This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d313238203d3e203631363735.roa
File: 323830343a316363383a3a2f33322d313238203d3e203631363735.roa (raw, json)
Hash identifier: lGt0r3mjw0bF0sbVize3jhnrBFJO2nWiHj7MQtSMACQ=
Subject key identifier: 93:A1:07:45:CC:D0:F1:6D:3F:45:47:5B:F3:39:55:EF:54:0B:B5:3C
Certificate issuer: /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial: 2A4B879398F765A7119AE20AFB8DA80AE2BC45BB
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d313238203d3e203631363735.roa
Signing time: Mon 29 Dec 2025 21:20:42 +0000
ROA not before: Mon 29 Dec 2025 21:15:42 +0000
ROA not after: Mon 28 Dec 2026 21:20:42 +0000
asID: 61675
IP address blocks: 2804:1cc8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 03 Jan 2026 01:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4b:87:93:98:f7:65:a7:11:9a:e2:0a:fb:8d:a8:0a:e2:bc:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
Validity
Not Before: Dec 29 21:15:42 2025 GMT
Not After : Dec 28 21:20:42 2026 GMT
Subject: CN=93A10745CCD0F16D3F45475BF33955EF540BB53C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:82:09:ce:c7:5b:bc:3a:e6:35:78:2c:bf:
ce:ba:66:44:c1:fc:f4:ea:b3:d6:1b:3c:25:4b:04:
9f:ed:81:54:30:f1:48:1b:bd:41:28:d4:dd:dd:33:
de:3f:28:4a:74:88:55:98:5f:7d:35:d8:8c:e4:77:
27:ac:64:bd:21:b7:8a:c1:6a:a0:af:95:17:c3:7c:
a1:11:c9:7b:6b:42:8f:8f:c5:98:b0:80:0a:1e:6b:
c3:c8:57:09:08:04:42:60:b3:56:4a:4a:a4:c1:68:
17:b6:d0:59:96:3e:e9:84:e6:92:bb:f4:15:71:8b:
21:e8:2b:10:5c:4c:46:2b:7c:39:52:0b:5f:b2:f1:
c9:0b:70:43:fa:28:db:46:98:40:dc:db:fc:d5:1c:
d1:7d:db:0c:2e:17:df:40:d5:64:7e:ac:03:22:57:
e8:4f:77:de:71:e5:72:11:b6:63:d2:c0:05:6c:d8:
86:4f:67:fb:9a:25:5a:eb:c2:53:12:f5:ec:f7:5f:
e7:60:48:5e:e6:0f:2c:00:36:74:8e:7f:ba:87:84:
ed:73:68:2f:b1:a8:5e:c1:9a:de:db:e4:3c:a4:c2:
06:47:f2:5e:36:e4:ef:83:c0:5b:15:c2:a1:f1:87:
46:6a:26:61:38:8b:a4:2b:ff:23:de:c9:d3:df:44:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:07:45:CC:D0:F1:6D:3F:45:47:5B:F3:39:55:EF:54:0B:B5:3C
X509v3 Authority Key Identifier:
keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d313238203d3e203631363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cc8::/32
Signature Algorithm: sha256WithRSAEncryption
3a:c3:9f:c3:dc:0a:58:94:cb:88:08:b4:07:16:a7:f4:d1:c6:
c7:d3:b5:28:26:e1:90:3b:e6:1f:3c:33:3f:05:54:9d:b2:57:
12:f5:3e:ce:e5:7d:bb:cf:83:fc:34:34:2a:7a:d0:bc:ef:94:
a8:7e:58:ab:34:0b:eb:6f:09:82:fd:a3:14:ad:d7:6e:10:90:
c0:e5:91:78:90:37:46:e0:d5:62:68:62:4a:ce:17:32:dd:38:
33:61:48:bf:9a:44:a9:9d:68:46:e2:9e:0b:46:10:24:ed:f4:
4f:00:8b:ac:9d:a0:2e:9a:57:4b:2e:c7:2d:56:08:91:9c:e6:
79:35:41:49:64:d5:9e:47:e1:5a:b7:d2:55:61:01:88:c3:da:
60:7f:08:eb:0e:45:b1:b2:d4:68:15:5e:0b:07:e4:c0:fb:3e:
e1:f9:f9:fa:03:74:20:a5:55:b7:1f:03:4b:31:98:f5:01:f4:
cc:79:6d:3d:df:10:31:3e:e9:97:91:bb:9c:6b:d1:4b:7e:b6:
19:0d:b1:f0:f5:0c:32:84:d7:8a:84:24:43:57:07:a5:78:4b:
e9:70:0c:04:f1:24:56:62:57:48:2d:d9:60:1f:1a:40:fe:c6:
08:92:13:5f:d0:02:24:59:1b:ce:83:87:b7:38:b7:05:f2:14:
5c:bb:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 13:17:26 2026 by rpki-client