This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/323830343a326365343a3a2f33322d313238203d3e20323635323439.roa
File: 323830343a326365343a3a2f33322d313238203d3e20323635323439.roa (raw, json)
Hash identifier: iqBtcyT69beIM8JVBPYjS4F+O83kTmuzeS8KHYE3Q4o=
Subject key identifier: B5:51:23:5B:4B:8E:D2:07:EB:B4:E4:58:6B:C4:A2:54:88:C5:DF:D9
Certificate issuer: /CN=698EB5BA775EA8BABECAC48D50ACD998675FEC35
Certificate serial: 0B6851F6A162D295EC4F7D409510140595A87C40
Authority key identifier: 69:8E:B5:BA:77:5E:A8:BA:BE:CA:C4:8D:50:AC:D9:98:67:5F:EC:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698EB5BA775EA8BABECAC48D50ACD998675FEC35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/323830343a326365343a3a2f33322d313238203d3e20323635323439.roa
Signing time: Mon 15 Dec 2025 16:55:00 +0000
ROA not before: Mon 15 Dec 2025 16:50:00 +0000
ROA not after: Mon 14 Dec 2026 16:55:00 +0000
asID: 265249
IP address blocks: 2804:2ce4::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/698EB5BA775EA8BABECAC48D50ACD998675FEC35.crl
rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/698EB5BA775EA8BABECAC48D50ACD998675FEC35.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698EB5BA775EA8BABECAC48D50ACD998675FEC35.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 01:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:68:51:f6:a1:62:d2:95:ec:4f:7d:40:95:10:14:05:95:a8:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698EB5BA775EA8BABECAC48D50ACD998675FEC35
Validity
Not Before: Dec 15 16:50:00 2025 GMT
Not After : Dec 14 16:55:00 2026 GMT
Subject: CN=B551235B4B8ED207EBB4E4586BC4A25488C5DFD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:91:d3:05:e1:51:12:ba:81:b0:77:84:12:
c5:d3:e4:1f:87:31:b8:92:ee:e0:02:e9:ac:02:c3:
3d:d3:5f:1a:95:57:81:b6:1e:e5:a3:9c:23:82:26:
f3:1e:5b:9b:35:c3:ec:3e:e6:10:e7:0e:20:47:3e:
d4:99:d6:77:2a:43:ee:eb:f1:83:89:d1:7b:e7:c2:
a0:a9:f8:61:4a:99:4e:d1:d5:b1:9d:6a:46:e8:13:
72:99:93:64:9f:8c:8a:fe:47:e0:c3:1e:42:4b:b7:
ed:28:e2:8f:8e:d7:17:f2:d6:fb:4c:93:3f:88:57:
74:da:43:9c:88:fc:9c:d8:a8:aa:33:eb:2b:05:d6:
74:ef:cf:51:4f:3f:e2:2f:6e:90:fa:8f:34:da:5c:
ba:18:2d:0a:c8:79:5d:9d:cf:32:05:ba:0a:e7:47:
e2:f4:1b:b3:e4:0d:00:01:5f:97:5b:82:b1:c4:3e:
da:ae:e8:11:06:27:a5:4c:66:ea:50:82:a5:21:4f:
68:b2:a6:d1:c1:52:88:d6:bc:d5:9b:9e:22:d1:3c:
02:70:83:d7:4e:5d:25:9a:5d:0a:f3:f9:b6:48:17:
8e:e8:88:62:71:b2:47:a6:d8:b6:63:10:ae:e6:26:
c4:40:84:65:d6:0f:f7:c7:0c:86:47:10:f1:46:05:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:51:23:5B:4B:8E:D2:07:EB:B4:E4:58:6B:C4:A2:54:88:C5:DF:D9
X509v3 Authority Key Identifier:
keyid:69:8E:B5:BA:77:5E:A8:BA:BE:CA:C4:8D:50:AC:D9:98:67:5F:EC:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/698EB5BA775EA8BABECAC48D50ACD998675FEC35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698EB5BA775EA8BABECAC48D50ACD998675FEC35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/323830343a326365343a3a2f33322d313238203d3e20323635323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2ce4::/32
Signature Algorithm: sha256WithRSAEncryption
01:68:20:7a:35:ed:25:e2:51:00:6c:b2:d3:26:90:59:6e:10:
79:8d:f1:61:d8:5f:ab:c5:ed:a7:0f:33:28:8c:b1:6f:bd:88:
0f:d9:50:1e:e3:f1:4b:b6:3b:32:44:d8:42:50:f8:a0:ac:c7:
99:7d:e5:8b:c5:f8:8b:c3:d8:5c:41:52:d8:c5:b2:87:1c:5f:
43:a6:1a:bd:64:b1:88:16:9f:38:0f:6a:51:f8:8e:27:32:21:
3b:07:f5:2e:aa:de:97:d7:37:d4:0d:2a:05:b5:15:7b:e7:f7:
e7:d6:2e:19:ce:e4:78:60:b0:f0:ee:e1:f7:b2:5c:28:a6:bf:
b9:e0:42:e4:9c:13:f9:2b:a9:b4:50:4b:35:62:af:90:8d:68:
66:a9:39:eb:32:fc:19:ad:0a:0b:4f:b1:f9:14:21:37:fc:e9:
69:5f:75:76:f3:31:3a:2d:42:fe:49:9a:1f:6e:00:71:cf:df:
9b:ff:dc:5e:e2:e1:fb:ae:bb:9e:13:db:14:dd:f9:96:83:45:
b3:88:7e:99:c9:d4:22:b9:14:73:ee:83:d7:3f:f7:8b:43:96:
ce:b1:8e:ee:4c:97:97:53:b7:93:ad:99:ac:ed:6d:9d:c5:b4:
6d:81:62:98:07:ba:6b:ce:e5:45:8f:cc:b1:e7:54:4f:18:a4:
df:16:2e:35
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUC2hR9qFi0pXsT31AlRAUBZWofEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4RUI1QkE3NzVFQThCQUJFQ0FDNDhENTBBQ0Q5OTg2
NzVGRUMzNTAeFw0yNTEyMTUxNjUwMDBaFw0yNjEyMTQxNjU1MDBaMDMxMTAvBgNV
BAMTKEI1NTEyMzVCNEI4RUQyMDdFQkI0RTQ1ODZCQzRBMjU0ODhDNURGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqz5HTBeFRErqBsHeEEsXT5B+H
MbiS7uAC6awCwz3TXxqVV4G2HuWjnCOCJvMeW5s1w+w+5hDnDiBHPtSZ1ncqQ+7r
8YOJ0XvnwqCp+GFKmU7R1bGdakboE3KZk2SfjIr+R+DDHkJLt+0o4o+O1xfy1vtM
kz+IV3TaQ5yI/JzYqKoz6ysF1nTvz1FPP+IvbpD6jzTaXLoYLQrIeV2dzzIFugrn
R+L0G7PkDQABX5dbgrHEPtqu6BEGJ6VMZupQgqUhT2iyptHBUojWvNWbniLRPAJw
g9dOXSWaXQrz+bZIF47oiGJxskem2LZjEK7mJsRAhGXWD/fHDIZHEPFGBbGpAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUtVEjW0uO0gfrtORYa8SiVIjF39kwHwYDVR0j
BBgwFoAUaY61undeqLq+ysSNUKzZmGdf7DUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJYZld6UkNQOXJReGI4a1YzRFJDYmFHbThIM1pTaDhuZXkydVpGYVg4
Z3YvMC82OThFQjVCQTc3NUVBOEJBQkVDQUM0OEQ1MEFDRDk5ODY3NUZFQzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5OEVCNUJBNzc1RUE4QkFC
RUNBQzQ4RDUwQUNEOTk4Njc1RkVDMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYyWGZXelJDUDlyUXhiOGtWM0RSQ2JhR204SDNaU2g4bmV5MnVaRmFYOGd2LzAv
MzIzODMwMzQzYTMyNjM2NTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCzkMA0GCSqGSIb3DQEBCwUAA4IBAQABaCB6
Ne0l4lEAbLLTJpBZbhB5jfFh2F+rxe2nDzMojLFvvYgP2VAe4/FLtjsyRNhCUPig
rMeZfeWLxfiLw9hcQVLYxbKHHF9Dphq9ZLGIFp84D2pR+I4nMiE7B/Uuqt6X1zfU
DSoFtRV75/fn1i4ZzuR4YLDw7uH3slwopr+54ELknBP5K6m0UEs1Yq+QjWhmqTnr
MvwZrQoLT7H5FCE3/OlpX3V28zE6LUL+SZofbgBxz9+b/9xe4uH7rrueE9sU3fmW
g0WziH6ZydQiuRRz7oPXP/eLQ5bOsY7uTJeXU7eTrZms7W2dxbRtgWKYB7przuVF
j8yx51RPGKTfFi41
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:20 2025 by rpki-client