This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa
File: 323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (raw, json)
Hash identifier: hvyGCjIQcD547Yb4zQBPywXrKrn2CyOw74Y2lsJGmgs=
Subject key identifier: 11:9E:72:AE:00:63:5A:39:2E:5D:BF:84:00:CE:BB:C3:30:45:34:9B
Certificate issuer: /CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Certificate serial: 206ABE1A154CF2EFA89680742AB20DE0ED9BECE8
Authority key identifier: 2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa
Signing time: Thu 18 Dec 2025 14:18:16 +0000
ROA not before: Thu 18 Dec 2025 14:13:16 +0000
ROA not after: Thu 17 Dec 2026 14:18:16 +0000
asID: 269015
IP address blocks: 2804:5e28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 15:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6a:be:1a:15:4c:f2:ef:a8:96:80:74:2a:b2:0d:e0:ed:9b:ec:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Validity
Not Before: Dec 18 14:13:16 2025 GMT
Not After : Dec 17 14:18:16 2026 GMT
Subject: CN=119E72AE00635A392E5DBF8400CEBBC33045349B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:68:82:99:42:ec:b7:5b:12:e0:35:d8:00:
fe:a4:54:14:72:35:70:52:83:76:b2:72:6f:1e:5d:
02:b8:b3:f2:8b:0d:d3:e8:6e:69:2c:16:36:17:a7:
68:16:1c:4a:46:da:cd:23:73:c1:b4:f7:32:69:3c:
19:5d:8a:16:f8:cd:ea:78:bb:a0:bf:59:73:d6:6a:
d3:6b:84:e9:8e:7e:05:72:89:ca:a0:1f:8f:ce:15:
11:8f:f1:d7:9e:7d:7c:5a:ed:1a:1a:41:36:eb:2d:
7f:01:3c:b5:c8:d7:8c:75:cb:33:6f:02:57:93:28:
b3:e1:fc:22:ba:18:99:48:63:f2:15:05:77:b6:30:
62:1a:72:d0:a7:6c:33:29:b8:f8:14:8b:37:e2:e4:
f7:48:87:84:c9:a8:44:26:8b:a2:92:e2:2a:0f:c0:
b6:c8:d3:e1:cc:83:6f:3e:f1:49:72:8d:0a:b1:a7:
1d:14:c4:7a:17:c5:6f:82:b8:21:01:20:5e:8a:63:
0d:ae:64:3a:8b:8c:58:83:39:83:0f:a0:c9:da:7d:
60:2c:fc:d0:72:f6:56:5a:0f:9a:8b:e0:da:14:b2:
be:df:07:37:23:e2:d6:79:2a:f4:1c:fb:f9:19:80:
75:c5:a2:de:51:0a:a4:e1:fe:9d:04:60:0e:6f:13:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:72:AE:00:63:5A:39:2E:5D:BF:84:00:CE:BB:C3:30:45:34:9B
X509v3 Authority Key Identifier:
keyid:2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5e28::/32
Signature Algorithm: sha256WithRSAEncryption
29:67:00:fe:8a:64:22:c1:e2:8b:6b:b4:b9:c8:e6:b8:27:ef:
00:85:1b:37:93:cc:f1:11:3a:a7:2c:8d:ee:e3:c2:7d:40:dd:
3e:2e:1d:ba:96:d0:7f:c7:14:6c:98:4f:c7:f6:7d:8f:69:73:
03:c2:47:84:92:0a:86:df:6e:90:29:67:aa:45:fb:ad:e3:cf:
b1:26:4d:7b:dd:0b:0c:84:da:c2:ae:8b:0f:d4:a0:4e:c2:eb:
ab:34:42:25:76:55:fa:6a:e0:55:79:97:45:ec:72:75:93:ab:
45:9c:40:64:1d:97:43:d4:df:33:30:ca:0f:e9:ef:e6:f7:a7:
fd:5c:6b:0a:42:5b:e1:67:42:cb:9f:11:39:bd:d4:30:58:61:
ee:a8:c5:a4:a7:72:04:3c:d6:4b:6b:14:4b:46:b2:0a:8f:0a:
0a:cd:f3:01:87:9a:b8:33:78:0b:20:56:26:45:56:ab:bf:67:
da:a4:62:24:96:6a:80:81:ab:30:c2:48:0f:af:6b:bc:e8:bb:
85:41:8a:b6:f7:5a:64:6c:c0:3e:2d:97:db:c5:74:0e:5e:81:
cd:d5:ba:58:b8:16:ae:c6:4c:b5:e7:9b:f1:92:b1:7f:a4:29:
bb:65:59:7d:db:0b:0b:a6:80:19:b7:41:eb:4a:43:a8:ff:61:
f9:f6:61:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:14 2025 by rpki-client