This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a383030303a3a2f33332d3333203d3e20323638303131.roa
File: 323830343a353639383a383030303a3a2f33332d3333203d3e20323638303131.roa (raw, json)
Hash identifier: gfE7BL26G2JREMNMFG5RG+uKbhuXxoTSZm1PsfW+2Fw=
Subject key identifier: D5:AC:BA:DD:0D:80:26:0C:15:06:43:A3:88:37:3A:A6:44:17:D0:84
Certificate issuer: /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial: 33FEF47AED19C8AB2A4104144357042A248E7E8B
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a383030303a3a2f33332d3333203d3e20323638303131.roa
Signing time: Fri 12 Dec 2025 13:31:58 +0000
ROA not before: Fri 12 Dec 2025 13:26:58 +0000
ROA not after: Fri 11 Dec 2026 13:31:58 +0000
asID: 268011
IP address blocks: 2804:5698:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 19:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fe:f4:7a:ed:19:c8:ab:2a:41:04:14:43:57:04:2a:24:8e:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Validity
Not Before: Dec 12 13:26:58 2025 GMT
Not After : Dec 11 13:31:58 2026 GMT
Subject: CN=D5ACBADD0D80260C150643A388373AA64417D084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:01:9c:a9:2d:f9:11:b7:d6:5c:a6:4e:aa:
1c:e3:a7:47:da:49:f6:0e:26:0f:34:41:4d:c5:90:
c9:ed:e6:ab:ac:6f:da:f0:5b:09:96:63:28:f3:98:
c4:57:5d:d7:5b:58:d4:e5:02:10:4f:88:00:12:ba:
f0:8d:28:be:5d:0a:63:c0:6b:98:bc:c6:92:37:f1:
ca:33:a4:ff:a9:04:8c:70:81:73:73:e7:7f:38:14:
1c:46:31:6f:9d:7b:2a:a4:7c:ce:68:87:97:ae:09:
62:2a:bb:2d:50:9d:14:16:5f:d8:21:28:5d:db:65:
fc:98:94:13:d2:11:67:1e:b3:74:0e:24:19:5e:3d:
46:35:2d:92:64:e5:3a:85:96:a5:c4:81:05:71:ef:
5f:22:e4:ee:0a:37:ca:b3:a9:5c:d1:51:ae:02:26:
90:71:ea:61:4e:ed:8b:b1:d7:19:51:db:60:67:6a:
f9:3e:43:1c:52:78:f8:b1:65:20:b6:98:50:ff:54:
df:0f:90:68:9e:83:df:4f:25:ec:4d:52:75:00:87:
3f:ee:31:1a:a1:a7:a5:1a:7e:34:a7:fb:a0:88:7e:
5c:06:88:48:5e:5d:98:43:fb:06:e1:aa:44:9e:48:
77:eb:3a:16:28:66:f4:e5:80:f6:a7:06:da:d0:7b:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:BA:DD:0D:80:26:0C:15:06:43:A3:88:37:3A:A6:44:17:D0:84
X509v3 Authority Key Identifier:
keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a383030303a3a2f33332d3333203d3e20323638303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5698:8000::/33
Signature Algorithm: sha256WithRSAEncryption
17:ad:f0:95:b8:82:6d:99:74:79:82:c2:42:9b:6d:d3:30:46:
3b:20:0c:00:a0:e2:d6:35:86:56:7f:b2:fa:1e:4c:38:3b:61:
d4:11:45:99:71:20:08:bf:f4:79:05:9b:50:aa:60:ed:34:bc:
ef:dc:21:98:0f:89:46:60:e7:23:e9:2e:0d:4c:b7:d7:f7:a2:
fe:bd:3f:2a:6e:0b:5c:c1:76:82:b4:d3:df:12:18:2c:41:5d:
67:1b:44:11:e5:45:50:07:da:d0:c1:1d:bf:4a:a0:2e:dc:a5:
1c:01:73:cd:62:99:f0:23:02:d1:9e:46:44:8b:4c:d7:63:f2:
f2:50:ed:22:34:6a:b5:85:03:a3:6c:53:64:ee:f4:18:7c:f0:
bf:bd:cb:6e:f7:34:2f:79:d5:56:21:49:a7:61:c4:01:1c:c0:
2d:3f:93:d2:7d:c9:3e:6a:b0:c8:5d:56:97:01:6e:6c:e2:92:
ca:6e:02:46:10:44:c6:d7:ce:d8:98:a0:48:1a:01:31:99:86:
d4:e4:88:6f:cf:15:d6:91:ff:37:cc:12:d7:3d:7e:73:1a:44:
53:4d:51:19:a2:92:77:02:ee:53:48:92:9c:50:d6:a7:e8:e7:
44:47:36:2f:de:98:43:6a:2c:bf:bb:97:a3:73:03:aa:ff:64:
bd:32:6a:84
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUM/70eu0ZyKsqQQQUQ1cEKiSOfoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERG
N0JCMEY0QTAeFw0yNTEyMTIxMzI2NThaFw0yNjEyMTExMzMxNThaMDMxMTAvBgNV
BAMTKEQ1QUNCQUREMEQ4MDI2MEMxNTA2NDNBMzg4MzczQUE2NDQxN0QwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgAGcqS35EbfWXKZOqhzjp0fa
SfYOJg80QU3FkMnt5qusb9rwWwmWYyjzmMRXXddbWNTlAhBPiAASuvCNKL5dCmPA
a5i8xpI38cozpP+pBIxwgXNz5384FBxGMW+deyqkfM5oh5euCWIquy1QnRQWX9gh
KF3bZfyYlBPSEWces3QOJBlePUY1LZJk5TqFlqXEgQVx718i5O4KN8qzqVzRUa4C
JpBx6mFO7Yux1xlR22Bnavk+QxxSePixZSC2mFD/VN8PkGieg99PJexNUnUAhz/u
MRqhp6UafjSn+6CIflwGiEheXZhD+wbhqkSeSHfrOhYoZvTlgPanBtrQe1sVAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU1ay63Q2AJgwVBkOjiDc6pkQX0IQwHwYDVR0j
BBgwFoAUewIxZUHJ8XBIQhQlnmwCjfe7D0owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0
LzEvN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERGN0JCMEY0QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QjAyMzE2NTQxQzlGMTcwNDg0
MjE0MjU5RTZDMDI4REY3QkIwRjRBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0LzEvMzIz
ODMwMzQzYTM1MzYzOTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2Uy
MDMyMzYzODMwMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEVpiAMA0GCSqGSIb3DQEBCwUAA4IB
AQAXrfCVuIJtmXR5gsJCm23TMEY7IAwAoOLWNYZWf7L6Hkw4O2HUEUWZcSAIv/R5
BZtQqmDtNLzv3CGYD4lGYOcj6S4NTLfX96L+vT8qbgtcwXaCtNPfEhgsQV1nG0QR
5UVQB9rQwR2/SqAu3KUcAXPNYpnwIwLRnkZEi0zXY/LyUO0iNGq1hQOjbFNk7vQY
fPC/vctu9zQvedVWIUmnYcQBHMAtP5PSfck+arDIXVaXAW5s4pLKbgJGEETG187Y
mKBIGgExmYbU5IhvzxXWkf83zBLXPX5zGkRTTVEZopJ3Au5TSJKcUNan6OdERzYv
3phDaiy/u5ejcwOq/2S9MmqE
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:44:17 2025 by rpki-client