:03:d6:a2:59:
42:45:23:96:ed:73:3a:4a:51:2b:cc:48:83:66:90:65:48:b8:
78:d3:e8:54:42:a2:ba:f9:4d:6c:77:bb:7a:bf:0b:3e:49:d4:
7f:f5:f9:38:f1:77:3e:f1:fd:0f:89:43:95:bc:e8:cf:1a:e6:
5c:5d:95:26:ab:8d:a2:58:f1:22:0c:36:74:ef:a8:bc:35:95:
92:a9:77:0f:a6:b7:1a:0c:79:2d:fa:17:d9:9b:fd:b5:26:77:
b4:6d:6e:2e:ae:75:ea:7c:2c:f7:a5:d9:ea:60:29:5d:34:5b:
16:3b:69:ed:d7:e9:f6:89:43:37:f7:47:32:21:7c:c7:c8:5b:
13:fd:c8:b4:5e:ba:51:77:1c:af:11:f2:98:fd:4e:b3:9d:eb:
f6:7f:c0:fd:3f:3a:a2:02:07:4d:5d:26:37:fe:55:f5:d0:eb:
3b:c6:5b:e2:dd:3f:b0:7d:ba:4b:40:9d:a5:67:7b:b0:02:c2:
69:ee:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:27 2025 by rpki-client