This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa
File: 323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier: hai/N7Rh80mdSUF0gIKghbPlxHT0Bt6OblYG8gRv5IY=
Subject key identifier: FF:86:39:9F:69:89:C8:47:F1:FD:5F:40:80:20:55:0A:48:BF:47:A0
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 334C7E66D0E3BC258DB7E897545CBC321236E189
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa
Signing time: Tue 09 Dec 2025 20:01:55 +0000
ROA not before: Tue 09 Dec 2025 19:56:55 +0000
ROA not after: Tue 08 Dec 2026 20:01:55 +0000
asID: 28345
IP address blocks: 2001:12f8:c::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4c:7e:66:d0:e3:bc:25:8d:b7:e8:97:54:5c:bc:32:12:36:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:55 2025 GMT
Not After : Dec 8 20:01:55 2026 GMT
Subject: CN=FF86399F6989C847F1FD5F408020550A48BF47A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:f3:f0:53:a8:46:6e:45:13:19:a3:67:2b:
bb:c0:c9:5e:87:36:94:bb:63:61:3e:a4:97:49:42:
54:06:e3:24:52:ec:86:50:ec:a6:d3:e9:4d:72:d9:
db:e0:db:ae:bc:83:4d:38:03:04:d6:bc:f1:f7:c3:
4c:b2:1a:fb:18:4d:2a:d0:98:89:11:bf:db:c5:f3:
90:25:f8:b3:61:1d:e3:da:25:e1:6a:3f:6f:13:c2:
db:85:5c:9e:a5:b3:8a:ed:d2:16:f0:16:88:10:a5:
66:62:bb:bf:ff:10:dd:8f:74:3a:00:69:3e:66:26:
99:aa:e4:09:50:ec:88:2d:5c:94:13:f5:0d:36:07:
b0:54:48:cc:ca:d0:cb:4c:34:b4:d4:a0:65:43:4e:
f0:50:61:63:4a:87:61:e6:c5:9e:10:e8:69:97:43:
83:11:a2:ce:de:88:c1:0d:23:3c:50:49:31:d2:65:
b9:78:79:fe:1b:a4:d8:00:7c:1c:88:20:d5:fb:a2:
b9:f8:c0:78:2f:06:8f:38:25:c6:36:bf:bf:43:25:
11:d0:0f:32:ee:8a:f4:1a:04:d9:a0:41:d7:6b:84:
e8:28:d9:94:67:6c:59:dd:d6:b2:6d:92:35:5c:de:
65:f5:d6:10:41:c9:98:27:1f:7d:e8:e0:b2:06:a9:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:39:9F:69:89:C8:47:F1:FD:5F:40:80:20:55:0A:48:BF:47:A0
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a633a3a2f34372d3438203d3e203238333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:12f8:c::/47
Signature Algorithm: sha256WithRSAEncryption
73:c1:64:da:46:2b:c8:bc:2f:8a:57:fd:2c:ba:25:cb:3d:cd:
dd:db:82:f7:1f:91:01:22:03:eb:2a:16:b5:72:c8:ae:b8:d7:
ac:b8:21:e5:d9:43:0e:f2:a9:02:dd:64:1e:23:2c:65:e5:a8:
dd:3a:a1:70:c6:9a:50:36:84:84:8b:c8:ac:6c:2c:f5:9d:30:
eb:03:1c:52:02:3d:e6:56:7c:51:76:63:89:a9:25:4e:c9:6e:
3d:86:b1:2d:bb:d9:42:cb:89:c1:1c:f7:e6:70:da:b6:75:04:
de:24:84:95:dc:f2:65:5c:5a:ec:fb:46:c5:31:64:d0:de:c7:
c8:1b:59:0d:0c:0e:ae:e6:cd:78:64:24:1b:36:21:87:dd:f4:
81:70:82:fd:8e:eb:37:1b:88:a9:12:cb:5b:19:f2:26:fd:77:
71:d3:fd:84:dd:b0:ea:71:99:ab:a2:70:79:1a:64:93:c9:5e:
27:07:a5:d4:cc:c4:69:85:07:34:c8:5f:59:0e:fc:37:f8:c8:
7b:a4:fd:e3:8f:57:c3:d0:0f:f6:7f:49:84:fd:5d:bb:cc:e3:
6e:8b:70:ce:ff:19:41:12:8c:31:ea:8a:e6:f6:ae:7a:e6:e0:
d9:6e:b8:c9:f4:47:a0:90:8c:d1:5e:7b:12:22:f3:3e:cd:2c:
e4:26:23:65
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUM0x+ZtDjvCWNt+iXVFy8MhI24YkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTVaFw0yNjEyMDgyMDAxNTVaMDMxMTAvBgNV
BAMTKEZGODYzOTlGNjk4OUM4NDdGMUZENUY0MDgwMjA1NTBBNDhCRjQ3QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPBfPwU6hGbkUTGaNnK7vAyV6H
NpS7Y2E+pJdJQlQG4yRS7IZQ7KbT6U1y2dvg2668g004AwTWvPH3w0yyGvsYTSrQ
mIkRv9vF85Al+LNhHePaJeFqP28TwtuFXJ6ls4rt0hbwFogQpWZiu7//EN2PdDoA
aT5mJpmq5AlQ7IgtXJQT9Q02B7BUSMzK0MtMNLTUoGVDTvBQYWNKh2HmxZ4Q6GmX
Q4MRos7eiMENIzxQSTHSZbl4ef4bpNgAfByIINX7orn4wHgvBo84JcY2v79DJRHQ
DzLuivQaBNmgQddrhOgo2ZRnbFnd1rJtkjVc3mX11hBByZgnH33o4LIGqcTtAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQU/4Y5n2mJyEfx/V9AgCBVCki/R6AwHwYDVR0j
BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx
Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2
OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv
MzIzMDMwMzEzYTMxMzI2NjM4M2E2MzNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDMy
MzgzMzM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwEgARL4AAwwDQYJKoZIhvcNAQELBQADggEBAHPB
ZNpGK8i8L4pX/Sy6Jcs9zd3bgvcfkQEiA+sqFrVyyK6416y4IeXZQw7yqQLdZB4j
LGXlqN06oXDGmlA2hISLyKxsLPWdMOsDHFICPeZWfFF2Y4mpJU7Jbj2GsS272ULL
icEc9+Zw2rZ1BN4khJXc8mVcWuz7RsUxZNDex8gbWQ0MDq7mzXhkJBs2IYfd9IFw
gv2O6zcbiKkSy1sZ8ib9d3HT/YTdsOpxmauicHkaZJPJXicHpdTMxGmFBzTIX1kO
/Df4yHuk/eOPV8PQD/Z/SYT9XbvM426LcM7/GUESjDHqiub2rnrm4NluuMn0R6CQ
jNFeexIi8z7NLOQmI2U=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:39:49 2025 by rpki-client