This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
File: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (raw, json)
Hash identifier: JEsk7b+JAI83LM4z6o/LMtOa2e4VeBZBo1NyblAUXAk=
Subject key identifier: 68:57:61:88:30:16:8D:99:16:82:EA:19:AB:68:9B:CC:CF:25:17:E5
Certificate issuer: /CN=46669CD8CCAA54E284B44792CB81ED8D401D6A03
Certificate serial: 4F77627064357DD779F8BE5B989DA0BE6A90E6D8
Authority key identifier: 46:66:9C:D8:CC:AA:54:E2:84:B4:47:92:CB:81:ED:8D:40:1D:6A:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
Signing time: Thu 18 Dec 2025 16:00:51 +0000
ROA not before: Thu 18 Dec 2025 15:55:51 +0000
ROA not after: Thu 17 Dec 2026 16:00:51 +0000
asID: 271343
IP address blocks: 200.39.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.crl
rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 06:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:77:62:70:64:35:7d:d7:79:f8:be:5b:98:9d:a0:be:6a:90:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669CD8CCAA54E284B44792CB81ED8D401D6A03
Validity
Not Before: Dec 18 15:55:51 2025 GMT
Not After : Dec 17 16:00:51 2026 GMT
Subject: CN=6857618830168D991682EA19AB689BCCCF2517E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:18:87:fd:99:2d:47:b1:bb:38:cd:96:33:
a0:4b:00:75:9d:cb:b8:e8:44:fe:03:3a:4c:88:89:
f5:9d:2a:a6:de:ce:dd:91:5b:d8:b2:b9:df:9b:9c:
95:26:fc:95:e6:37:86:8d:35:5f:7d:53:8f:ae:1d:
f1:3d:ea:fd:62:1f:24:cb:45:31:d4:5c:9e:97:51:
02:c8:29:17:d8:ea:62:3f:2e:a8:db:49:77:47:e4:
83:8b:ed:9a:ac:73:cb:fe:fb:d8:dc:1c:0f:87:e7:
74:08:d2:62:2a:be:c0:50:96:d5:bb:48:7b:52:2b:
e7:2f:07:e3:f4:4c:f7:88:6d:63:9c:66:a2:67:64:
c5:93:94:6b:18:99:d9:58:1a:e8:f2:50:80:df:ea:
27:ae:77:47:2b:ae:ce:cf:1d:75:07:6b:ff:c7:0f:
e9:c9:d6:78:d2:56:06:55:ff:a6:c4:31:92:88:7b:
42:80:5e:4e:08:29:93:5d:17:af:03:b5:1e:84:8d:
10:10:18:42:2a:d0:06:78:db:b9:2f:e5:18:83:d7:
1b:1d:2c:13:96:4e:75:c7:83:87:b8:4a:85:87:d7:
70:87:c9:69:9e:4d:1f:ea:84:0a:3f:84:26:05:6e:
8e:0c:2b:43:3a:32:0f:99:d5:15:f5:a1:73:e6:82:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:61:88:30:16:8D:99:16:82:EA:19:AB:68:9B:CC:CF:25:17:E5
X509v3 Authority Key Identifier:
keyid:46:66:9C:D8:CC:AA:54:E2:84:B4:47:92:CB:81:ED:8D:40:1D:6A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.39.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:c2:88:5c:90:3e:88:fa:5d:f8:50:6e:89:f8:85:c0:bc:41:
ba:8a:a0:18:61:a7:ab:15:fb:4e:70:79:46:78:9c:c4:06:b5:
60:c8:43:e8:fd:fa:a5:32:69:f5:26:14:06:af:a4:fd:90:f3:
e4:27:b9:ca:88:5c:fe:82:36:ce:53:7a:52:e4:be:60:0e:36:
74:93:6c:81:fa:21:c5:86:1b:3a:02:c2:b8:9b:bf:17:b7:00:
40:0c:27:7e:45:33:3f:42:02:a4:61:74:66:17:fc:29:b6:82:
1b:e1:3d:fa:f6:66:1b:ac:bb:85:be:d5:c8:25:a3:7f:7e:f7:
e4:86:29:f8:5d:4a:bb:cd:e9:2d:f5:16:89:45:6d:e1:0f:c0:
eb:ea:06:05:e5:9c:6a:7f:9c:8b:46:29:8f:13:9d:d1:27:08:
74:2e:65:61:96:53:53:3a:45:96:61:a6:04:4e:7b:8f:23:8f:
8e:f4:db:73:63:81:90:df:88:e7:b5:a4:03:cc:48:c5:bd:53:
6d:6f:60:4d:7f:ed:cb:66:a5:d5:52:f1:d6:d1:47:c3:ee:3f:
3d:9c:7b:ea:83:52:cf:49:ab:1e:26:1f:c5:99:39:75:80:d0:
8b:3f:e4:e6:23:2d:91:64:54:2a:2b:b5:67:b4:f3:ed:90:83:
b1:c8:8c:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUT3dicGQ1fdd5+L5bmJ2gvmqQ5tgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY2NjlDRDhDQ0FBNTRFMjg0QjQ0NzkyQ0I4MUVEOEQ0
MDFENkEwMzAeFw0yNTEyMTgxNTU1NTFaFw0yNjEyMTcxNjAwNTFaMDMxMTAvBgNV
BAMTKDY4NTc2MTg4MzAxNjhEOTkxNjgyRUExOUFCNjg5QkNDQ0YyNTE3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6RiH/ZktR7G7OM2WM6BLAHWd
y7joRP4DOkyIifWdKqbezt2RW9iyud+bnJUm/JXmN4aNNV99U4+uHfE96v1iHyTL
RTHUXJ6XUQLIKRfY6mI/LqjbSXdH5IOL7Zqsc8v++9jcHA+H53QI0mIqvsBQltW7
SHtSK+cvB+P0TPeIbWOcZqJnZMWTlGsYmdlYGujyUIDf6ieud0crrs7PHXUHa//H
D+nJ1njSVgZV/6bEMZKIe0KAXk4IKZNdF68DtR6EjRAQGEIq0AZ427kv5RiD1xsd
LBOWTnXHg4e4SoWH13CHyWmeTR/qhAo/hCYFbo4MK0M6Mg+Z1RX1oXPmgk9LAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaFdhiDAWjZkWguoZq2ibzM8lF+UwHwYDVR0j
BBgwFoAURmac2MyqVOKEtEeSy4HtjUAdagMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0
NUsvMC80NjY2OUNEOENDQUE1NEUyODRCNDQ3OTJDQjgxRUQ4RDQwMUQ2QTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NjY5Q0Q4Q0NBQTU0RTI4
NEI0NDc5MkNCODFFRDhENDAxRDZBMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlSzhQbm5XVng5NGlkZG8zcmJGSGpBUDJCb0pyVllOaGtCVERYVm5BNDVLLzAv
MzIzMDMwMmUzMzM5MmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyCckMA0GCSqGSIb3DQEBCwUAA4IBAQA6wohckD6I
+l34UG6J+IXAvEG6iqAYYaerFftOcHlGeJzEBrVgyEPo/fqlMmn1JhQGr6T9kPPk
J7nKiFz+gjbOU3pS5L5gDjZ0k2yB+iHFhhs6AsK4m78XtwBADCd+RTM/QgKkYXRm
F/wptoIb4T369mYbrLuFvtXIJaN/fvfkhin4XUq7zekt9RaJRW3hD8Dr6gYF5Zxq
f5yLRimPE53RJwh0LmVhllNTOkWWYaYETnuPI4+O9NtzY4GQ34jntaQDzEjFvVNt
b2BNf+3LZqXVUvHW0UfD7j89nHvqg1LPSaseJh/FmTl1gNCLP+TmIy2RZFQqK7Vn
tPPtkIOxyIwd
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:59:46 2025 by rpki-client