This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa
File: 323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier: aNsIZ8/3cVe/8aeOC15Tfr3xgH9WZ40MJCraIsDRemg=
Subject key identifier: B4:FE:C2:C5:97:5E:51:F8:A2:61:CC:AB:F5:38:EE:CF:00:C0:5A:D2
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 1346F48EA440F84EBA852E34C627CCF048CDF75F
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa
Signing time: Tue 09 Dec 2025 20:01:49 +0000
ROA not before: Tue 09 Dec 2025 19:56:49 +0000
ROA not after: Tue 08 Dec 2026 20:01:49 +0000
asID: 28345
IP address blocks: 2001:12f8:a::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:46:f4:8e:a4:40:f8:4e:ba:85:2e:34:c6:27:cc:f0:48:cd:f7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:49 2025 GMT
Not After : Dec 8 20:01:49 2026 GMT
Subject: CN=B4FEC2C5975E51F8A261CCABF538EECF00C05AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:85:b8:1c:e3:03:0b:45:37:46:31:1b:f4:
8f:d0:e0:4a:36:d5:73:00:4d:0d:3c:77:a7:66:cf:
7b:cc:d2:40:f8:59:d2:c2:55:38:fc:f1:a1:e0:26:
5a:5c:59:e2:39:93:86:ce:4e:0d:75:fd:ba:00:ef:
1f:88:79:a0:19:4c:99:60:f3:b9:46:59:73:d9:5d:
6f:1c:e0:48:6e:3d:9a:c0:58:cf:df:65:c8:11:dc:
44:e6:30:ef:05:37:48:6f:60:67:34:0f:ec:11:f0:
bd:85:eb:46:8c:12:59:31:23:33:60:3b:3d:8c:0c:
1a:5f:83:a4:f1:d5:ef:ea:63:df:14:26:c5:25:92:
59:5e:a7:4f:e9:08:0f:c2:fe:4b:02:7f:b5:a9:6a:
74:e9:b9:cf:6a:4b:f6:60:0a:95:e7:73:5f:fc:d0:
79:00:e0:1c:d3:26:b9:b0:e2:6f:4f:c8:76:3c:22:
a4:56:84:1c:c2:a3:a9:ab:aa:89:a3:60:8d:59:d2:
6c:ac:ba:4c:d8:b6:26:b9:59:3f:e6:34:bd:b0:75:
51:e1:a3:da:48:d3:a8:ab:96:2b:eb:da:33:d4:75:
b0:16:92:5d:6c:d6:01:0c:17:45:3f:4a:6c:65:f5:
8d:61:24:27:9d:f4:cb:fc:c5:52:c4:6c:fc:db:07:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:C2:C5:97:5E:51:F8:A2:61:CC:AB:F5:38:EE:CF:00:C0:5A:D2
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203238333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:12f8:a::/47
Signature Algorithm: sha256WithRSAEncryption
c5:d4:6d:80:b7:d7:cc:6a:88:d0:b5:73:80:7b:08:22:3e:48:
32:bd:fa:39:77:1c:af:ac:f1:55:1f:ed:de:58:5f:03:f7:04:
d3:74:e1:a9:e4:33:fb:4c:af:52:ef:93:52:bf:f9:57:48:2b:
e0:94:53:b0:3d:4e:a8:5f:8a:2d:11:cc:47:7e:73:a7:d6:45:
fd:56:6a:d9:cc:9c:20:23:3e:5d:6e:ec:b0:70:6a:e1:3e:08:
52:98:3c:fb:eb:35:51:be:43:ee:09:a3:ae:d8:d7:ea:53:ea:
de:78:62:db:8d:ff:cd:80:ac:87:64:30:63:4d:3b:4c:76:70:
f0:f7:25:89:94:64:e4:87:3e:f2:ef:42:32:59:7b:3c:a2:55:
bc:3c:4f:18:ec:ff:54:4f:b5:20:c5:80:ab:d0:bf:12:42:14:
8a:71:aa:89:05:ab:d6:3b:06:f7:ba:16:7c:52:92:8f:34:d5:
b0:b8:d1:b9:b4:ae:c2:13:56:21:a3:a0:08:92:3d:d9:cb:9c:
eb:15:04:ee:55:41:ef:63:0d:43:ff:d7:d4:8f:db:d5:45:89:
67:96:ed:f5:8e:be:0b:06:e6:07:fa:69:09:11:f4:30:1b:9b:
2a:37:d2:21:48:19:c2:15:e2:56:16:a5:fc:e3:b4:94:86:0f:
14:a3:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:16:26 2025 by rpki-client