This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa
File: 3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier: 41k6AC0VpDWe7dpm8uo643N/+X8UE02thsnpg3hu2zA=
Subject key identifier: F2:11:59:A7:C1:82:FE:75:BC:A6:EC:E1:72:F2:80:28:3E:30:29:43
Certificate issuer: /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial: 777741FB67BBCE872F9A8027E9C3BA8F2DDC3734
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa
Signing time: Fri 28 Nov 2025 18:08:20 +0000
ROA not before: Fri 28 Nov 2025 18:03:20 +0000
ROA not after: Fri 27 Nov 2026 18:08:20 +0000
asID: 262773
IP address blocks: 201.158.24.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:77:41:fb:67:bb:ce:87:2f:9a:80:27:e9:c3:ba:8f:2d:dc:37:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Validity
Not Before: Nov 28 18:03:20 2025 GMT
Not After : Nov 27 18:08:20 2026 GMT
Subject: CN=F21159A7C182FE75BCA6ECE172F280283E302943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:58:b4:d5:2e:61:62:76:11:7b:ca:bf:5f:
c7:83:5b:7a:e0:b2:63:a8:0f:0e:73:16:30:10:25:
63:5c:ea:fd:5e:5b:75:93:87:60:03:2b:6d:b4:6e:
b3:5d:36:63:d1:e1:16:cf:74:ca:84:44:7f:82:dd:
2b:ca:08:26:55:2a:19:83:ba:af:ae:63:b8:ee:82:
58:01:29:fd:08:7b:52:0d:cd:3a:93:3d:e7:c1:bc:
29:f5:14:ef:e9:c1:48:ca:5f:a9:d8:2b:c0:10:2c:
94:ca:96:af:96:13:1e:1d:79:19:01:09:1f:db:6f:
2c:e5:62:91:e5:c5:64:42:1f:1e:26:8c:90:b2:22:
7a:18:d6:33:62:bc:93:f9:d0:93:bd:0a:2e:4c:a4:
ea:5e:d9:11:62:fb:7c:22:50:51:01:94:0d:83:61:
c4:ae:10:db:07:49:11:9c:f1:e6:44:fe:6b:ec:76:
5f:97:08:14:23:1b:33:4a:6e:3b:1b:11:67:aa:2a:
b9:18:d7:bb:e1:3d:35:ac:0f:5b:6d:ab:05:07:c0:
0b:3c:28:5a:cc:05:b5:99:ff:36:3c:6d:fc:2f:a6:
21:c2:3d:a7:90:21:66:50:f8:91:72:04:ed:cf:8e:
ce:60:b4:0c:0f:74:56:a3:54:09:a9:a0:02:18:a3:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:59:A7:C1:82:FE:75:BC:A6:EC:E1:72:F2:80:28:3E:30:29:43
X509v3 Authority Key Identifier:
keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.24.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:e1:7b:80:ba:a9:6f:d9:ce:f1:36:ad:53:45:79:31:be:d9:
84:c3:b1:df:12:95:db:08:d2:f8:1f:30:ed:3f:b6:67:0e:73:
87:f6:ce:03:14:8d:2f:7f:09:88:dc:f6:44:05:bf:bf:d7:b3:
ab:29:9c:f7:be:d7:8f:5f:bf:34:62:38:df:3a:37:d9:e7:81:
36:68:95:eb:f5:dc:90:c4:5f:89:5f:e8:e3:db:4f:68:d6:8b:
7b:6d:47:84:02:61:f9:fa:8f:82:ee:01:c5:bb:32:45:54:e9:
3b:72:72:d6:db:b4:76:cb:ad:9e:ad:95:03:f7:f6:51:d9:e2:
7b:6d:9c:73:ae:52:f0:cd:b0:54:7f:66:f7:d7:fa:a2:a6:31:
b2:f2:b8:e4:ba:47:f4:05:64:b2:21:36:87:5b:1a:e6:10:c6:
65:06:e7:c7:4e:5d:4e:10:29:a0:1c:1e:5e:00:47:1f:96:c1:
50:1b:d6:2a:d1:3b:0d:18:df:91:27:4a:35:94:04:f7:6a:14:
30:91:29:26:c8:82:6e:71:6a:1b:3a:ca:29:f3:48:cb:0e:db:
ef:80:1a:20:15:58:fa:70:26:32:2c:be:3c:ba:48:de:a7:6e:
e1:b8:b2:30:55:07:ab:24:9b:ef:a4:77:d8:08:cc:92:c8:33:
08:7e:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:30 2025 by rpki-client