This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e38342e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: rd2YX5Bkgna/HJ4B5oiyXaav8mDNF0GG+r6uwaLLfPI=
Subject key identifier: C9:8E:92:63:0F:28:D2:ED:B5:3D:D0:B4:B4:E6:05:EE:65:46:00:5B
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 3BD675290E1CA404E0E319B119729FDBF081A381
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa
Signing time: Fri 21 Nov 2025 13:26:46 +0000
ROA not before: Fri 21 Nov 2025 13:21:46 +0000
ROA not after: Fri 20 Nov 2026 13:26:46 +0000
asID: 22706
IP address blocks: 200.152.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 22:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d6:75:29:0e:1c:a4:04:e0:e3:19:b1:19:72:9f:db:f0:81:a3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Nov 21 13:21:46 2025 GMT
Not After : Nov 20 13:26:46 2026 GMT
Subject: CN=C98E92630F28D2EDB53DD0B4B4E605EE6546005B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:5d:51:72:e9:7a:b8:22:f4:ee:be:1d:e8:
45:77:10:91:58:a2:c4:c1:df:f2:5e:dc:94:94:1e:
74:3f:d6:0a:9e:5e:5f:66:ea:9c:e4:57:b8:c0:10:
4c:dd:1e:f3:55:5c:cf:d1:6f:0f:a7:da:db:5b:80:
1d:66:11:8f:1c:48:24:3f:d5:c3:f0:2d:77:27:5a:
9a:84:e4:2d:c5:51:0e:be:7e:e6:8e:60:6d:8e:2d:
4c:5b:3d:0d:38:41:85:89:ed:40:4b:46:92:96:80:
72:02:64:0f:7a:a9:29:3e:37:8c:42:81:58:4a:23:
af:ae:e9:aa:67:91:a2:8d:ef:92:43:67:12:8c:10:
0d:47:6b:48:de:e7:47:d0:1a:72:41:aa:4e:d8:10:
64:87:85:16:b2:3d:dd:84:a0:da:18:55:97:4b:80:
54:38:64:2c:9b:c4:56:d4:d3:7e:39:8a:86:16:2b:
52:9b:fa:35:0f:ee:9d:b8:41:dd:83:b3:81:6f:11:
63:59:9d:d7:e3:5e:0e:e8:26:d0:cd:05:b3:0a:29:
d8:5c:92:87:b3:1f:84:74:e6:83:61:49:f1:6b:d3:
00:82:65:59:e9:0b:13:1c:ce:8f:86:5b:80:e2:7d:
3e:59:e2:35:59:03:dd:f7:35:9b:b7:df:d5:41:38:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8E:92:63:0F:28:D2:ED:B5:3D:D0:B4:B4:E6:05:EE:65:46:00:5B
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.84.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:22:50:50:48:4c:b1:5d:d4:24:c2:90:27:e6:83:ad:2a:5f:
40:b6:af:32:7f:9c:3b:dd:b1:d2:57:ce:35:36:7d:d6:9d:11:
18:19:53:1f:91:8d:c4:e4:c7:05:a7:64:b6:fa:00:ef:b2:5a:
3f:20:14:58:68:92:06:b3:c9:11:ce:44:28:2b:a8:3a:c4:c5:
59:90:f1:ca:9b:6e:ee:39:cb:29:28:c4:f6:a2:7a:6a:e3:75:
40:18:99:01:e9:1f:56:1d:49:1d:85:cd:96:b6:3c:fc:d3:f7:
85:f6:a2:33:68:24:e0:58:39:81:62:a7:2b:cb:aa:82:71:61:
87:99:7c:6b:42:58:dc:d3:e6:03:2b:45:34:22:8a:ff:5b:f4:
6d:c6:2c:b4:7c:18:c2:43:65:63:7d:70:ac:b4:9b:f5:ef:e9:
8f:af:7c:d9:97:36:9e:52:ff:be:62:3a:c0:de:bf:93:08:c0:
36:76:8c:43:d0:0a:da:58:0a:39:27:25:04:27:a7:70:66:09:
ff:82:3d:f6:57:49:7d:85:9a:6f:d2:8c:f6:3f:84:96:5b:10:
dd:0f:2a:7e:3d:95:4b:c1:34:12:9e:f5:97:c1:15:34:5e:fb:
da:a7:da:d3:22:66:06:21:ef:5d:6e:d2:23:4d:7c:8c:85:e6:
df:a0:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:42 2025 by rpki-client