This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa
File: 323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa (raw, json)
Hash identifier: 4l2kEkGEoDRBPlC0TzGX9k5PVTQQDl4swbUGEXUxjFs=
Subject key identifier: 35:98:8F:35:6E:8B:40:6C:AE:79:DC:BB:91:BF:51:9D:6E:3E:24:3D
Certificate issuer: /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial: 2CC19E5BC58CA9A8A268AA4806394092C3A648C8
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa
Signing time: Tue 06 Jan 2026 04:17:07 +0000
ROA not before: Tue 06 Jan 2026 04:12:07 +0000
ROA not after: Tue 05 Jan 2027 04:17:07 +0000
asID: 271394
IP address blocks: 2804:7ad4:e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 00:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c1:9e:5b:c5:8c:a9:a8:a2:68:aa:48:06:39:40:92:c3:a6:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Validity
Not Before: Jan 6 04:12:07 2026 GMT
Not After : Jan 5 04:17:07 2027 GMT
Subject: CN=35988F356E8B406CAE79DCBB91BF519D6E3E243D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:1d:58:ff:6d:3e:4b:26:e9:30:6c:01:d3:
79:e1:d5:18:b0:b1:45:e2:a4:77:77:89:95:06:e2:
0c:b9:92:4b:3b:f6:e9:9d:2f:d8:42:1b:6a:f7:ef:
1a:2a:be:40:b3:67:99:3f:92:89:f1:2e:aa:a8:98:
cc:3f:ee:03:db:60:58:d8:93:55:32:c1:88:06:94:
87:20:f3:1e:18:91:12:a1:60:f0:91:dd:c3:a8:07:
5e:9f:94:f1:ca:9a:c3:29:cd:56:2b:4c:5d:8a:b2:
94:ef:61:d0:98:29:43:e6:a1:d3:91:32:4e:50:02:
7b:49:eb:55:3c:64:7e:86:72:92:dd:4c:c9:3a:83:
6c:11:98:5c:2c:b3:1b:97:a4:6c:b1:e6:eb:49:14:
e0:e7:12:db:83:97:23:42:d5:4d:7c:1e:04:09:c1:
0c:db:cf:90:8d:4a:32:9f:a3:10:46:23:7f:01:ba:
78:28:91:da:a9:1f:33:8f:8c:cd:c1:8c:57:3e:aa:
63:63:39:60:3a:66:be:22:ab:ae:c8:5b:b7:55:30:
44:54:be:8a:d8:7e:bb:ef:77:1e:ea:e7:e5:f0:6e:
2e:38:21:cd:02:74:a7:4f:66:96:b7:4d:c3:a0:f8:
ed:a5:59:6a:f8:87:58:6e:37:26:52:20:e5:0c:30:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:8F:35:6E:8B:40:6C:AE:79:DC:BB:91:BF:51:9D:6E:3E:24:3D
X509v3 Authority Key Identifier:
keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ad4:e00::/40
Signature Algorithm: sha256WithRSAEncryption
42:70:35:f4:09:01:ae:f2:55:7a:4c:73:b7:47:b1:a9:25:96:
4b:5e:50:a6:df:b1:f4:24:1e:fb:8b:11:96:ae:94:c0:5a:a9:
ef:93:2c:f8:e2:56:7d:ff:dd:c8:e5:59:9d:06:56:58:4d:ca:
05:c5:11:aa:cd:27:1f:79:ab:e9:ea:53:88:eb:1f:43:39:90:
f0:db:c8:90:b6:6f:3a:dc:e1:4e:2f:40:9d:93:eb:31:9b:7e:
d9:6f:27:27:96:a4:f1:e9:19:e0:89:ca:df:5b:d8:5e:7b:4e:
50:fe:8e:3a:f4:d2:8e:0e:c7:19:0d:c1:33:cc:e1:2f:2b:bc:
99:9c:42:8a:5b:5c:a9:49:bd:1e:82:83:9c:78:71:ee:04:da:
d0:c7:03:63:12:0d:de:a8:3d:c0:71:6f:7c:2d:a5:d7:b0:6e:
66:f0:9b:3e:4e:ff:1a:b9:4c:f4:8a:3f:a3:45:da:d2:c1:28:
de:91:40:eb:35:54:6b:9e:84:4a:78:14:27:e5:09:20:57:6a:
ac:34:1d:eb:90:a5:04:1a:f8:f4:06:b8:f3:cb:5e:4a:ed:f1:
9e:bb:2c:b1:89:f0:61:62:de:a8:da:cc:00:76:f2:7d:9b:56:
bb:56:40:44:4c:b4:2a:39:77:65:ba:31:85:d9:1d:aa:5d:01:
6e:01:7e:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULMGeW8WMqaiiaKpIBjlAksOmSMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyNzFGMjQyREYwRDg2MTdFOEQ3NTk3MjgzRUI2MEJE
Qjg2QzJGRDAeFw0yNjAxMDYwNDEyMDdaFw0yNzAxMDUwNDE3MDdaMDMxMTAvBgNV
BAMTKDM1OTg4RjM1NkU4QjQwNkNBRTc5RENCQjkxQkY1MTlENkUzRTI0M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqB1Y/20+SybpMGwB03nh1Riw
sUXipHd3iZUG4gy5kks79umdL9hCG2r37xoqvkCzZ5k/konxLqqomMw/7gPbYFjY
k1UywYgGlIcg8x4YkRKhYPCR3cOoB16flPHKmsMpzVYrTF2KspTvYdCYKUPmodOR
Mk5QAntJ61U8ZH6GcpLdTMk6g2wRmFwssxuXpGyx5utJFODnEtuDlyNC1U18HgQJ
wQzbz5CNSjKfoxBGI38BungokdqpHzOPjM3BjFc+qmNjOWA6Zr4iq67IW7dVMERU
vorYfrvvdx7q5+Xwbi44Ic0CdKdPZpa3TcOg+O2lWWr4h1huNyZSIOUMMPlBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNZiPNW6LQGyuedy7kb9RnW4+JD0wHwYDVR0j
BBgwFoAU3ScfJC3w2GF+jXWXKD62C9uGwv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2lubnBuU3hneTZSYTZra0dkNnZmNGV2eGRYZ0hYOXM1VnVHVGc4eHNR
bkgvMC9ERDI3MUYyNDJERjBEODYxN0U4RDc1OTcyODNFQjYwQkRCODZDMkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMjcxRjI0MkRGMEQ4NjE3
RThENzU5NzI4M0VCNjBCREI4NkMyRkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzdpbm5wblN4Z3k2UmE2a2tHZDZ2ZjRldnhkWGdIWDlzNVZ1R1RnOHhzUW5ILzAv
MzIzODMwMzQzYTM3NjE2NDM0M2E2NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzEzMzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBHrUDjANBgkqhkiG9w0BAQsFAAOC
AQEAQnA19AkBrvJVekxzt0exqSWWS15Qpt+x9CQe+4sRlq6UwFqp75Ms+OJWff/d
yOVZnQZWWE3KBcURqs0nH3mr6epTiOsfQzmQ8NvIkLZvOtzhTi9AnZPrMZt+2W8n
J5ak8ekZ4InK31vYXntOUP6OOvTSjg7HGQ3BM8zhLyu8mZxCiltcqUm9HoKDnHhx
7gTa0McDYxIN3qg9wHFvfC2l17BuZvCbPk7/GrlM9Io/o0Xa0sEo3pFA6zVUa56E
SngUJ+UJIFdqrDQd65ClBBr49Aa488teSu3xnrsssYnwYWLeqNrMAHbyfZtWu1ZA
REy0Kjl3Zboxhdkdql0BbgF+RA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:47:25 2026 by rpki-client