This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa
File: 323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa (raw, json)
Hash identifier: 66WsVJ+GnzPRLLDojkiHQjsHPawiIUgqns+qhOco3P8=
Subject key identifier: D5:21:24:37:85:14:1E:8E:A0:CA:1E:74:0F:80:38:FA:CA:7F:08:15
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 683D748E5395BE446C32F072F22E2ECB1EB360CF
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa
Signing time: Tue 09 Dec 2025 20:01:55 +0000
ROA not before: Tue 09 Dec 2025 19:56:55 +0000
ROA not after: Tue 08 Dec 2026 20:01:55 +0000
asID: 12136
IP address blocks: 2001:12f8:2::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3d:74:8e:53:95:be:44:6c:32:f0:72:f2:2e:2e:cb:1e:b3:60:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:55 2025 GMT
Not After : Dec 8 20:01:55 2026 GMT
Subject: CN=D521243785141E8EA0CA1E740F8038FACA7F0815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:af:22:1f:c8:fd:f6:3c:d6:1c:6c:40:b0:
07:fb:e7:ce:8f:0e:71:6f:c4:93:ac:70:fa:96:fb:
1b:ae:95:19:00:10:49:9c:f4:55:5d:1d:3e:83:14:
65:4c:52:ea:c9:6c:1d:af:15:55:97:72:6c:af:aa:
89:98:46:17:75:cd:f1:64:0c:e7:e2:4c:29:ae:93:
5c:04:fb:bb:c6:8d:e2:7a:0b:68:24:88:96:98:0c:
5c:46:70:eb:44:85:b6:af:e2:97:61:57:f2:ec:45:
3d:4d:40:9e:b8:f6:b4:15:c3:ce:1b:97:34:23:40:
c2:99:c8:82:5f:ff:2b:b3:fc:c1:e7:1a:c2:96:0d:
e4:8a:0a:8a:ab:68:51:fd:09:70:8d:d0:47:15:96:
38:55:34:0d:c3:a1:41:16:c2:35:54:70:8d:c9:1c:
69:ba:b0:51:aa:50:08:b2:fb:37:7f:04:c4:9f:c3:
b7:5d:af:54:c4:3a:d6:4e:70:4f:2d:bc:4c:5f:95:
08:9d:d4:c8:1b:2c:cc:49:99:f2:f5:85:d6:63:a0:
83:94:bc:a3:07:f8:c0:38:d2:33:d3:d3:e4:61:8d:
af:ba:05:13:57:82:a0:46:6c:a8:1f:8f:66:45:0e:
93:f2:d9:71:9b:b3:44:3b:99:44:f4:e8:3f:f8:d8:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:24:37:85:14:1E:8E:A0:CA:1E:74:0F:80:38:FA:CA:7F:08:15
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:12f8:2::/47
Signature Algorithm: sha256WithRSAEncryption
3f:a2:63:46:30:3b:2f:88:94:d3:95:0a:bc:86:e4:f4:97:99:
5b:e9:e7:f5:c8:d5:e7:fc:58:1d:de:f9:63:18:ba:2d:b1:bc:
9d:73:af:7f:76:f1:75:a1:60:b6:79:45:86:b5:3c:aa:e6:27:
af:be:20:cf:e6:6e:8b:5a:a2:5c:8e:ab:c0:a6:66:be:a5:4f:
e5:ed:9d:29:26:5e:ab:42:ee:4b:74:ac:d5:02:1d:8a:7c:75:
cf:2a:73:22:9c:d0:28:8b:f8:b9:7c:a4:f8:b3:a6:7b:1f:e1:
3b:7f:80:87:a3:be:81:a1:78:c2:b0:9e:c1:f5:5f:69:fa:76:
61:55:18:0e:4e:ed:42:f3:15:3e:94:6d:18:2b:27:1f:fc:16:
97:40:02:38:97:4c:b1:d7:d2:65:81:8f:ed:f0:19:52:11:b9:
98:c4:f1:af:16:d5:86:9f:3a:08:91:76:3d:f6:55:ea:92:51:
be:4c:ca:3c:38:b0:d3:12:d4:9b:eb:f9:c5:08:ea:25:09:94:
64:f8:a5:89:c6:67:f3:c7:cd:a5:59:db:a3:77:57:8c:99:91:
44:b5:04:73:a0:25:da:3c:de:5b:00:46:ff:e8:0f:45:bc:a8:
a7:96:97:97:60:6a:47:e7:7b:40:05:5e:9d:0f:4e:5a:f0:fe:
86:da:c3:b7
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUaD10jlOVvkRsMvBy8i4uyx6zYM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTVaFw0yNjEyMDgyMDAxNTVaMDMxMTAvBgNV
BAMTKEQ1MjEyNDM3ODUxNDFFOEVBMENBMUU3NDBGODAzOEZBQ0E3RjA4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVa8iH8j99jzWHGxAsAf7586P
DnFvxJOscPqW+xuulRkAEEmc9FVdHT6DFGVMUurJbB2vFVWXcmyvqomYRhd1zfFk
DOfiTCmuk1wE+7vGjeJ6C2gkiJaYDFxGcOtEhbav4pdhV/LsRT1NQJ649rQVw84b
lzQjQMKZyIJf/yuz/MHnGsKWDeSKCoqraFH9CXCN0EcVljhVNA3DoUEWwjVUcI3J
HGm6sFGqUAiy+zd/BMSfw7ddr1TEOtZOcE8tvExflQid1MgbLMxJmfL1hdZjoIOU
vKMH+MA40jPT0+Rhja+6BRNXgqBGbKgfj2ZFDpPy2XGbs0Q7mUT06D/42IOzAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQU1SEkN4UUHo6gyh50D4A4+sp/CBUwHwYDVR0j
BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx
Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2
OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv
MzIzMDMwMzEzYTMxMzI2NjM4M2EzMjNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDMx
MzIzMTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwEgARL4AAIwDQYJKoZIhvcNAQELBQADggEBAD+i
Y0YwOy+IlNOVCryG5PSXmVvp5/XI1ef8WB3e+WMYui2xvJ1zr3928XWhYLZ5RYa1
PKrmJ6++IM/mbotaolyOq8CmZr6lT+XtnSkmXqtC7kt0rNUCHYp8dc8qcyKc0CiL
+Ll8pPizpnsf4Tt/gIejvoGheMKwnsH1X2n6dmFVGA5O7ULzFT6UbRgrJx/8FpdA
AjiXTLHX0mWBj+3wGVIRuZjE8a8W1YafOgiRdj32VeqSUb5Myjw4sNMS1Jvr+cUI
6iUJlGT4pYnGZ/PHzaVZ26N3V4yZkUS1BHOgJdo83lsARv/oD0W8qKeWl5dgakfn
e0AFXp0PTlrw/obaw7c=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:39:54 2025 by rpki-client