This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa
File: 3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa (raw, json)
Hash identifier: XYXO66+/FC6DhpopgyT7KLulPFSEefrf0eprB6F/v7k=
Subject key identifier: FB:B8:6B:0C:B9:71:CB:F2:FD:DF:38:5B:05:89:0E:A6:28:D6:98:17
Certificate issuer: /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial: 40D40765392E9984E7AEF5A2B84ECC2D3EEC7CAB
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa
Signing time: Mon 08 Dec 2025 19:26:26 +0000
ROA not before: Mon 08 Dec 2025 19:21:26 +0000
ROA not after: Mon 07 Dec 2026 19:26:26 +0000
asID: 271019
IP address blocks: 200.52.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 17 Dec 2025 19:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d4:07:65:39:2e:99:84:e7:ae:f5:a2:b8:4e:cc:2d:3e:ec:7c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Validity
Not Before: Dec 8 19:21:26 2025 GMT
Not After : Dec 7 19:26:26 2026 GMT
Subject: CN=FBB86B0CB971CBF2FDDF385B05890EA628D69817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:33:b0:1e:c7:14:89:50:78:b3:f4:bf:1b:
4c:16:9e:7b:9a:1a:b4:76:fb:f0:de:d6:74:50:f0:
6e:f7:b6:b1:7f:37:4e:54:fc:5d:68:24:27:58:1f:
b5:94:8a:81:bd:3b:cf:62:f7:8b:f2:83:db:73:c3:
30:60:41:2d:bd:ac:89:bc:b0:61:77:bb:77:71:94:
29:fd:b0:52:06:65:f0:5a:9d:2e:6b:b7:5a:40:24:
a0:67:25:56:6b:22:be:e3:f8:2f:7e:8b:d3:76:b9:
ea:3c:11:b4:8c:da:91:49:d4:06:f4:da:45:88:5c:
31:10:eb:71:dd:fc:8d:ec:6c:23:bc:cd:e7:e3:38:
1c:71:ad:ce:bb:42:f5:5d:db:cb:e6:06:8d:f9:15:
78:95:4e:85:f6:89:49:52:8a:52:0c:aa:f5:26:13:
fa:37:4e:eb:e2:92:0e:47:83:b7:82:18:15:30:33:
9d:88:08:5c:8a:95:02:4d:58:8f:88:f2:1c:ca:e3:
4f:f2:d8:b5:64:d8:93:0c:fa:c5:1f:25:7f:0a:81:
b2:1f:51:25:f8:12:27:8d:58:cd:23:d2:f0:a7:1b:
2e:30:8c:75:97:07:89:b5:f0:6e:12:08:e6:a1:35:
78:57:e2:6a:59:48:59:26:0b:8b:90:68:b2:29:f3:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B8:6B:0C:B9:71:CB:F2:FD:DF:38:5B:05:89:0E:A6:28:D6:98:17
X509v3 Authority Key Identifier:
keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.52.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:30:64:80:65:7a:a0:03:0f:72:cd:24:a2:33:aa:c0:1b:1e:
37:76:67:c2:56:3b:13:a4:78:64:3a:1a:ff:83:06:50:07:7a:
90:f0:b0:e0:56:a7:b0:c3:28:49:51:20:dd:01:55:87:19:23:
62:1a:a6:a1:81:3c:67:f2:83:bc:52:b2:64:e1:72:6c:53:25:
2e:32:08:44:98:0a:9f:03:c1:97:e9:d0:a4:9b:9d:04:ec:37:
f4:37:96:c0:57:95:32:bd:3c:62:e0:d3:8c:56:3a:e0:48:60:
23:78:48:8a:7d:6b:8e:70:c0:06:35:c4:6f:0e:fd:15:f6:e1:
d2:2f:1e:ff:0c:40:cc:48:a5:fb:bc:54:b6:b6:11:b9:07:f7:
c7:8c:57:04:e7:5e:a4:93:23:21:1c:16:29:41:ac:b4:64:c2:
a4:5f:a2:a2:0e:81:5f:7b:0e:b5:b9:77:ba:42:2a:bd:c1:a6:
02:ff:04:50:c2:0c:45:de:15:7f:ed:7f:10:fa:b7:0e:79:01:
43:d7:79:62:8f:66:94:c8:bc:a4:66:9f:6e:13:70:1f:dc:95:
cd:1f:b2:1c:46:ea:53:f5:14:18:69:3a:ca:1a:86:74:79:26:
ec:dc:25:41:cc:26:62:47:64:6c:00:f4:8e:f9:39:44:e1:dc:
25:4a:3c:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQNQHZTkumYTnrvWiuE7MLT7sfKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3
MURCQUFCNTAeFw0yNTEyMDgxOTIxMjZaFw0yNjEyMDcxOTI2MjZaMDMxMTAvBgNV
BAMTKEZCQjg2QjBDQjk3MUNCRjJGRERGMzg1QjA1ODkwRUE2MjhENjk4MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmzOwHscUiVB4s/S/G0wWnnua
GrR2+/De1nRQ8G73trF/N05U/F1oJCdYH7WUioG9O89i94vyg9tzwzBgQS29rIm8
sGF3u3dxlCn9sFIGZfBanS5rt1pAJKBnJVZrIr7j+C9+i9N2ueo8EbSM2pFJ1Ab0
2kWIXDEQ63Hd/I3sbCO8zefjOBxxrc67QvVd28vmBo35FXiVToX2iUlSilIMqvUm
E/o3Tuvikg5Hg7eCGBUwM52ICFyKlQJNWI+I8hzK40/y2LVk2JMM+sUfJX8KgbIf
USX4EieNWM0j0vCnGy4wjHWXB4m18G4SCOahNXhX4mpZSFkmC4uQaLIp8+DXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+7hrDLlxy/L93zhbBYkOpijWmBcwHwYDVR0j
BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di
WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF
MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NURXRhOU1BY0xNUVlKQ1RSYmIzODJMd1FxVW41N2lvQ3RvVHB5cXdHYlo1LzAv
MzIzMDMwMmUzNTMyMmUzMjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADINOswDQYJKoZIhvcNAQELBQADggEBAJowZIBl
eqADD3LNJKIzqsAbHjd2Z8JWOxOkeGQ6Gv+DBlAHepDwsOBWp7DDKElRIN0BVYcZ
I2IapqGBPGfyg7xSsmThcmxTJS4yCESYCp8DwZfp0KSbnQTsN/Q3lsBXlTK9PGLg
04xWOuBIYCN4SIp9a45wwAY1xG8O/RX24dIvHv8MQMxIpfu8VLa2EbkH98eMVwTn
XqSTIyEcFilBrLRkwqRfoqIOgV97DrW5d7pCKr3BpgL/BFDCDEXeFX/tfxD6tw55
AUPXeWKPZpTIvKRmn24TcB/clc0fshxG6lP1FBhpOsoahnR5JuzcJUHMJmJHZGwA
9I75OUTh3CVKPHU=
-----END CERTIFICATE-----
Generated at Tue Dec 16 22:14:13 2025 by rpki-client