This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
File: 3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa (raw, json)
Hash identifier: /fiHBrrs/mzdmWUk0PhOCMSHQh3oOph8JHfnJWC5GmM=
Subject key identifier: 6E:4E:BD:0B:EB:F9:69:9E:EC:C8:0E:C3:7C:65:4A:32:8B:00:FE:15
Certificate issuer: /CN=DFCCDF5F8AC5C763B5218011C9AC6FF566C78511
Certificate serial: 65A7497513FD7651CEDA868CA8FA37FA7C8DAB82
Authority key identifier: DF:CC:DF:5F:8A:C5:C7:63:B5:21:80:11:C9:AC:6F:F5:66:C7:85:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
Signing time: Wed 10 Dec 2025 20:04:24 +0000
ROA not before: Wed 10 Dec 2025 19:59:24 +0000
ROA not after: Wed 09 Dec 2026 20:04:24 +0000
asID: 271046
IP address blocks: 128.201.12.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.crl
rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 04:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a7:49:75:13:fd:76:51:ce:da:86:8c:a8:fa:37:fa:7c:8d:ab:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFCCDF5F8AC5C763B5218011C9AC6FF566C78511
Validity
Not Before: Dec 10 19:59:24 2025 GMT
Not After : Dec 9 20:04:24 2026 GMT
Subject: CN=6E4EBD0BEBF9699EECC80EC37C654A328B00FE15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:27:d8:db:87:89:71:32:f7:fe:7b:81:69:
aa:83:1a:30:be:d9:97:87:68:95:b4:f4:f2:f2:16:
7b:8f:b7:d1:74:22:44:23:ad:1c:bd:ab:6b:b4:e7:
05:dd:4f:cf:9b:36:00:ae:0d:ca:8b:e3:ae:3b:21:
9f:a1:5f:9b:ba:d8:1a:8f:91:40:62:a5:b6:2f:96:
bc:f8:d9:55:a9:dd:9d:d5:ee:76:1b:62:48:3c:37:
44:90:94:48:92:21:ee:04:a2:94:15:f1:15:1b:fe:
1b:4b:a7:d5:1e:6e:08:22:33:4e:97:06:5a:a8:45:
c3:f5:72:36:bd:b1:8e:75:29:50:55:3f:2d:81:dd:
14:1d:0d:a9:14:07:99:97:c7:6d:85:23:d9:ee:a4:
38:18:aa:3c:25:7e:12:40:94:0f:3e:c8:c1:8c:69:
87:97:fb:b1:dc:af:e2:56:f7:f4:51:47:60:40:10:
fc:5f:67:ee:68:b0:1d:11:81:10:97:cc:fa:45:09:
ae:2f:83:66:f2:92:3d:72:3b:11:c2:90:1e:c6:0f:
94:07:6a:cd:aa:40:e2:f6:30:c3:50:df:62:38:83:
23:b2:76:63:7e:4a:90:8c:1e:64:cf:0c:90:24:f7:
9c:b8:61:65:8c:5a:2c:83:fd:d6:03:65:12:ae:a0:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4E:BD:0B:EB:F9:69:9E:EC:C8:0E:C3:7C:65:4A:32:8B:00:FE:15
X509v3 Authority Key Identifier:
keyid:DF:CC:DF:5F:8A:C5:C7:63:B5:21:80:11:C9:AC:6F:F5:66:C7:85:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
87:fb:40:d2:48:85:f7:9c:e2:e3:2d:48:e6:d7:7d:8c:97:db:
73:ba:12:08:54:4b:de:44:59:c8:7e:41:94:2a:fd:04:99:2f:
ef:9c:01:10:1c:de:aa:8a:73:79:fe:7b:6b:d0:c5:3f:d9:98:
6d:98:26:1c:a2:90:bc:ef:e1:8f:eb:a7:e0:2d:3f:d3:6e:8e:
f8:a7:51:f9:03:c1:03:ad:55:0f:3d:fe:23:19:05:e0:3c:43:
7d:90:be:79:da:1a:68:32:61:21:21:5e:e0:33:e2:cd:ea:89:
2b:e4:31:73:7a:3f:46:b1:19:d4:28:8d:4e:0e:de:53:e8:f4:
99:d0:ea:78:86:cc:4d:fe:b4:dd:3b:c4:5b:63:93:6a:fd:c4:
eb:72:32:a5:64:88:9c:84:d4:e6:33:97:9c:26:9f:c3:77:6c:
20:3a:13:b4:c3:67:59:7a:4f:38:3a:2d:f9:0b:84:15:04:01:
bf:a6:10:9e:d7:29:0e:20:7d:84:ae:6a:da:53:4f:28:c3:6c:
61:ef:a8:df:55:b3:9e:d8:f8:0d:29:1a:1b:7f:04:15:26:94:
40:12:03:6b:d8:36:c4:9b:38:84:c1:b0:73:30:83:0b:d4:80:
e8:17:bd:cd:d7:03:dc:fa:b9:03:9d:37:52:51:fb:64:04:1b:
cf:ef:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:44:46 2025 by rpki-client