This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa
File: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (raw, json)
Hash identifier: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=
Subject key identifier: 07:71:46:EC:D1:22:5A:C0:6F:99:93:70:75:22:98:93:CB:FD:DE:2D
Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F
Certificate serial: 188DCBB904E1AC7E874DC2C582A71DE9D8CA4388
Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa
Signing time: Wed 17 Dec 2025 15:52:52 +0000
ROA not before: Wed 17 Dec 2025 15:47:52 +0000
ROA not after: Wed 16 Dec 2026 15:52:52 +0000
asID: 273619
IP address blocks: 2804:89ac:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl
rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 01:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8d:cb:b9:04:e1:ac:7e:87:4d:c2:c5:82:a7:1d:e9:d8:ca:43:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F
Validity
Not Before: Dec 17 15:47:52 2025 GMT
Not After : Dec 16 15:52:52 2026 GMT
Subject: CN=077146ECD1225AC06F99937075229893CBFDDE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:57:df:82:76:3a:da:8c:8c:95:4f:6d:51:
f1:82:7b:69:d8:ee:da:55:68:14:d0:14:c8:6d:91:
b2:99:7c:7d:42:56:d0:01:27:73:2f:ea:8c:c1:e5:
8f:2e:cd:83:a4:98:6d:fc:f5:d1:d8:49:5a:a1:5c:
8f:5d:bb:76:b9:f6:5b:0d:46:aa:6c:da:91:91:fe:
3e:ac:c6:aa:4c:55:ec:3c:d0:ad:89:44:6f:7a:10:
58:53:fe:94:8b:a7:4a:87:b9:7d:c2:6f:e7:ce:55:
dd:82:bc:61:f5:1c:96:1e:72:ad:72:f6:41:b1:e1:
1a:1f:22:90:96:ce:0e:4b:5b:94:3d:12:e4:83:cc:
7c:36:e1:1b:d0:eb:64:20:3b:a6:6f:cb:7a:ab:49:
3c:ef:a4:c0:11:93:6b:60:78:c1:0c:31:e3:23:58:
81:84:a7:10:db:3b:8c:6e:31:27:9b:04:23:77:38:
ce:80:b6:80:25:6b:d4:a7:93:fd:2e:4c:07:0a:a5:
fc:36:94:75:77:bb:84:87:ee:12:8d:bd:0c:94:7b:
5c:c1:59:0e:38:84:1d:b4:0b:89:64:8f:66:99:59:
d1:35:7e:2d:bb:16:f6:37:9c:d4:83:50:2a:38:6f:
b3:6b:40:cb:8c:2b:94:cb:fd:1e:20:a6:e1:04:87:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:46:EC:D1:22:5A:C0:6F:99:93:70:75:22:98:93:CB:FD:DE:2D
X509v3 Authority Key Identifier:
keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:89ac:8000::/34
Signature Algorithm: sha256WithRSAEncryption
42:30:7d:ab:c0:7e:bb:07:40:da:e7:b4:56:f2:6f:0b:c3:2b:
4a:70:52:d4:69:c3:b2:56:81:fe:38:60:02:47:02:50:78:eb:
9d:2a:ce:07:2d:55:ab:26:ff:66:96:bc:a3:31:97:06:b0:2b:
d9:94:8b:f2:8a:af:00:9e:d1:c8:99:85:af:69:45:ea:29:15:
e8:b2:73:3d:22:4e:17:a6:54:9d:71:c8:28:0c:25:03:ad:4f:
7c:30:bb:be:f7:1c:40:cc:a0:14:61:1b:34:7f:b0:4b:17:5e:
ed:cd:b7:1c:7d:54:a7:09:f4:32:ce:25:81:3f:50:2d:ba:37:
12:90:6a:c9:21:4f:71:1d:3a:00:90:d7:cc:2e:98:b8:46:bb:
e0:98:21:7a:25:44:0d:a1:47:6c:35:ba:ff:76:80:26:20:f9:
95:ef:05:75:b4:fb:c7:9a:05:02:ba:1f:12:b4:64:f3:d2:32:
99:fd:74:6d:da:a5:38:5e:bc:e5:30:a0:0c:a0:ad:19:cc:5d:
7a:1b:72:1f:60:6d:75:ff:b5:eb:9b:ff:60:90:e5:84:f0:e4:
8a:19:b2:29:f8:f2:bd:18:a8:63:c4:b0:f3:71:f3:39:96:5f:
5f:63:37:89:3d:fd:33:bd:8f:91:cf:4b:cb:56:d9:cc:e8:1e:
ba:b7:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:25 2025 by rpki-client