This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa
File: 323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa (raw, json)
Hash identifier: iXylWJANPNWtJIyIUWQ788LjehjlBFpmmBBJa3SJzdI=
Subject key identifier: 5A:76:94:13:2A:D3:6A:70:5B:09:6F:36:68:3C:D7:A7:4D:38:9C:0B
Certificate issuer: /CN=049C86AED090D820BC9DFDA1465ACE658A61D801
Certificate serial: 27625DC6A0D0600D79766ACDE6020FA3643400E0
Authority key identifier: 04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa
Signing time: Fri 12 Dec 2025 20:41:58 +0000
ROA not before: Fri 12 Dec 2025 20:36:58 +0000
ROA not after: Fri 11 Dec 2026 20:41:58 +0000
asID: 270722
IP address blocks: 2804:705c:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.crl
rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 18:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:62:5d:c6:a0:d0:60:0d:79:76:6a:cd:e6:02:0f:a3:64:34:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049C86AED090D820BC9DFDA1465ACE658A61D801
Validity
Not Before: Dec 12 20:36:58 2025 GMT
Not After : Dec 11 20:41:58 2026 GMT
Subject: CN=5A7694132AD36A705B096F36683CD7A74D389C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:c4:a6:80:74:bb:b7:79:83:2d:c0:20:0f:
1f:3a:68:91:1d:ad:3c:2e:10:e9:60:00:39:e1:68:
95:7a:e8:26:9d:74:8d:4b:14:bb:e3:61:bd:9b:a4:
d2:62:f5:7c:62:dd:c5:9c:38:16:0f:8a:fe:c7:d0:
7f:ab:96:9d:12:81:ee:68:d8:46:77:b7:22:7b:45:
5d:fe:a1:f7:19:1c:83:8e:06:70:3c:0f:e8:5b:96:
07:6b:ae:4e:69:46:9a:3a:af:3d:84:e6:d5:bf:03:
d0:18:bc:24:1d:b9:16:94:88:80:f3:ce:e2:34:09:
f6:83:97:db:20:4b:05:63:67:67:a3:0f:25:38:db:
86:e9:f8:83:92:f4:cb:e1:42:ba:15:9f:ca:7e:fc:
22:2d:a8:01:c5:cd:aa:e1:d6:93:82:ea:66:fb:08:
14:22:78:dd:35:e5:6d:75:11:43:e1:17:e8:97:6f:
80:11:ed:d4:b9:44:a8:5d:80:bc:ef:2a:4c:26:4a:
dd:eb:ae:0d:16:90:56:cf:f1:ed:7b:d2:33:5a:f2:
29:16:7b:5e:d1:16:88:b2:a6:bc:b9:e2:5d:1e:ae:
86:2a:5c:5b:09:b7:35:04:cd:fb:15:80:70:65:90:
ee:2c:49:24:64:a6:ea:d5:da:af:4e:b7:68:fc:a6:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:94:13:2A:D3:6A:70:5B:09:6F:36:68:3C:D7:A7:4D:38:9C:0B
X509v3 Authority Key Identifier:
keyid:04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:705c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
58:de:f6:63:da:9d:60:aa:35:8e:06:21:44:19:77:8c:c6:e9:
b9:84:8e:25:08:66:fa:c8:d0:90:54:70:0d:7e:b2:ae:54:f2:
06:9d:13:a6:9f:85:ad:16:a4:36:c9:62:e1:98:68:92:09:b4:
90:a4:42:cd:06:d3:83:ce:1f:34:e0:29:55:62:76:40:58:7a:
bd:f9:d7:c2:71:3e:f7:9b:1e:1d:1b:d9:c3:b7:75:54:4d:80:
8e:f4:91:e6:28:54:36:dc:8f:37:0c:2e:30:d8:65:36:8f:d8:
e4:a6:6d:78:92:72:e3:d0:90:c3:74:e8:29:0a:c1:39:93:16:
10:5f:65:e4:ec:38:6c:00:c5:67:48:55:a2:80:0e:9e:07:c7:
af:c6:f8:5c:40:0a:fb:64:b7:cf:7f:78:76:f3:dc:81:1f:a5:
b6:ee:ee:97:0e:27:fd:2e:fa:db:d6:2f:0c:3b:19:90:41:b5:
b7:c8:cc:9f:49:9b:38:dd:22:d9:20:28:67:c0:f8:19:1b:17:
3d:39:51:71:0e:07:01:20:60:24:33:9a:41:14:ea:15:34:78:
5c:3f:70:c8:4b:33:e7:22:21:56:af:f5:00:98:d9:9b:35:d7:
de:6c:15:24:ac:f4:32:74:2b:1e:41:a8:b6:c8:2c:32:a6:71:
61:02:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:33:31 2025 by rpki-client