This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5Wm8X5epTQ4vyAs7cV4tLhotqpYe4LTkXJmn9TyErcq2/0/323830343a383730303a3a2f33322d313238203d3e20323732363831.roa
File: 323830343a383730303a3a2f33322d313238203d3e20323732363831.roa (raw, json)
Hash identifier: WWIMw3JMcAhBMK/J3s7aNpcXBq9aR0o/6J3QdAxenJY=
Subject key identifier: 18:65:44:D4:4C:9B:1C:16:4F:CC:77:F7:F1:08:36:93:52:C2:6D:43
Certificate issuer: /CN=1814A5B63589B50BBA068F5FAEE961F8BC357B3F
Certificate serial: 69EBA714386C04118183A802687CAF8000BB9559
Authority key identifier: 18:14:A5:B6:35:89:B5:0B:BA:06:8F:5F:AE:E9:61:F8:BC:35:7B:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1814A5B63589B50BBA068F5FAEE961F8BC357B3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Wm8X5epTQ4vyAs7cV4tLhotqpYe4LTkXJmn9TyErcq2/0/323830343a383730303a3a2f33322d313238203d3e20323732363831.roa
Signing time: Thu 11 Dec 2025 15:28:07 +0000
ROA not before: Thu 11 Dec 2025 15:23:07 +0000
ROA not after: Thu 10 Dec 2026 15:28:07 +0000
asID: 272681
IP address blocks: 2804:8700::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Wm8X5epTQ4vyAs7cV4tLhotqpYe4LTkXJmn9TyErcq2/0/1814A5B63589B50BBA068F5FAEE961F8BC357B3F.crl
rsync://rpki-repo.registro.br/repo/5Wm8X5epTQ4vyAs7cV4tLhotqpYe4LTkXJmn9TyErcq2/0/1814A5B63589B50BBA068F5FAEE961F8BC357B3F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1814A5B63589B50BBA068F5FAEE961F8BC357B3F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 01:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:eb:a7:14:38:6c:04:11:81:83:a8:02:68:7c:af:80:00:bb:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1814A5B63589B50BBA068F5FAEE961F8BC357B3F
Validity
Not Before: Dec 11 15:23:07 2025 GMT
Not After : Dec 10 15:28:07 2026 GMT
Subject: CN=186544D44C9B1C164FCC77F7F108369352C26D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:8c:68:fc:ea:4b:52:e3:3a:5f:7a:47:47:
47:46:c8:7e:d2:21:90:75:37:79:89:54:fb:4d:c1:
2c:63:15:24:b7:85:b7:8e:4e:1c:6a:aa:2f:19:c1:
59:a4:a7:2b:97:54:ed:9a:62:19:0a:60:d6:76:b4:
f0:ff:4c:e9:c0:b7:e1:99:ae:8d:24:f7:33:16:fc:
39:2b:e1:70:59:c1:db:8c:b5:2a:ac:c4:ed:c2:26:
2b:04:25:0c:6f:89:af:d9:bb:77:9d:60:6e:6d:2b:
a2:ef:b9:3d:77:39:8f:f1:68:e8:d9:03:2e:26:6c:
c1:7d:ee:a9:6f:7e:66:33:da:4a:77:41:1d:53:85:
97:ff:f2:c6:5a:a8:e0:22:ff:79:e8:30:38:c3:69:
32:29:73:54:cc:dc:10:66:eb:7c:7e:f8:2f:e2:eb:
9e:c0:b6:b7:f3:e5:da:51:63:12:bb:10:f6:60:a9:
e9:18:26:33:36:ba:ca:41:2c:29:14:f3:81:36:3c:
d2:e2:3b:3d:0a:44:ba:4f:73:df:73:57:b0:5e:af:
a1:76:fd:48:fb:66:17:4e:a4:75:47:36:ef:17:75:
cb:39:2d:68:60:c5:46:2f:6f:91:1a:db:51:d7:28:
5f:81:28:40:56:5a:9c:22:93:7c:e1:e0:fa:bd:2a:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:44:D4:4C:9B:1C:16:4F:CC:77:F7:F1:08:36:93:52:C2:6D:43
X509v3 Authority Key Identifier:
keyid:18:14:A5:B6:35:89:B5:0B:BA:06:8F:5F:AE:E9:61:F8:BC:35:7B:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Wm8X5epTQ4vyAs7cV4tLhotqpYe4LTkXJmn9TyErcq2/0/1814A5B63589B50BBA068F5FAEE961F8BC357B3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1814A5B63589B50BBA068F5FAEE961F8BC357B3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Wm8X5epTQ4vyAs7cV4tLhotqpYe4LTkXJmn9TyErcq2/0/323830343a383730303a3a2f33322d313238203d3e20323732363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8700::/32
Signature Algorithm: sha256WithRSAEncryption
95:00:14:7a:f9:f3:c2:89:43:03:61:ed:9d:d4:f1:af:b9:e3:
a0:b2:98:18:29:e3:d5:72:3c:cd:3c:ff:90:7a:33:5c:e6:a1:
9e:34:ac:28:73:6e:df:77:4e:be:4f:e1:38:6e:e3:0e:c9:22:
c8:16:d0:8b:c0:71:6e:65:22:9f:48:04:9e:7b:a6:cf:70:5e:
50:8f:4b:59:a2:45:a0:ec:8f:34:f9:4d:7e:a7:ad:72:41:d0:
37:4c:3c:51:7d:39:72:52:f1:b5:85:78:d1:69:2b:04:83:d8:
c9:7f:80:ac:60:97:2c:1e:60:49:2c:f5:b7:c1:05:a8:c0:5e:
b9:ab:c6:52:3e:27:6f:b2:41:98:09:26:1e:91:e3:3d:06:ec:
5c:cc:b0:d9:9c:e6:9c:b0:02:10:7f:62:77:03:85:54:cc:bf:
21:64:37:8a:ca:91:cb:86:e6:7e:16:7b:32:b4:2f:01:c3:1d:
b8:a2:f6:fd:51:bf:fe:70:88:d6:ec:52:93:40:b5:9a:a0:c0:
3a:15:f4:e7:b7:fe:80:0c:1a:ed:69:8c:c8:5b:2f:9a:58:f8:
22:8e:b1:f1:fd:e1:a3:8c:49:c7:f7:6c:04:6f:e8:99:fb:9f:
98:ac:28:ae:b9:e9:69:22:b7:ed:9c:58:59:6d:4e:a7:be:29:
51:44:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:29 2025 by rpki-client