This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133302e302f32332d3332203d3e2030.roa
File: 3230302e3231392e3133302e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier: XbBd3qkFZDqPRP3tmM4PdwpGpI5MU0g7zQb5zajXLOE=
Subject key identifier: 53:02:8E:F7:EC:AC:D1:C0:1F:13:FB:A3:C6:0C:E5:66:60:C8:D1:DC
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 265A86877ED78D875E8E1EA7FE569514B9E19E84
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133302e302f32332d3332203d3e2030.roa
Signing time: Tue 09 Dec 2025 20:01:51 +0000
ROA not before: Tue 09 Dec 2025 19:56:51 +0000
ROA not after: Tue 08 Dec 2026 20:01:51 +0000
asID: 0
IP address blocks: 200.219.130.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5a:86:87:7e:d7:8d:87:5e:8e:1e:a7:fe:56:95:14:b9:e1:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:51 2025 GMT
Not After : Dec 8 20:01:51 2026 GMT
Subject: CN=53028EF7ECACD1C01F13FBA3C60CE56660C8D1DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:8b:52:8a:57:6b:42:a4:83:05:34:bf:87:
a6:55:21:0a:b0:6a:34:58:38:fb:0a:bc:b5:6f:d5:
17:d9:7b:63:a2:ce:fc:ca:16:d2:2e:fd:95:94:04:
19:ae:d6:e6:1d:17:d3:fc:cf:0a:24:e6:f0:ef:4b:
7e:c0:d1:b5:f3:07:f8:c5:a6:3b:e4:2f:f1:f6:18:
98:59:20:ad:33:f6:8f:0c:24:e1:d5:05:10:bc:56:
ca:f1:d2:b5:f4:b2:b9:c8:76:4e:27:66:b5:51:c0:
20:a2:72:7d:be:31:b1:b8:36:b4:2b:8d:51:c2:3e:
90:15:35:46:bc:0f:cb:4e:72:ab:55:32:41:c9:0a:
a2:fb:2d:e0:fe:82:d2:a7:38:f7:60:d5:6c:b3:87:
a3:12:4f:cc:42:58:97:62:6b:4a:ba:0a:4b:41:fb:
3f:60:df:f0:9c:2b:6e:51:72:78:da:eb:d3:f3:3d:
0b:b6:fc:a2:46:24:1c:1f:f9:2e:8e:e1:67:ae:d3:
b5:b4:84:9d:99:d9:d3:63:7c:fd:5e:46:c6:a2:f6:
f9:a3:c5:fd:b4:9a:ed:07:71:88:b4:2b:17:9c:83:
cd:66:9f:d8:3f:52:7e:b4:6a:5a:49:e5:de:8e:4e:
76:23:bf:3c:ea:94:45:6e:91:7c:66:42:4b:ad:5b:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:8E:F7:EC:AC:D1:C0:1F:13:FB:A3:C6:0C:E5:66:60:C8:D1:DC
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133302e302f32332d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.130.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:7c:81:d6:6f:20:c5:f4:35:fc:82:3e:ab:93:d4:45:ca:c4:
b4:30:58:ea:78:8a:4c:48:da:b5:b2:b4:74:f6:e1:1d:95:4b:
3a:f7:12:56:ca:9b:70:28:cb:cd:eb:3f:7e:b9:15:bf:d6:44:
dd:79:b9:3a:e4:85:f6:b7:3a:fd:a6:5e:8a:5a:dc:31:78:b0:
24:c0:aa:d6:e7:06:62:3c:d3:ec:58:11:0a:26:de:89:d2:76:
e3:2c:bc:0f:b4:62:6a:48:5e:a6:d3:18:90:cb:24:fd:75:d6:
71:36:02:13:c3:66:fe:4e:e1:34:5a:c9:1c:59:6d:40:e6:5c:
c3:e5:f3:de:1c:d2:25:e6:19:ce:a1:6f:58:ba:9b:c9:22:b3:
2f:d7:ab:1e:fa:d2:66:c7:7e:72:44:9a:52:6b:72:76:7a:fd:
c3:8a:1a:b6:1f:a9:45:b7:1c:13:e4:ae:17:35:52:f4:5f:8e:
86:82:11:d2:01:2a:21:31:32:da:2b:7d:4c:f9:0c:a6:91:87:
70:72:25:27:54:e0:a5:d7:81:8f:29:7f:b8:39:ef:47:11:ca:
3c:a4:75:bf:b4:65:85:8a:9a:4d:34:51:1b:fd:a8:91:47:b2:
bb:69:0e:13:65:82:f6:b5:39:34:e3:76:af:99:19:fa:ee:70:
30:0a:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:19:02 2025 by rpki-client