This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
File: 3230302e37312e38322e302f32342d3234203d3e20323731323030.roa (raw, json)
Hash identifier: OK3BCiojzsPgLiVvQgCak+SIFSMJCCoz3cHidufwwuw=
Subject key identifier: A4:0A:AF:E3:3C:0B:29:16:72:AE:3A:AD:07:69:2F:15:A7:41:C9:93
Certificate issuer: /CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Certificate serial: 3E6DBEEA570E1643F62BDC466A31AF6E9CCD4A71
Authority key identifier: 71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
Signing time: Sat 15 Nov 2025 17:46:30 +0000
ROA not before: Sat 15 Nov 2025 17:41:30 +0000
ROA not after: Sat 14 Nov 2026 17:46:30 +0000
asID: 271200
IP address blocks: 200.71.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6d:be:ea:57:0e:16:43:f6:2b:dc:46:6a:31:af:6e:9c:cd:4a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Validity
Not Before: Nov 15 17:41:30 2025 GMT
Not After : Nov 14 17:46:30 2026 GMT
Subject: CN=A40AAFE33C0B291672AE3AAD07692F15A741C993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:aa:a5:ef:41:4a:a9:d8:17:8c:7f:30:a5:
60:d8:73:31:05:22:5e:0a:02:2c:8e:a3:85:6b:5c:
84:4b:d5:49:54:3c:0f:93:fb:7a:fa:b0:7b:9d:5f:
9e:26:95:bd:df:5c:1b:12:83:2f:9b:b1:17:f5:4e:
38:62:5f:ca:16:eb:98:c3:96:3b:f8:7d:94:b9:7d:
5c:b7:6b:a6:63:19:be:9b:30:ca:76:c1:96:6d:3e:
79:96:5b:9f:37:28:df:1e:b6:92:b7:f7:39:f3:92:
45:b9:6f:47:cb:9d:d4:f3:00:57:2c:6a:80:3f:43:
e4:3a:d7:f2:2e:44:d4:16:b5:89:18:95:f8:21:7f:
09:04:0f:dc:3b:20:2a:d2:d0:6b:61:2c:fe:fb:57:
c3:30:b6:07:bc:bb:aa:89:21:74:52:27:c4:04:37:
f8:dd:6c:d5:6d:5d:b6:e6:24:2c:5a:58:e9:2a:3a:
97:b6:4e:dc:70:f7:48:04:97:d5:e6:fa:8d:c4:99:
c8:fe:4e:9b:06:25:7c:cd:bc:86:bc:6d:e5:9a:94:
d5:a5:3a:ab:db:bf:7e:1e:a1:cd:e2:fe:76:c1:ae:
ae:16:34:9f:b3:a4:f9:09:10:93:4b:60:88:05:b1:
e3:6c:73:16:db:49:8f:81:f9:0f:6c:72:22:99:5a:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:AF:E3:3C:0B:29:16:72:AE:3A:AD:07:69:2F:15:A7:41:C9:93
X509v3 Authority Key Identifier:
keyid:71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.82.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bd:e1:b4:1b:26:73:80:d6:d5:cf:51:5f:25:97:2a:c9:44:
57:6c:3e:8f:51:dd:e4:9f:22:14:1b:6d:d8:30:35:d2:e3:14:
7f:33:cd:04:99:f9:40:4c:28:8b:c3:85:07:6b:2d:7a:a7:4d:
49:e5:9a:eb:37:07:dd:e4:48:e8:21:72:da:43:3d:c1:ac:4c:
ba:b1:ab:f4:b7:74:9c:63:15:36:57:21:18:eb:69:eb:9d:39:
a8:5d:b3:2a:8c:fa:9d:8d:db:a8:36:d9:f7:11:31:4c:5e:6a:
84:e8:57:ff:49:89:d7:84:25:ee:88:52:ae:6d:4a:d8:5a:8d:
c7:f5:33:f3:d1:4b:90:f9:ee:1f:64:b2:1b:0b:fc:f3:5a:f3:
49:36:05:b5:fa:b4:10:73:07:31:12:47:2d:a5:77:d9:93:3c:
46:28:c3:e1:4e:11:b3:25:ca:ff:69:5b:99:07:c2:23:74:9b:
76:53:d3:59:19:1a:bc:88:02:c8:24:f2:76:28:42:ac:aa:44:
2e:df:0a:a1:c7:d5:fd:78:d3:9d:71:bb:8c:57:3d:71:1e:b4:
8c:43:32:76:70:75:18:19:84:d0:07:4a:1b:56:c0:1c:1b:e8:
77:a2:a1:3f:b9:22:57:93:4d:9e:0c:ae:c1:86:a4:d2:d2:51:
4a:f7:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:35:43 2025 by rpki-client