This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa
File: 3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier: D1pNe48OT0e5ZLeJZUZCPuNBKQNLs/a3iL/eoRONL0U=
Subject key identifier: 2F:DE:A8:EE:E6:50:85:DA:FE:BD:43:44:5B:D1:67:1F:59:09:EF:6B
Certificate issuer: /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial: 44971CC5962D0FDD836B3A1B7754941492B33EF3
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa
Signing time: Mon 08 Dec 2025 01:35:28 +0000
ROA not before: Mon 08 Dec 2025 01:30:28 +0000
ROA not after: Mon 07 Dec 2026 01:35:28 +0000
asID: 28594
IP address blocks: 200.218.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 07:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:97:1c:c5:96:2d:0f:dd:83:6b:3a:1b:77:54:94:14:92:b3:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Validity
Not Before: Dec 8 01:30:28 2025 GMT
Not After : Dec 7 01:35:28 2026 GMT
Subject: CN=2FDEA8EEE65085DAFEBD43445BD1671F5909EF6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:79:d4:09:c2:b6:50:e2:22:35:49:53:55:
3c:c2:12:12:c2:63:ad:b0:53:3a:c0:66:54:56:dd:
54:8f:53:f1:36:d5:06:92:a5:41:27:c0:66:b9:42:
0c:c0:62:0c:71:b0:f7:d8:95:50:29:0a:c4:9d:fb:
90:fe:5c:73:87:c3:f7:e2:50:0e:25:2b:2b:0f:19:
04:ba:23:77:cf:a4:df:82:f3:84:a6:2d:19:9e:3c:
11:f6:15:d0:65:2a:38:4d:8b:a0:a7:0d:94:34:30:
d0:5f:05:fd:49:4e:18:d5:32:5d:4e:a5:e5:b3:6f:
2b:ff:f0:88:06:29:fe:10:48:f1:d8:ff:56:46:6b:
95:75:46:64:1a:10:05:d6:d7:2f:40:4d:84:f0:f2:
56:c6:a0:9f:b5:cb:70:ab:74:8c:70:37:38:95:3c:
a2:0b:35:7d:2f:b4:5c:f8:30:cf:9e:55:ff:d4:4a:
b4:1d:b5:c1:7f:70:dd:5f:65:40:36:c8:1d:02:88:
88:6f:6c:98:55:71:d7:54:64:7f:5b:66:9a:07:e9:
92:7e:b9:2f:ca:15:f2:0b:1c:de:30:56:14:e9:fe:
d1:3f:c8:32:2a:16:fe:aa:de:47:3a:93:32:44:0a:
25:70:37:04:4c:8a:41:32:d7:8a:0d:dd:c2:ee:67:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DE:A8:EE:E6:50:85:DA:FE:BD:43:44:5B:D1:67:1F:59:09:EF:6B
X509v3 Authority Key Identifier:
keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.218.252.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:e4:d0:db:ad:02:5c:4d:69:77:3f:83:b2:08:ae:da:1d:89:
3d:a7:25:91:18:a5:9c:41:b7:ac:03:20:c0:e2:9f:45:1e:50:
be:6c:d6:31:90:cc:86:e3:c2:b0:9d:f2:85:29:2d:e6:81:e5:
49:0c:aa:98:e4:46:bd:4f:cb:89:40:ee:70:c6:a3:c4:62:01:
5f:ca:dd:a7:95:0c:64:ab:75:a8:73:1e:f7:8c:29:38:ba:13:
1c:70:29:e7:e4:a1:07:13:67:af:d0:3a:15:65:36:ea:76:4c:
2b:c5:62:7c:b2:61:84:8e:4b:31:71:ba:3b:74:df:c9:bd:fe:
a1:89:69:2c:36:8b:81:db:ab:c5:64:a4:ad:2b:98:85:88:2c:
95:71:06:bf:83:6d:65:fe:9c:89:f3:35:ea:bc:91:fd:48:6d:
e1:24:db:35:d3:8a:f2:3f:aa:c1:93:ed:7e:e7:6b:31:dd:7a:
af:dd:f6:db:5b:eb:fb:b1:14:20:dd:f2:da:c9:75:38:e0:96:
30:ed:3f:2f:87:16:2f:55:2f:f0:fc:d1:f1:f6:9d:f2:49:41:
f4:bd:d1:6e:96:0a:20:37:f7:ae:3a:4e:81:7c:92:f7:c2:ac:
c3:90:a4:88:0c:19:21:1a:88:44:51:59:28:0e:93:9d:8e:9a:
fe:58:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:23:15 2025 by rpki-client