This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa
File: 3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa (raw, json)
Hash identifier: uGfk0XWBSP2uO+lLJfh5s8JV7Mu0hAc+gnnl5fplZYM=
Subject key identifier: 4E:23:E0:D0:E8:ED:4F:7A:22:88:63:DE:A7:D3:67:2E:61:3F:14:35
Certificate issuer: /CN=513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3
Certificate serial: 4D72999898F1C8D3FAB4CE6BD958352772B5E91A
Authority key identifier: 51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa
Signing time: Fri 12 Dec 2025 19:31:12 +0000
ROA not before: Fri 12 Dec 2025 19:26:12 +0000
ROA not after: Fri 11 Dec 2026 19:31:12 +0000
asID: 270274
IP address blocks: 200.124.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.crl
rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 12:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:72:99:98:98:f1:c8:d3:fa:b4:ce:6b:d9:58:35:27:72:b5:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3
Validity
Not Before: Dec 12 19:26:12 2025 GMT
Not After : Dec 11 19:31:12 2026 GMT
Subject: CN=4E23E0D0E8ED4F7A228863DEA7D3672E613F1435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:d7:cd:83:57:8f:79:05:b4:3a:2e:87:b0:
c1:b0:c1:df:85:ea:87:17:d1:ed:b0:46:22:0d:6e:
7a:c4:c4:fc:36:2f:15:50:72:93:d9:bb:00:12:d0:
fa:4a:64:67:12:3e:51:f0:51:d7:21:9d:d4:0e:0d:
f0:86:41:8f:26:01:30:ac:6e:ad:28:f4:f3:17:ca:
b4:fd:ba:0a:7c:1e:4c:44:bc:4d:c4:d3:a8:f0:df:
19:4e:69:5b:51:c4:81:6d:d9:3f:ce:55:f5:a9:f4:
c9:80:28:fb:c1:e8:c4:22:74:3a:69:24:fa:d9:fc:
c5:da:ce:a8:99:d5:01:1f:a0:4e:53:52:a3:94:23:
be:a2:bc:e0:2a:96:06:90:bc:af:79:fd:2c:ac:e1:
b4:a3:3f:9b:7d:42:a7:98:2f:89:35:12:cd:42:48:
1f:72:a9:2f:00:50:c6:ef:0f:75:34:58:74:a5:58:
b4:75:42:ce:c4:39:5d:e3:89:8b:c8:e8:b6:53:3e:
72:18:48:f0:12:ae:a2:54:69:3f:f8:ea:60:a6:e9:
80:15:0f:d2:d7:ec:d9:e6:3c:eb:96:01:b6:b3:87:
ed:ca:d6:42:88:20:0a:9a:f3:ff:df:63:ab:12:15:
f2:77:ac:48:70:96:8a:d6:77:06:2e:39:a6:a4:b7:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:E0:D0:E8:ED:4F:7A:22:88:63:DE:A7:D3:67:2E:61:3F:14:35
X509v3 Authority Key Identifier:
keyid:51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.84.0/23
Signature Algorithm: sha256WithRSAEncryption
30:e9:ad:16:d2:c2:99:7e:8c:10:0f:a3:c5:e7:c4:22:68:b0:
4b:fe:fb:64:cc:cf:a7:49:de:1d:fc:73:51:bf:08:1d:51:8c:
d4:db:91:72:87:ee:00:49:37:59:b9:ea:65:4c:57:cb:36:e2:
d5:6e:f9:88:fa:46:ef:25:75:f2:c5:70:b2:19:c0:0f:5d:f2:
b4:6f:09:a0:4b:c9:cd:9c:76:d2:4e:97:93:11:65:7c:df:f9:
1b:78:6e:60:ce:50:7c:96:b1:a7:8d:85:75:a8:46:a0:ac:fe:
4d:4b:78:96:3d:37:e5:26:bd:50:06:26:ab:5e:59:d2:bd:9b:
7f:a5:d3:0e:9b:4b:9d:00:23:0f:d5:c7:19:df:31:e9:b6:f8:
22:cc:96:17:f0:ee:dc:d9:91:f5:22:55:75:30:90:3a:bb:ff:
5d:95:18:60:7f:6f:8e:36:a0:37:24:01:9b:90:df:fd:e0:ab:
85:25:26:06:d5:ff:a6:ea:01:54:18:b6:74:d4:15:e9:29:be:
1d:15:74:be:5b:c8:24:e3:00:8e:e1:51:f8:35:d7:49:20:b2:
c4:56:d8:da:52:e7:89:92:3b:41:0d:bc:7d:65:57:ca:62:2c:
a6:a3:8e:b8:2a:0b:b8:d7:80:9f:db:75:74:3c:f3:dd:b5:a0:
9c:9d:ed:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTXKZmJjxyNP6tM5r2Vg1J3K16RowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzQTM2QjFGRUUzMTg5NDNGQTU4QUM2RjUwOTlENEZD
QkVDN0REMzAeFw0yNTEyMTIxOTI2MTJaFw0yNjEyMTExOTMxMTJaMDMxMTAvBgNV
BAMTKDRFMjNFMEQwRThFRDRGN0EyMjg4NjNERUE3RDM2NzJFNjEzRjE0MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLtfNg1ePeQW0Oi6HsMGwwd+F
6ocX0e2wRiINbnrExPw2LxVQcpPZuwAS0PpKZGcSPlHwUdchndQODfCGQY8mATCs
bq0o9PMXyrT9ugp8HkxEvE3E06jw3xlOaVtRxIFt2T/OVfWp9MmAKPvB6MQidDpp
JPrZ/MXazqiZ1QEfoE5TUqOUI76ivOAqlgaQvK95/Sys4bSjP5t9QqeYL4k1Es1C
SB9yqS8AUMbvD3U0WHSlWLR1Qs7EOV3jiYvI6LZTPnIYSPASrqJUaT/46mCm6YAV
D9LX7NnmPOuWAbazh+3K1kKIIAqa8//fY6sSFfJ3rEhwlorWdwYuOaakt+O5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTiPg0OjtT3oiiGPep9NnLmE/FDUwHwYDVR0j
BBgwFoAUUTo2sf7jGJQ/pYrG9QmdT8vsfdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdF
eVovMC81MTNBMzZCMUZFRTMxODk0M0ZBNThBQzZGNTA5OUQ0RkNCRUM3REQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxM0EzNkIxRkVFMzE4OTQz
RkE1OEFDNkY1MDk5RDRGQ0JFQzdERDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzSnFrQUpEc25BN042VnBkUEpGTWdUY25wSlQ2TWZzaTFjYlNIOVk3RXlaLzAv
MzIzMDMwMmUzMTMyMzQyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIfFQwDQYJKoZIhvcNAQELBQADggEBADDprRbS
wpl+jBAPo8XnxCJosEv++2TMz6dJ3h38c1G/CB1RjNTbkXKH7gBJN1m56mVMV8s2
4tVu+Yj6Ru8ldfLFcLIZwA9d8rRvCaBLyc2cdtJOl5MRZXzf+Rt4bmDOUHyWsaeN
hXWoRqCs/k1LeJY9N+UmvVAGJqteWdK9m3+l0w6bS50AIw/VxxnfMem2+CLMlhfw
7tzZkfUiVXUwkDq7/12VGGB/b442oDckAZuQ3/3gq4UlJgbV/6bqAVQYtnTUFekp
vh0VdL5byCTjAI7hUfg110kgssRW2NpS54mSO0ENvH1lV8piLKajjrgqC7jXgJ/b
dXQ88921oJyd7Ss=
-----END CERTIFICATE-----
Generated at Wed Dec 17 16:30:13 2025 by rpki-client