This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
File: 3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier: pAPwY2sIZ0XOvEMHpLhTDQB02GnHzIbxAwmgLttwkGU=
Subject key identifier: 94:18:F3:D8:8E:51:79:E5:17:8E:6E:FC:2B:C1:48:F7:0E:75:9D:48
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 6C2C28C688355BD6137C2312E9CFE4387C76D90D
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
Signing time: Tue 09 Dec 2025 20:01:53 +0000
ROA not before: Tue 09 Dec 2025 19:56:53 +0000
ROA not after: Tue 08 Dec 2026 20:01:53 +0000
asID: 28345
IP address blocks: 200.229.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2c:28:c6:88:35:5b:d6:13:7c:23:12:e9:cf:e4:38:7c:76:d9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:53 2025 GMT
Not After : Dec 8 20:01:53 2026 GMT
Subject: CN=9418F3D88E5179E5178E6EFC2BC148F70E759D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:ce:5d:56:4a:66:3d:3a:17:30:bc:f5:38:
ad:9f:fe:0d:05:a5:df:e5:91:c4:17:e0:bc:9f:0f:
80:90:0d:fc:47:bc:d5:37:fb:b5:6d:9b:f5:53:bc:
48:82:5f:c8:91:2e:82:e7:82:b2:92:bb:e6:92:47:
3c:87:55:06:61:8d:45:db:43:9f:15:d0:3a:a0:a8:
92:fe:a4:4e:ea:3c:43:ff:87:41:7b:ee:58:99:27:
d9:ed:c9:d0:88:0d:dc:65:e0:27:f3:4c:6d:ae:ab:
65:2c:67:86:49:47:0d:64:29:81:98:4e:54:bf:93:
3f:4b:2d:7b:da:f6:21:a6:bf:43:35:d2:dd:bf:6f:
7d:e6:bc:ec:9c:74:ac:33:93:d6:0f:a2:0b:4f:dd:
9e:d8:f3:67:85:d1:d3:77:1b:dc:f5:f5:1a:90:85:
36:37:6d:f4:fc:c7:ef:5d:72:32:74:1e:0c:33:f6:
e9:e0:58:02:24:2b:89:82:c2:c1:91:aa:3e:a6:f3:
83:ed:f4:cc:1c:6d:e1:64:39:1d:a4:5b:b1:76:d3:
a4:fd:53:9b:7b:ed:09:37:da:3b:a4:90:98:4b:ec:
3e:b7:c2:45:d6:52:db:94:43:b3:27:17:fd:01:76:
70:20:d0:51:08:3c:44:28:eb:c7:04:ed:37:b8:8a:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:18:F3:D8:8E:51:79:E5:17:8E:6E:FC:2B:C1:48:F7:0E:75:9D:48
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.248.0/23
Signature Algorithm: sha256WithRSAEncryption
50:40:20:46:19:4e:51:29:9f:07:44:b4:28:fb:1e:c5:68:d9:
c2:10:05:01:41:38:bf:80:72:cc:80:49:f3:52:4a:f6:37:44:
b7:56:a3:82:89:3a:d0:4d:1a:27:21:39:5f:9d:b1:1c:f0:06:
51:27:fe:4b:04:49:41:b6:2c:ad:0b:cf:75:15:2c:ac:f3:97:
81:8c:27:c7:f4:27:8b:37:df:20:b0:d3:27:41:bd:21:72:24:
3f:de:55:de:0a:94:99:92:a7:5d:8e:26:10:94:39:d2:06:56:
5d:7c:05:f0:e6:38:3b:0b:50:72:6d:63:ea:56:3f:aa:98:b5:
81:f0:45:97:36:ce:6e:7a:ab:ae:99:f8:d3:93:6f:a8:75:d8:
03:c3:00:26:4b:8b:48:ae:a8:58:78:22:0b:42:a0:7e:6e:60:
36:ad:4c:f5:c0:21:8f:66:3b:fd:a6:53:54:a1:3b:52:b5:09:
49:d0:50:54:a8:54:6c:9d:78:67:f6:49:32:4f:cf:53:94:b2:
58:a4:7e:4b:c5:b5:ee:57:ef:10:92:3b:49:28:64:a9:a5:08:
77:7c:93:c4:fe:61:82:32:d4:3b:f8:e6:03:30:e7:60:40:8f:
c9:49:cf:72:13:3c:58:9b:b3:d1:fd:78:33:17:68:8b:30:d4:
e8:71:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:12 2025 by rpki-client