This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa
File: 323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa (raw, json)
Hash identifier: SwcWoXn9bMEPUpBabD3ekzmgTwdqk0rJWMpFyoP+HNE=
Subject key identifier: AA:4A:69:44:CF:EF:D9:11:9D:E2:85:33:A1:C7:76:64:5B:97:E6:6A
Certificate issuer: /CN=049C86AED090D820BC9DFDA1465ACE658A61D801
Certificate serial: 5B593D3ABC4BCB448949F40313DBA3026EFC0AD0
Authority key identifier: 04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa
Signing time: Fri 12 Dec 2025 20:41:55 +0000
ROA not before: Fri 12 Dec 2025 20:36:55 +0000
ROA not after: Fri 11 Dec 2026 20:41:55 +0000
asID: 270722
IP address blocks: 2804:705c:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.crl
rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 18:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:59:3d:3a:bc:4b:cb:44:89:49:f4:03:13:db:a3:02:6e:fc:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049C86AED090D820BC9DFDA1465ACE658A61D801
Validity
Not Before: Dec 12 20:36:55 2025 GMT
Not After : Dec 11 20:41:55 2026 GMT
Subject: CN=AA4A6944CFEFD9119DE28533A1C776645B97E66A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:5b:f6:89:0f:63:5c:28:5e:aa:c8:a1:62:
83:9f:7c:10:21:e3:f6:35:79:fd:71:9b:9e:5d:95:
cb:33:fc:8a:00:f7:c8:e7:10:69:94:26:b5:4d:3e:
c5:ef:ba:de:9a:08:60:81:02:0f:ea:b8:66:4f:49:
67:b3:14:b1:e3:c1:aa:74:48:67:42:14:9e:c3:7e:
b3:73:44:dc:1d:51:2d:af:59:03:18:c5:27:22:cd:
6e:cb:5a:a7:b5:06:57:03:70:79:24:87:d1:0d:0e:
87:1e:ec:b0:7c:bc:31:d7:d8:65:08:be:57:b8:f3:
e9:a9:c0:80:b9:e6:dd:d1:de:19:d0:bc:0c:63:59:
7a:2c:78:23:77:03:aa:7b:02:51:69:e5:2c:0d:75:
66:d4:ef:8a:40:30:9f:f1:d8:9d:48:fd:af:c0:b1:
f4:18:43:0a:20:e1:14:96:03:0b:0a:42:f1:bd:0f:
42:19:7c:dc:54:e1:47:74:50:1c:88:be:94:9e:bf:
d4:a7:e5:f1:ff:d5:b2:a4:f1:62:d9:00:85:b7:fa:
ec:a2:f7:0e:b3:eb:04:67:98:eb:2b:a1:23:d4:7a:
f4:9c:54:ef:7f:e1:e9:ea:b5:53:ed:38:c2:51:d3:
de:b9:6c:87:45:17:35:ac:16:14:c6:e6:e6:f6:26:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4A:69:44:CF:EF:D9:11:9D:E2:85:33:A1:C7:76:64:5B:97:E6:6A
X509v3 Authority Key Identifier:
keyid:04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:705c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
58:31:a5:a0:c7:60:de:eb:c3:46:28:23:eb:52:d6:11:d6:6d:
8c:7a:72:ef:65:c2:b1:b3:52:ec:68:28:e2:f4:d9:07:5e:ed:
09:13:e0:2d:3f:46:56:c8:46:25:91:c7:36:f1:7a:b6:a8:33:
9e:d9:dd:b2:b9:fc:59:45:cc:ea:5a:bd:04:69:7d:d8:fd:57:
7f:a7:2e:24:73:36:3d:7e:9c:4e:b3:3c:70:fc:e3:73:40:19:
10:0a:86:17:ee:95:9c:44:2b:cf:cd:41:b3:8c:97:85:9f:67:
fd:5f:ae:7b:5e:a6:78:ce:18:42:57:09:8f:72:a0:39:d2:9b:
cf:52:c8:0c:ed:79:bc:af:12:37:fc:95:f7:21:82:5b:44:c8:
b5:65:a8:85:9f:f5:67:96:66:f5:b6:0a:a4:28:77:28:cb:9f:
9f:dc:60:70:0e:e2:86:b7:b0:3e:73:46:e9:df:1f:8b:8d:1c:
d7:cd:7b:56:64:e6:90:65:46:45:fe:ae:db:0d:4a:f4:dc:46:
58:f0:48:59:da:51:c5:ce:59:27:e8:e4:38:86:5d:49:49:ea:
40:1f:b2:62:80:b1:ff:f1:fb:fb:c0:5b:1c:dc:da:01:72:50:
c9:70:6b:69:8f:52:c4:72:5e:2d:61:9a:2f:b5:f1:7b:56:66:
14:aa:7c:d4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUW1k9OrxLy0SJSfQDE9ujAm78CtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5Qzg2QUVEMDkwRDgyMEJDOURGREExNDY1QUNFNjU4
QTYxRDgwMTAeFw0yNTEyMTIyMDM2NTVaFw0yNjEyMTEyMDQxNTVaMDMxMTAvBgNV
BAMTKEFBNEE2OTQ0Q0ZFRkQ5MTE5REUyODUzM0ExQzc3NjY0NUI5N0U2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBFv2iQ9jXCheqsihYoOffBAh
4/Y1ef1xm55dlcsz/IoA98jnEGmUJrVNPsXvut6aCGCBAg/quGZPSWezFLHjwap0
SGdCFJ7DfrNzRNwdUS2vWQMYxScizW7LWqe1BlcDcHkkh9ENDoce7LB8vDHX2GUI
vle48+mpwIC55t3R3hnQvAxjWXoseCN3A6p7AlFp5SwNdWbU74pAMJ/x2J1I/a/A
sfQYQwog4RSWAwsKQvG9D0IZfNxU4Ud0UByIvpSev9Sn5fH/1bKk8WLZAIW3+uyi
9w6z6wRnmOsroSPUevScVO9/4enqtVPtOMJR0965bIdFFzWsFhTG5ub2JnazAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqkppRM/v2RGd4oUzocd2ZFuX5mowHwYDVR0j
BBgwFoAUBJyGrtCQ2CC8nf2hRlrOZYph2AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3ozRXVTRTZWUnprZ0U2enNVRnlpbmh4dWkzYlhTcUVLd1FkYmtSendC
ZjQvMC8wNDlDODZBRUQwOTBEODIwQkM5REZEQTE0NjVBQ0U2NThBNjFEODAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OUM4NkFFRDA5MEQ4MjBC
QzlERkRBMTQ2NUFDRTY1OEE2MUQ4MDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN6M0V1U0U2VlJ6a2dFNnpzVUZ5aW5oeHVpM2JYU3FFS3dRZGJrUnp3QmY0LzAv
MzIzODMwMzQzYTM3MzAzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM3MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEcFyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBYMaWgx2De68NGKCPrUtYR1m2MenLvZcKxs1LsaCji9NkHXu0JE+AtP0ZW
yEYlkcc28Xq2qDOe2d2yufxZRczqWr0EaX3Y/Vd/py4kczY9fpxOszxw/ONzQBkQ
CoYX7pWcRCvPzUGzjJeFn2f9X657XqZ4zhhCVwmPcqA50pvPUsgM7Xm8rxI3/JX3
IYJbRMi1ZaiFn/Vnlmb1tgqkKHcoy5+f3GBwDuKGt7A+c0bp3x+LjRzXzXtWZOaQ
ZUZF/q7bDUr03EZY8EhZ2lHFzlkn6OQ4hl1JSepAH7JigLH/8fv7wFsc3NoBclDJ
cGtpj1LEcl4tYZovtfF7VmYUqnzU
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:36:04 2025 by rpki-client