This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e302e302f32312d3231203d3e203238353934.roa
File: 3230312e33332e302e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier: 4aFcdL9n68+a2jaxUGpCf/dKTrwIyXeLgc4HQLkW2wo=
Subject key identifier: 51:89:53:E0:7F:75:1D:C2:20:C7:02:12:D7:E7:E4:83:A1:07:21:F4
Certificate issuer: /CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6
Certificate serial: 0DC5F9C70D6F58AD76792CEDA00EA73DB07027A7
Authority key identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e302e302f32312d3231203d3e203238353934.roa
Signing time: Mon 20 Oct 2025 19:27:04 +0000
ROA not before: Mon 20 Oct 2025 19:22:04 +0000
ROA not after: Mon 19 Oct 2026 19:27:04 +0000
asID: 28594
IP address blocks: 201.33.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl
rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c5:f9:c7:0d:6f:58:ad:76:79:2c:ed:a0:0e:a7:3d:b0:70:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6
Validity
Not Before: Oct 20 19:22:04 2025 GMT
Not After : Oct 19 19:27:04 2026 GMT
Subject: CN=518953E07F751DC220C70212D7E7E483A10721F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:b3:3f:a0:a9:80:71:d0:20:1f:e7:01:18:
d1:78:af:a7:85:22:74:ca:d8:22:61:f4:3d:95:94:
80:3a:84:64:3f:aa:9f:62:8a:3e:69:6b:a9:39:eb:
29:6e:31:d7:66:22:c6:80:0a:48:85:1e:f9:d3:88:
77:c6:10:d7:a6:15:6c:bd:85:81:6b:44:41:4b:fb:
b5:53:cd:62:0c:43:be:e1:5b:94:6e:56:87:74:16:
18:7c:3f:bb:9e:2f:11:61:1d:b7:dc:bd:ae:11:c5:
d9:cf:8b:0c:ac:b9:2d:04:34:61:7d:92:0f:c0:0e:
9a:9f:fd:6c:25:86:f0:06:98:f4:61:46:36:08:bd:
5c:37:5f:63:24:20:b4:d4:5f:58:72:80:c2:3a:0e:
11:97:db:dc:b9:42:6f:c5:8b:a5:90:d1:a5:29:70:
3a:46:ed:03:eb:f3:2a:f0:e3:9c:ed:e5:4c:25:90:
70:cc:44:12:5a:13:29:1e:24:a7:ec:0d:7d:16:45:
41:07:93:c6:f8:ed:de:a3:dd:ac:23:9d:b6:cc:e4:
7e:66:1f:6f:88:51:0c:0a:13:12:ff:10:89:67:b9:
fd:d8:12:a3:55:fe:3d:60:98:99:f3:a8:af:db:3c:
d4:2d:cd:1c:27:36:c9:80:e1:a3:40:16:36:91:a9:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:53:E0:7F:75:1D:C2:20:C7:02:12:D7:E7:E4:83:A1:07:21:F4
X509v3 Authority Key Identifier:
keyid:5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e302e302f32312d3231203d3e203238353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.33.0.0/21
Signature Algorithm: sha256WithRSAEncryption
04:5b:c4:7b:4b:e6:68:37:a1:e8:38:dc:90:f4:2d:c3:f2:5c:
5d:69:18:1a:8c:73:ee:0e:36:27:68:01:65:df:31:30:ab:fd:
ce:b4:1c:10:95:b4:ac:f0:e8:de:6d:50:41:50:55:25:42:d3:
2f:5d:ef:5b:dc:b3:9f:91:38:ab:72:9d:e4:ce:c1:31:d9:be:
45:09:ab:91:69:4e:59:86:a0:fc:89:cd:e1:0e:c1:2e:1b:89:
1c:2b:ba:ca:17:c2:e2:4f:7e:78:70:58:9f:8e:60:6d:29:e0:
d4:ce:7d:24:c3:85:ed:f8:bb:43:b3:7f:d9:d2:6f:de:26:a1:
62:4c:96:81:31:71:05:82:5e:3a:ae:96:5e:9d:0c:64:0e:cf:
4e:64:ef:f0:db:1b:51:05:c4:d3:d2:d6:f2:93:d6:c0:e2:61:
84:c6:d8:00:ee:99:c6:cc:a3:2a:a2:f3:6e:d3:c2:01:63:43:
44:d5:f8:66:37:ca:b6:a1:4e:b5:8e:aa:58:41:97:76:d5:3d:
9b:99:1c:90:3c:22:66:06:3e:94:b9:e5:6b:d0:40:ec:54:7e:
c6:ef:48:86:d4:85:f9:b3:62:ee:7a:92:7a:43:d2:1d:9c:3e:
c1:0e:a6:ee:8a:43:e8:aa:ca:ad:27:47:5d:81:dc:ff:dc:60:
e8:0b:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:11 2025 by rpki-client