This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e39342e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: CtXH+rR9imnnobAj/YCjrEQN+33Swe5Xl3Ezsf4GujU=
Subject key identifier: FB:58:A3:90:C8:A8:50:2A:2A:15:30:E3:3E:60:F5:4E:31:00:E0:D3
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 7510EFE6A399958748BC4569129BEB4E726C29CB
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32342d3234203d3e203232373036.roa
Signing time: Fri 21 Nov 2025 13:26:33 +0000
ROA not before: Fri 21 Nov 2025 13:21:33 +0000
ROA not after: Fri 20 Nov 2026 13:26:33 +0000
asID: 22706
IP address blocks: 200.152.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 22:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:10:ef:e6:a3:99:95:87:48:bc:45:69:12:9b:eb:4e:72:6c:29:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Nov 21 13:21:33 2025 GMT
Not After : Nov 20 13:26:33 2026 GMT
Subject: CN=FB58A390C8A8502A2A1530E33E60F54E3100E0D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:54:91:ec:5a:ae:63:15:d6:27:aa:8f:37:
d9:6d:5b:29:bc:80:7f:4d:4b:e6:a7:19:01:f5:cc:
99:69:36:29:71:6f:4a:f5:d9:75:dc:f7:42:1a:36:
4c:9b:5e:73:cd:d7:15:93:fa:74:5d:f8:3d:02:1e:
c5:0c:7b:08:91:24:51:b6:31:4c:99:60:cc:34:ef:
a8:f0:61:99:32:38:86:f7:0f:77:a4:37:63:dc:4c:
2b:55:0d:54:9a:92:5a:34:48:7f:6a:ed:bd:52:5f:
97:0c:1f:88:e9:c2:61:bc:ba:97:c7:fb:6a:39:45:
f3:6e:29:29:7d:3b:ad:d9:a0:de:ea:be:fa:32:fe:
86:6f:3a:8b:81:99:8c:7e:c2:e8:f0:98:0c:31:58:
41:1d:86:b1:4f:e3:56:66:5c:e1:f9:20:d9:75:22:
33:59:ed:da:af:f2:a2:91:43:9a:77:20:b7:57:e6:
a3:69:ae:c1:47:1d:ad:12:4d:38:d9:e7:af:05:d1:
4c:fc:f2:f9:93:ba:f8:9f:bb:ce:2a:64:68:3d:dc:
d8:ba:64:f7:97:4f:32:82:6c:53:c6:15:6b:48:0b:
6a:62:0e:ec:e0:6a:53:b6:83:5c:e5:9b:6c:d1:f2:
7a:1c:1a:cd:dc:49:08:d9:27:db:42:77:a0:5e:f0:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:58:A3:90:C8:A8:50:2A:2A:15:30:E3:3E:60:F5:4E:31:00:E0:D3
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:26:97:a1:75:c5:7c:72:77:06:5b:4f:f1:fb:08:85:ee:57:
ef:4c:a9:4c:a9:e7:3c:2f:40:90:1c:88:e2:53:37:08:85:4d:
9b:0d:85:a9:31:76:3a:21:0a:03:f0:e7:10:12:c4:85:6e:01:
8a:a0:50:ba:d6:c2:ba:4a:9e:5d:2d:35:95:f3:0b:98:d7:6a:
9b:5c:2a:82:34:2d:71:c5:f6:19:ee:24:12:fe:d0:c9:61:e6:
de:66:35:bc:d9:e7:8e:b4:9d:c3:13:87:de:0e:49:1f:64:c0:
80:5f:d9:b7:ce:2a:27:1d:96:d1:01:af:51:90:ff:35:55:7c:
65:43:d2:83:e4:da:b5:67:a8:bb:9e:27:87:42:ef:11:14:e8:
2e:2b:77:84:5b:e0:da:86:28:5b:de:29:3f:6f:ff:d5:f8:44:
7f:a9:75:0c:9f:d9:48:bb:e8:62:ad:91:84:92:a2:d9:b8:9a:
8d:9d:25:81:f8:57:a0:d4:d2:78:40:79:e0:e8:34:f6:b5:2e:
73:60:57:da:6f:bf:d7:53:c7:51:14:52:00:f1:e7:65:33:47:
bd:de:ef:36:78:0f:cb:49:56:24:44:18:70:c9:99:78:89:d2:
b9:c3:9b:bf:89:32:06:a4:a8:64:de:1a:c0:e8:cb:2a:48:4b:
87:e6:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:52 2025 by rpki-client