This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa
File: 3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa (raw, json)
Hash identifier: 8OJOKWjAfRhhiBdvdMwbSjW5k0rLkwZ+kcWKdnkPDyY=
Subject key identifier: 95:53:83:D6:9D:03:F7:16:BB:CD:23:FC:D0:64:EF:EE:A1:D9:DF:01
Certificate issuer: /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial: 4BDDFC387B34112D44731A8CC9FC4CBFEA96229D
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa
Signing time: Tue 23 Dec 2025 17:48:10 +0000
ROA not before: Tue 23 Dec 2025 17:43:10 +0000
ROA not after: Tue 22 Dec 2026 17:48:10 +0000
asID: 61876
IP address blocks: 201.150.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 06:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dd:fc:38:7b:34:11:2d:44:73:1a:8c:c9:fc:4c:bf:ea:96:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Validity
Not Before: Dec 23 17:43:10 2025 GMT
Not After : Dec 22 17:48:10 2026 GMT
Subject: CN=955383D69D03F716BBCD23FCD064EFEEA1D9DF01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:25:24:3a:b9:10:59:b9:a9:be:aa:bd:31:
60:c5:c4:e5:5d:cb:41:ae:7c:ff:a7:8f:94:bc:e3:
f0:dd:64:ac:ed:f5:9b:9e:a6:b9:46:bd:f1:8c:d3:
52:9b:76:f9:99:66:34:8d:a5:ec:ee:74:92:28:05:
d7:ec:0e:08:a6:20:eb:07:69:10:b0:d7:68:d7:21:
67:25:b6:73:b4:22:82:b5:51:9b:bc:13:63:35:3f:
6f:7c:3d:fa:fd:97:1d:4e:ef:88:ed:ff:4e:51:3e:
ef:f7:16:ec:12:2c:70:05:ba:f9:97:8b:50:c6:25:
55:ab:d5:af:fa:e7:a4:2d:b9:88:bc:05:65:00:a7:
bc:05:bb:c0:40:ce:e0:e6:b3:82:46:c5:2e:ae:99:
5c:99:80:3a:b4:b7:34:43:dd:50:24:ef:2b:13:4d:
b9:26:d3:ba:98:1f:d8:8f:2f:34:91:48:3f:71:63:
f6:38:9c:e7:ad:a4:6e:9d:f6:71:37:d8:62:fd:75:
04:8a:d2:30:0d:a9:48:09:4c:1a:f8:d4:8d:91:4a:
0e:89:66:75:9a:2e:d3:e4:82:d3:45:98:c5:07:49:
a3:f0:92:8e:cc:20:a2:5a:59:db:fc:13:65:f4:8a:
6e:f0:a6:00:94:be:d9:a5:a5:87:a1:b6:13:94:82:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:53:83:D6:9D:03:F7:16:BB:CD:23:FC:D0:64:EF:EE:A1:D9:DF:01
X509v3 Authority Key Identifier:
keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.150.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:14:93:68:c5:78:c8:35:0e:3f:a9:4d:31:13:42:dc:2b:5a:
0f:d6:d3:da:ca:39:04:4c:61:53:85:42:57:bf:a5:69:e2:50:
c7:0c:d5:f4:ea:1e:22:4c:a7:25:71:48:b5:50:35:eb:4f:94:
61:02:71:62:9e:df:ee:de:b1:63:93:23:65:8f:0d:97:eb:a9:
ff:e4:0e:a7:0c:84:40:f5:48:e6:ac:87:e2:d5:c6:6b:e8:58:
94:c1:4b:20:95:e2:98:52:3b:2c:a2:ed:9e:13:9b:8c:83:aa:
31:a0:9d:18:ae:4c:b2:8e:0c:30:5c:53:75:34:36:3b:55:95:
3b:ac:ab:6c:17:29:bb:30:d8:0e:22:66:6c:ce:de:6d:aa:f4:
0a:52:80:47:d5:55:0c:c1:16:39:fd:3b:2c:1d:64:59:ee:d8:
16:da:f8:4e:bc:66:89:35:8d:28:7d:95:da:3b:37:2e:e7:9f:
ff:92:f9:6d:54:8d:96:91:77:2f:25:be:30:ed:af:86:d1:eb:
b1:ff:e3:be:79:dc:81:5b:a5:04:58:62:50:f0:27:08:41:76:
dd:09:cb:0e:5b:c2:ee:0e:13:43:6d:c6:85:08:cb:25:3f:81:
52:7d:f9:94:1c:9c:fd:b2:a7:a8:bb:bd:a4:43:01:e4:5b:14:
f0:40:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:46:39 2026 by rpki-client