This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e38362e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: mO0RviNqZopzod+pkwH0/fNe53pWll56IHYlBUHAUMQ=
Subject key identifier: FB:5F:AD:CA:EA:6F:3C:7C:B5:95:FE:D7:C5:BC:30:45:23:F5:C6:CF
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 6B853161884E7511603F9766FCE4F8E0B1DEA211
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32342d3234203d3e203232373036.roa
Signing time: Fri 21 Nov 2025 13:26:45 +0000
ROA not before: Fri 21 Nov 2025 13:21:45 +0000
ROA not after: Fri 20 Nov 2026 13:26:45 +0000
asID: 22706
IP address blocks: 200.152.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 22:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:85:31:61:88:4e:75:11:60:3f:97:66:fc:e4:f8:e0:b1:de:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Nov 21 13:21:45 2025 GMT
Not After : Nov 20 13:26:45 2026 GMT
Subject: CN=FB5FADCAEA6F3C7CB595FED7C5BC304523F5C6CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:a2:10:5f:57:59:b2:2f:b0:ee:5c:67:d8:
91:45:46:26:8f:0f:21:37:50:b6:a5:1a:4a:3e:fd:
2e:a6:6f:45:80:fd:78:ce:e5:39:a9:dd:67:d8:71:
a6:b7:44:4d:7d:30:aa:04:c3:77:ec:07:98:ff:b4:
71:c8:3f:05:c1:b4:19:a1:41:66:0b:07:8d:aa:12:
07:70:f7:5d:d0:00:fe:1d:3d:18:72:48:8f:0c:40:
2c:32:71:8c:2b:e6:da:3f:d1:15:15:d5:68:4e:48:
a9:b6:94:47:02:4d:de:59:ae:2b:31:ff:49:bb:f2:
4b:64:ec:aa:70:fa:21:19:7e:12:75:57:6d:7c:e5:
38:01:d9:a4:2c:8e:f6:15:ee:a7:1f:60:af:7f:b4:
4e:89:e9:02:b4:1c:1a:34:ad:f0:32:7b:00:fa:80:
a0:1e:3a:10:05:85:55:4a:5c:73:5c:0b:ef:3e:5d:
fc:f3:8f:6d:03:25:35:51:08:e2:84:de:d9:2d:df:
aa:e3:2d:ca:f2:40:a8:5d:86:7f:f9:b7:9b:e1:43:
3d:a8:7b:e8:ff:d7:51:87:79:2d:33:39:27:3d:9d:
59:3c:8a:23:23:e3:81:49:75:5d:8d:54:ec:b4:e2:
fe:40:e3:cf:9d:c1:12:7d:ee:3f:fd:d4:ad:d7:f8:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:AD:CA:EA:6F:3C:7C:B5:95:FE:D7:C5:BC:30:45:23:F5:C6:CF
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.86.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ca:53:43:30:a6:63:62:81:64:f3:e1:4c:8c:e9:33:45:59:
71:f8:12:d6:d1:ac:84:5c:45:0f:89:e1:0f:83:56:4b:47:4c:
9a:f7:69:b1:21:33:34:12:12:56:63:73:69:12:67:bc:e5:d9:
48:b0:34:f3:69:4b:5f:0b:9a:21:3c:9d:b3:28:85:25:99:19:
0c:8f:53:c9:59:8f:48:63:cc:f9:48:ee:80:3b:ef:65:bb:d7:
d8:3b:38:5f:65:bc:3f:cc:fb:4d:64:20:40:2c:93:9c:d5:1f:
cc:5e:98:0a:7d:1f:d8:d6:22:a4:c7:5b:1c:b9:cf:2d:f2:e2:
e6:16:e3:f0:be:9e:b8:3f:26:86:f4:2d:60:95:26:d4:80:43:
98:e6:77:15:6d:6d:9a:dd:8d:89:5b:07:78:ec:c7:d0:e1:ac:
10:2b:70:90:bb:58:59:78:4a:42:76:46:a3:f6:a5:e8:e2:24:
d9:c0:d9:76:8b:e6:fa:c8:2e:7c:02:6f:9f:39:05:35:9f:27:
9d:80:a8:78:a9:0b:e0:40:fe:f4:62:01:cf:11:c2:fa:26:16:
44:27:a3:3c:eb:cc:d0:3c:c3:ab:b7:0b:35:cd:db:22:55:6a:
4b:32:bd:28:34:85:0d:16:db:a4:35:7d:2c:a5:87:36:da:92:
3e:eb:87:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:24 2025 by rpki-client