This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa
File: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (raw, json)
Hash identifier: jBLip1vbaVOEdwMz5FRM8uDhQKguMwT34WljHdiIAdI=
Subject key identifier: 41:E6:6C:79:4D:51:01:6F:AF:42:09:57:81:79:B7:25:5D:96:58:D8
Certificate issuer: /CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Certificate serial: 1ECA1490A62D7AA0C182935F040C9187E97A20E0
Authority key identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa
Signing time: Thu 06 Nov 2025 12:51:10 +0000
ROA not before: Thu 06 Nov 2025 12:46:10 +0000
ROA not after: Thu 05 Nov 2026 12:51:10 +0000
asID: 271428
IP address blocks: 200.36.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ca:14:90:a6:2d:7a:a0:c1:82:93:5f:04:0c:91:87:e9:7a:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Validity
Not Before: Nov 6 12:46:10 2025 GMT
Not After : Nov 5 12:51:10 2026 GMT
Subject: CN=41E66C794D51016FAF4209578179B7255D9658D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:c4:7d:2d:a2:bb:be:1d:34:5d:aa:bc:5f:
4d:5d:75:8f:55:13:c9:71:1a:6d:fb:84:82:b3:d2:
eb:de:8e:99:fd:f5:63:03:5b:a7:7a:7c:ff:39:bc:
f6:c9:64:d7:23:17:19:b6:a1:ee:ef:7a:0a:7b:b7:
be:25:ac:64:fe:8b:a4:b2:5d:ef:53:09:36:10:fa:
e8:a6:0c:58:2d:81:37:a9:c3:ff:18:9b:5f:80:05:
8c:a6:ea:b2:96:a2:84:5e:97:19:9f:f2:e9:3e:69:
87:ca:f2:87:f0:2d:1d:40:26:a9:a7:bd:26:6a:12:
c3:78:e6:86:8e:e4:07:78:82:0c:38:bb:3e:0a:6c:
63:0f:26:39:b5:95:30:ee:44:e8:e2:c1:7f:46:4b:
20:b0:f9:70:32:c1:98:2a:f4:ec:ef:f3:98:2e:d8:
d9:d7:11:b0:b6:ec:fd:f0:63:c7:eb:94:1f:44:55:
56:8b:96:7f:37:03:10:13:4e:c9:e2:d9:f9:4b:5d:
9f:02:20:b5:86:55:0b:8d:6e:19:73:11:a6:6a:52:
67:33:ff:7a:a6:2c:fa:5d:e7:9b:25:fd:a4:4e:47:
43:58:db:e4:27:5b:c1:63:f8:1a:97:f5:6c:87:39:
7f:46:a7:71:63:a7:a7:8b:4c:fd:81:55:84:59:26:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:6C:79:4D:51:01:6F:AF:42:09:57:81:79:B7:25:5D:96:58:D8
X509v3 Authority Key Identifier:
keyid:D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ad:4b:f9:94:5c:51:fb:dd:f7:7c:11:f5:e7:17:d0:0a:65:
c5:3b:73:bc:9c:6d:7b:e7:1b:f6:19:c0:cb:86:c8:3c:0b:4d:
84:bc:cf:ca:b5:73:ee:11:e2:c3:5c:7e:a7:28:ac:48:2f:f3:
56:a5:3c:f2:3f:7e:86:71:5e:83:0d:93:90:08:2d:b5:56:30:
41:a3:69:11:fb:29:f2:87:bf:1b:fe:9c:94:a6:dc:c6:4a:e6:
f8:1b:73:8f:2c:40:b4:6e:62:28:89:38:66:92:2d:7e:75:c0:
76:fd:d1:18:6b:53:53:da:00:3d:7f:58:78:3c:01:33:25:56:
16:56:bd:a0:f1:b3:c4:00:79:39:41:d5:da:b4:d4:68:ed:03:
b4:b6:6e:4e:80:a8:6b:04:83:2c:00:bb:1b:6c:47:02:ef:9e:
15:34:f1:db:f4:c1:99:53:e6:39:36:99:c0:0f:0b:9f:de:0a:
09:00:36:d9:6e:56:0c:6a:9a:29:f0:77:5e:75:7a:d6:84:73:
d9:68:75:0d:1e:c8:d4:d3:a3:e7:b0:87:cf:8c:bf:a3:ce:d3:
ee:3f:6a:6c:2f:b4:b0:7c:aa:9d:c7:c4:fc:6c:a6:7c:a5:ea:
a6:41:06:6b:fe:8d:fd:28:58:39:5e:0e:6c:30:02:0f:e8:db:
48:23:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:44 2025 by rpki-client