This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa
File: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (raw, json)
Hash identifier: evcJoe8kl899b+xGomFq0rjQEr0vjGkY2XfjdeQy63c=
Subject key identifier: 58:70:52:55:B1:B7:FA:57:E9:3D:D6:E3:D1:6D:71:A8:A7:8A:04:38
Certificate issuer: /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Certificate serial: 42E228E33AF62E35FF001FAC0C84402D306435E5
Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa
Signing time: Thu 04 Dec 2025 14:34:42 +0000
ROA not before: Thu 04 Dec 2025 14:29:42 +0000
ROA not after: Thu 03 Dec 2026 14:34:42 +0000
asID: 61784
IP address blocks: 201.55.200.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e2:28:e3:3a:f6:2e:35:ff:00:1f:ac:0c:84:40:2d:30:64:35:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Validity
Not Before: Dec 4 14:29:42 2025 GMT
Not After : Dec 3 14:34:42 2026 GMT
Subject: CN=58705255B1B7FA57E93DD6E3D16D71A8A78A0438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:ff:7e:d6:52:57:21:07:5f:15:0c:af:cb:
3b:f3:bc:a3:ce:94:bb:eb:b1:00:54:20:07:b8:33:
dc:8e:3a:5f:7a:9c:da:45:3a:9a:61:3b:86:d2:1a:
ac:bb:54:3d:93:57:cb:e8:da:36:cc:df:e0:be:f4:
52:1d:2f:84:7b:0b:a1:de:d0:7e:00:90:81:37:b8:
94:9b:31:1e:9e:09:9c:a7:1a:69:43:a3:a4:59:0e:
c2:28:50:cd:aa:f5:0f:6d:7f:98:01:d7:92:79:96:
21:95:4f:e9:a5:d5:20:08:54:d5:65:c1:d5:e5:1f:
4f:8a:88:3c:54:7d:e2:46:c6:41:5d:a8:8e:ce:ed:
29:ee:a4:b0:77:4e:98:b6:ea:4d:ad:ee:ea:df:0a:
fc:b4:0d:62:1b:6d:03:79:c1:68:02:5e:56:9a:1e:
25:3b:b8:29:91:1e:61:af:71:a1:dc:4e:78:01:0e:
a8:6e:40:f3:cc:1d:72:74:2e:2c:42:0e:40:5e:8d:
bb:73:77:dc:a3:bb:f6:1f:b8:68:c9:ef:ed:a3:9c:
9f:e4:7d:7d:c2:1f:5f:0d:f5:7e:46:4a:9c:6a:ee:
86:f5:2c:1d:d0:04:de:73:ac:bd:73:c6:cf:b7:f2:
6e:67:47:9c:f0:cd:c2:91:47:60:1b:16:5e:f5:db:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:70:52:55:B1:B7:FA:57:E9:3D:D6:E3:D1:6D:71:A8:A7:8A:04:38
X509v3 Authority Key Identifier:
keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.55.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:28:7b:b5:84:b9:98:bc:31:27:64:70:a6:f3:a7:ba:21:e2:
ef:ec:87:c2:25:fc:19:21:a9:d7:a8:63:05:33:1b:b2:29:fc:
84:e4:54:80:ad:2c:d0:34:54:a6:45:7f:38:dc:21:56:ad:13:
62:0c:11:ad:56:6c:fe:44:80:82:76:d2:61:74:cf:17:de:65:
4c:33:63:b1:df:b6:61:d1:5a:90:ce:b0:dd:ec:78:c5:9f:8d:
2e:cb:cb:fc:b8:0d:1a:bb:62:e1:80:70:b8:22:49:1b:89:d5:
b9:90:61:ae:f4:54:82:cc:89:d4:ae:9a:09:b5:54:d3:06:1c:
df:1f:3b:d0:db:d3:e3:8f:07:51:50:10:57:79:c0:31:a2:26:
1e:1a:7f:b0:ad:dd:02:c0:34:c7:bd:60:14:61:92:b2:15:5d:
5b:51:fa:7d:78:68:15:a6:3e:f4:cd:44:14:22:66:e2:19:8e:
89:ab:01:f0:94:39:8a:4f:f5:08:05:e7:52:4f:11:4e:b8:6f:
93:d1:cd:79:e0:00:49:10:9e:04:28:e8:c8:2d:8a:aa:34:30:
6f:e1:1b:ce:dd:c8:ab:e5:c7:c9:c4:5c:8d:e2:f7:3a:90:02:
cd:ac:00:15:e3:3d:c8:c3:89:40:26:e0:43:4b:05:58:30:7a:
19:c7:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:31 2025 by rpki-client