This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/323830343a373831303a3a2f33392d3339203d3e20323731323138.roa
File: 323830343a373831303a3a2f33392d3339203d3e20323731323138.roa (raw, json)
Hash identifier: 396jU4rNmgNyKqKzMZvmA/0nTpjFu0Vqcs6py+fOVMM=
Subject key identifier: 59:B1:31:03:DA:CE:BC:C7:5B:34:37:18:E3:85:61:66:F0:E3:16:47
Certificate issuer: /CN=DCB53E62EFFCC56D78326139F412421505075D1F
Certificate serial: 501C2AEA5996BF697C5DAE9CD48F3D0F375A4D4F
Authority key identifier: DC:B5:3E:62:EF:FC:C5:6D:78:32:61:39:F4:12:42:15:05:07:5D:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCB53E62EFFCC56D78326139F412421505075D1F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/323830343a373831303a3a2f33392d3339203d3e20323731323138.roa
Signing time: Thu 18 Dec 2025 21:23:50 +0000
ROA not before: Thu 18 Dec 2025 21:18:50 +0000
ROA not after: Thu 17 Dec 2026 21:23:50 +0000
asID: 271218
IP address blocks: 2804:7810::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/DCB53E62EFFCC56D78326139F412421505075D1F.crl
rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/DCB53E62EFFCC56D78326139F412421505075D1F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCB53E62EFFCC56D78326139F412421505075D1F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 16:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1c:2a:ea:59:96:bf:69:7c:5d:ae:9c:d4:8f:3d:0f:37:5a:4d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCB53E62EFFCC56D78326139F412421505075D1F
Validity
Not Before: Dec 18 21:18:50 2025 GMT
Not After : Dec 17 21:23:50 2026 GMT
Subject: CN=59B13103DACEBCC75B343718E3856166F0E31647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:69:84:63:e6:ab:42:56:5e:28:8a:c4:90:
94:63:6d:67:59:a7:be:f7:83:d3:e2:ff:9a:67:c7:
e6:7d:1c:c7:57:b0:fc:23:e8:16:18:03:18:fd:74:
c3:bd:42:3b:43:c6:33:9b:5d:24:f9:ac:ab:1f:a5:
f8:e6:22:91:5c:6e:2e:31:26:cd:21:07:bd:d4:1d:
d1:62:47:d8:47:d0:8a:23:97:a3:bf:1c:6a:52:21:
a1:e6:3a:3b:86:71:db:35:de:8a:40:14:ce:b1:85:
a5:cf:d7:5e:c5:89:b2:24:0c:55:e4:b7:dd:42:6d:
90:32:c5:8e:88:11:43:51:2b:d4:0b:73:d2:88:77:
6b:a3:5d:39:08:8e:8a:01:5e:7e:e0:4b:f6:e5:43:
14:f8:b0:87:82:95:96:03:90:46:dc:0b:38:b7:c7:
10:65:7d:14:aa:f5:f1:12:3c:66:57:8e:4b:46:10:
c9:f6:69:6b:d1:c8:85:44:52:9c:c1:b4:9a:c1:df:
ca:d3:ca:3b:44:ea:e7:98:5b:73:e3:c2:44:04:79:
47:65:7c:6b:7e:8f:3f:e2:a6:4f:fd:7a:a7:e0:3a:
49:1b:4f:74:a7:da:60:1a:9d:76:5e:11:ba:a5:09:
a4:17:62:9c:54:e0:76:9d:90:b1:47:8c:29:85:76:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:31:03:DA:CE:BC:C7:5B:34:37:18:E3:85:61:66:F0:E3:16:47
X509v3 Authority Key Identifier:
keyid:DC:B5:3E:62:EF:FC:C5:6D:78:32:61:39:F4:12:42:15:05:07:5D:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/DCB53E62EFFCC56D78326139F412421505075D1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCB53E62EFFCC56D78326139F412421505075D1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/323830343a373831303a3a2f33392d3339203d3e20323731323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7810::/39
Signature Algorithm: sha256WithRSAEncryption
37:ea:12:d9:ab:f1:56:28:84:80:22:79:9c:9d:84:b1:1a:e7:
fb:82:3a:6d:38:a4:bd:cf:1d:ef:3a:09:1c:b3:2a:00:dd:ac:
e0:57:7a:62:f5:ea:75:73:8d:5a:17:54:13:ba:2e:6e:b1:0a:
ff:69:b6:9c:b5:21:15:f9:cc:00:29:60:fb:bb:9f:af:5a:35:
84:fa:a9:1b:96:23:a5:d0:c5:2b:d4:79:c0:c0:da:93:1c:d6:
a2:1f:ca:39:23:49:a8:66:f5:85:6f:78:f4:af:e9:19:4e:5b:
4a:cb:50:aa:91:d0:d5:c9:e5:68:3f:b4:25:4a:bf:6a:aa:53:
aa:7c:15:f4:d9:92:24:79:f3:92:e4:fe:ed:1f:fc:28:fb:48:
37:72:b8:f7:89:03:49:92:27:f7:14:c9:48:da:4a:aa:9b:04:
e0:a9:09:51:53:82:b9:3a:53:82:da:be:fb:1f:a4:64:40:d8:
0a:86:92:36:8d:74:bc:93:8f:9f:86:62:c6:27:f1:9e:de:83:
8e:1a:af:14:23:2d:27:06:86:2f:fc:02:b4:ab:e7:a9:30:5b:
b9:4b:6a:cd:d5:6f:25:55:c0:6d:b6:19:b2:97:8d:b4:76:f9:
cc:28:5d:81:99:8d:6f:e3:8e:df:2e:7f:10:e8:01:66:4b:bb:
b5:91:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:31 2025 by rpki-client