This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa
File: 323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa (raw, json)
Hash identifier: uDnE67ohxUHJt4tkRVguFegVPWOiOS4DSaRY4awQY1Y=
Subject key identifier: 9A:13:3E:F7:BD:B0:82:2E:BA:8C:EA:FC:AD:97:39:91:86:73:31:BB
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 14EA436E9176E7592600618ACE5121D72B23BE76
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa
Signing time: Tue 09 Dec 2025 20:01:56 +0000
ROA not before: Tue 09 Dec 2025 19:56:56 +0000
ROA not after: Tue 08 Dec 2026 20:01:56 +0000
asID: 11644
IP address blocks: 2001:12f8:4::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ea:43:6e:91:76:e7:59:26:00:61:8a:ce:51:21:d7:2b:23:be:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:56 2025 GMT
Not After : Dec 8 20:01:56 2026 GMT
Subject: CN=9A133EF7BDB0822EBA8CEAFCAD973991867331BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:95:12:16:56:4b:40:9c:1e:10:22:56:49:
32:e4:47:94:fb:7f:bd:2f:a1:73:73:56:ec:ab:fa:
60:fa:8a:16:9f:83:d0:b5:92:b3:73:c8:ed:b4:73:
2b:5e:43:89:11:c0:a0:07:6a:18:e2:c8:6f:b7:d5:
25:83:d8:56:9a:47:a8:00:8f:7e:d8:c3:d7:29:f1:
d9:33:98:ad:5e:47:5b:67:05:09:73:78:3f:55:f3:
69:c9:c1:e4:1c:6d:a4:6e:2d:3e:a3:3a:51:76:54:
ba:82:65:5b:fb:a2:3d:76:c4:17:e5:88:a8:9a:00:
9a:d7:49:d3:78:76:1c:e8:2f:a3:03:b9:28:4b:88:
78:5b:68:d7:23:a8:55:6c:1d:84:12:38:75:70:af:
e7:c5:90:37:60:ca:fa:bf:c0:82:ee:50:e1:4f:f3:
f3:87:de:72:97:66:d5:6a:9c:cc:68:56:23:1e:bc:
04:ab:c8:69:66:b8:22:c5:54:e4:80:af:7f:5d:cc:
16:66:ee:83:26:ed:3b:3f:7e:d6:af:af:0b:2e:f9:
ce:a0:59:37:e1:b9:6b:6f:e0:6b:be:ef:de:05:b4:
63:ed:22:b4:49:a2:e3:2a:c2:3f:5e:5b:94:77:53:
1b:b1:aa:51:81:68:25:5b:e1:29:82:09:54:f6:4f:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:3E:F7:BD:B0:82:2E:BA:8C:EA:FC:AD:97:39:91:86:73:31:BB
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a343a3a2f34372d3438203d3e203131363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:12f8:4::/47
Signature Algorithm: sha256WithRSAEncryption
58:d3:06:b1:9b:36:b1:8b:44:0e:9a:63:4f:7c:d3:dd:44:a0:
9d:05:72:78:4e:42:45:7b:85:28:f2:0c:68:e5:ed:7d:a5:38:
f6:20:aa:eb:11:81:d6:56:58:3a:94:f2:a1:b9:d3:4d:87:d0:
f7:c0:60:1f:a4:fb:ea:b7:1a:06:02:9c:37:49:ee:fe:16:75:
90:3e:80:c1:40:2d:5a:13:50:71:2c:d6:4f:f0:17:1b:7f:65:
c6:a7:4d:ad:f9:0b:15:7d:cb:72:5b:e9:e0:4d:c2:4b:29:1d:
8a:4f:0d:9e:c4:85:fb:22:3f:ea:a1:ed:7e:8f:54:78:8c:3c:
99:83:60:60:e8:1e:b1:74:5c:51:27:74:8a:44:32:92:d0:b0:
52:6c:f3:02:55:23:3b:01:1f:9a:dc:df:e2:1a:d4:77:e4:95:
1d:84:ad:62:8b:de:dd:81:c9:ab:75:7b:07:ef:43:44:9b:ea:
33:87:28:71:20:5b:fc:98:e8:fb:2f:f4:2b:1f:6f:d8:ef:42:
2f:80:bb:5d:1f:56:13:f8:01:66:e7:6f:d3:0c:22:ba:9a:57:
43:34:32:39:8b:ee:5b:ee:77:15:98:5c:8e:79:ab:45:21:ce:
77:c7:6c:86:50:45:db:61:85:63:ce:5e:ab:4f:7c:83:b9:e1:
a5:18:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:06 2025 by rpki-client