This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33332d3333203d3e20323638303131.roa
File: 323830343a353639383a3a2f33332d3333203d3e20323638303131.roa (raw, json)
Hash identifier: 0IIy27T1CKjCJSc/LwFfDNNzY5wBVj/SHYZh08zNFoI=
Subject key identifier: 91:65:97:90:98:96:AF:E7:35:AD:DF:BB:51:C6:E0:4B:93:13:D8:01
Certificate issuer: /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial: 2A5B4F3AAC6BCEC57E01AEAA628A4132FA864B1B
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33332d3333203d3e20323638303131.roa
Signing time: Fri 12 Dec 2025 13:31:34 +0000
ROA not before: Fri 12 Dec 2025 13:26:34 +0000
ROA not after: Fri 11 Dec 2026 13:31:34 +0000
asID: 268011
IP address blocks: 2804:5698::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 01:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5b:4f:3a:ac:6b:ce:c5:7e:01:ae:aa:62:8a:41:32:fa:86:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Validity
Not Before: Dec 12 13:26:34 2025 GMT
Not After : Dec 11 13:31:34 2026 GMT
Subject: CN=916597909896AFE735ADDFBB51C6E04B9313D801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:fa:cc:20:34:a6:78:d4:6f:e7:a7:eb:69:
31:c5:e6:86:90:bf:19:67:20:f1:4f:63:a9:88:a6:
99:5e:0c:76:56:31:ca:b3:91:61:75:28:6d:60:e8:
94:31:9f:9c:29:67:40:0d:8b:37:62:ec:52:5e:9e:
61:9c:68:c5:04:79:cc:40:20:99:b7:0b:ea:07:a2:
69:c7:c1:83:63:1e:90:9c:c8:76:1e:3d:38:c8:17:
f8:ab:bf:93:0c:79:24:71:f4:80:c1:bf:7a:66:49:
96:12:90:2f:2c:f1:1c:b8:0a:c4:5f:0d:66:d0:27:
42:fa:fe:9f:b9:9f:23:5e:b6:9c:e3:ce:1a:b3:c0:
4d:0d:92:9b:22:27:ce:ff:38:91:6b:b7:8c:07:de:
79:63:cd:49:fa:a9:a8:37:a2:c4:d2:e2:c4:ec:d2:
09:fa:94:33:74:56:bb:11:5b:e1:ca:ef:41:4d:58:
dc:9d:fe:a3:2b:76:f2:7f:13:00:06:93:aa:dd:46:
e4:ef:69:17:5f:fe:75:89:a8:e7:2f:7e:ec:d6:3b:
c2:67:7c:03:d2:6a:27:bb:34:28:c6:39:8a:b8:09:
6a:cd:d5:a3:50:85:2d:1f:7e:b6:3d:49:8e:80:0e:
c0:7d:e3:ca:24:25:f2:14:f1:5e:c0:17:e7:d8:bb:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:97:90:98:96:AF:E7:35:AD:DF:BB:51:C6:E0:4B:93:13:D8:01
X509v3 Authority Key Identifier:
keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33332d3333203d3e20323638303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5698::/33
Signature Algorithm: sha256WithRSAEncryption
3b:de:ac:b6:12:1e:72:48:a0:0b:d3:4d:d6:a0:b5:70:9b:67:
46:94:6f:7f:f8:ba:5d:3d:b7:d6:64:6c:8e:79:df:2e:15:1f:
25:df:27:aa:4e:c7:8e:5a:9c:cd:41:f3:f7:a1:de:3e:ad:92:
0c:7a:29:7f:16:53:be:dc:51:6a:29:d3:69:25:31:7e:fe:2f:
e9:bc:a9:e7:22:f0:aa:8d:70:85:43:bd:f9:79:fb:e1:29:ed:
40:6f:41:98:d7:23:35:9a:c3:28:45:dc:7d:35:36:0a:2f:62:
41:a6:f8:3d:85:85:76:c7:63:9b:b7:76:82:69:82:06:ee:e9:
17:98:a0:31:72:c7:5a:bb:bb:35:5d:34:02:2b:9b:80:f3:dd:
8f:a7:69:64:60:fc:af:c9:31:f5:4d:c6:b6:4e:4a:11:68:e5:
84:48:76:4a:20:d2:3e:24:3b:40:d9:c5:d7:b9:d4:56:83:4b:
60:ba:ab:f5:15:35:92:37:99:b0:c6:34:eb:f6:72:2f:32:73:
4a:e3:85:71:0e:c1:b4:e0:d7:42:6c:1e:dc:df:98:1b:6f:70:
8a:5b:93:1f:0c:01:57:d7:15:d3:eb:16:a3:21:75:a7:de:2e:
f9:7d:fe:4d:51:25:b6:1c:bd:18:bf:5b:49:c7:69:49:29:91:
43:a8:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:49:25 2025 by rpki-client