This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa
File: 3230302e3138392e34302e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier: bu8f4lAgEJTVpWkl7Bvt1NnGvNneUr0YbtRZB0qdsgo=
Subject key identifier: 62:7E:FC:32:D1:87:F4:17:3B:7C:BF:D5:58:DF:FA:B2:F3:60:EA:4C
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 060A6D6D6EE2A61FD8CB866A9AD6A356ED404F8C
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa
Signing time: Tue 09 Dec 2025 20:01:51 +0000
ROA not before: Tue 09 Dec 2025 19:56:51 +0000
ROA not after: Tue 08 Dec 2026 20:01:51 +0000
asID: 28345
IP address blocks: 200.189.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0a:6d:6d:6e:e2:a6:1f:d8:cb:86:6a:9a:d6:a3:56:ed:40:4f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:51 2025 GMT
Not After : Dec 8 20:01:51 2026 GMT
Subject: CN=627EFC32D187F4173B7CBFD558DFFAB2F360EA4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:99:05:8b:53:6a:1b:6c:a6:bf:d1:a2:7a:
28:7b:ab:2b:ce:64:63:a2:09:44:8e:70:26:c4:48:
3f:75:c2:46:fd:d7:0e:31:0a:89:a4:ae:17:37:19:
bf:b3:2c:76:2c:ac:d2:0d:f2:18:25:cb:8a:f5:ba:
ef:1d:d7:14:c8:f0:b8:c4:61:c8:9b:af:02:c0:46:
6c:3e:4d:39:c9:4b:6d:67:74:7f:ae:53:cb:f5:45:
80:5f:1c:a1:8f:32:10:52:16:a0:b5:78:38:41:0a:
16:a9:ca:e6:ae:a0:b2:d9:8d:e4:a0:85:50:39:88:
65:a2:6f:da:c2:d1:24:fa:30:95:85:a0:2f:96:3e:
3e:62:63:50:b0:72:e3:fc:5d:1d:51:2e:74:cf:c4:
03:96:5a:ff:be:ce:3a:cc:ce:ec:0d:87:8a:15:d0:
5f:5c:e2:4e:3d:19:f7:27:b3:31:1f:59:53:7b:7e:
78:93:9d:c4:8f:15:f3:47:b0:3b:d4:e2:9f:7b:2d:
fb:57:3b:42:e1:5c:57:aa:11:f7:d2:c3:b4:51:83:
66:af:be:8e:da:fd:d3:fd:76:b6:2b:89:93:ef:6a:
8b:62:c7:32:4a:13:a4:b0:86:d4:94:ee:d0:c1:3a:
7b:44:24:14:a2:22:10:a3:12:37:cb:d1:df:7a:dd:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7E:FC:32:D1:87:F4:17:3B:7C:BF:D5:58:DF:FA:B2:F3:60:EA:4C
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.189.40.0/23
Signature Algorithm: sha256WithRSAEncryption
70:3b:df:12:e6:ff:37:86:d6:92:88:05:4b:15:43:9b:c0:88:
9a:d0:71:1e:39:7c:6e:f4:7b:70:69:8b:13:bb:35:48:5b:51:
f7:7c:b6:8d:d9:da:dd:0d:7a:b8:71:9a:32:bd:60:d1:fa:4d:
ea:49:2c:b5:5a:58:a8:15:e1:cc:a7:0c:91:de:9d:1f:37:63:
e4:36:2e:62:a3:c7:42:d3:f1:16:a9:b6:5a:41:3b:bf:3d:d2:
a7:e1:72:ab:65:df:92:6d:3f:2a:68:e5:b2:08:28:3e:fb:57:
70:f0:cb:3c:0c:0a:3e:bd:e5:6c:73:35:fd:ad:d2:0e:ea:f3:
77:6e:54:c2:a8:17:d4:2f:cf:14:06:13:d2:b4:1b:74:15:b3:
cf:44:a3:38:ec:ef:99:44:ae:5b:4b:e4:73:e0:dc:82:5b:1a:
63:f6:d6:41:95:22:f3:9f:80:df:0d:ad:f6:42:0c:3d:e8:43:
c7:be:b6:6b:f4:6d:9c:8a:0c:64:af:4e:a9:e6:13:e4:11:22:
cc:79:02:bc:93:63:20:7d:c0:46:b9:9c:e4:c7:ad:91:b3:18:
c1:ed:f0:c0:38:36:d2:0b:0e:0c:8e:1e:5f:fd:62:00:1b:5c:
7e:2c:bb:fe:55:44:71:7f:40:8d:5c:08:45:c5:33:aa:d1:5b:
ca:80:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:14 2025 by rpki-client