This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa
File: 323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier: YTPafQOpXd12cPkmEiIp4qY6HjiGwF6sUPuci671QWA=
Subject key identifier: 5A:B5:AF:79:2E:F2:74:96:68:E5:39:48:A8:6A:CD:26:64:A4:96:07
Certificate issuer: /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial: 16ABD7893E90D5A3FD343F61593ABF197E42F2A2
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa
Signing time: Mon 22 Dec 2025 19:16:31 +0000
ROA not before: Mon 22 Dec 2025 19:11:31 +0000
ROA not after: Mon 21 Dec 2026 19:16:31 +0000
asID: 266268
IP address blocks: 2804:3d54:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 15:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ab:d7:89:3e:90:d5:a3:fd:34:3f:61:59:3a:bf:19:7e:42:f2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Validity
Not Before: Dec 22 19:11:31 2025 GMT
Not After : Dec 21 19:16:31 2026 GMT
Subject: CN=5AB5AF792EF2749668E53948A86ACD2664A49607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:76:bd:39:be:47:14:73:40:71:2b:2a:63:
5a:cb:b4:bd:e6:7a:79:25:b8:97:c3:ae:cc:54:14:
46:49:f2:b8:04:eb:0b:d3:2f:d0:44:17:83:cf:55:
80:a3:d3:e9:88:56:c3:26:41:7f:3c:08:59:9f:da:
89:34:d4:f1:4b:40:ad:9b:83:5c:ec:78:f2:9b:aa:
e4:d2:dd:9e:d3:76:57:32:f3:5e:32:69:ed:bd:4b:
5c:96:5d:78:56:07:5c:7b:f5:7f:a8:82:c1:fc:39:
ff:17:d2:d1:8b:19:f4:30:f5:12:c6:1e:34:ee:36:
df:35:77:7d:61:1a:8a:35:2b:8c:61:08:f6:bc:d6:
77:0e:42:b2:cc:db:67:b6:00:11:31:37:4f:90:19:
08:74:80:78:e7:7f:b1:a8:56:6a:5b:1b:6e:bd:f3:
0b:c0:af:91:e3:79:b1:ff:19:b4:c2:a3:0d:7a:e8:
1d:d9:b0:af:9e:76:c4:1c:1d:f6:ae:b2:f0:22:4c:
45:6e:d1:19:64:d0:51:24:bf:09:e2:b1:98:d7:80:
87:3e:f1:db:cd:c7:9e:68:06:22:4d:0c:ec:1a:8b:
09:bd:30:2a:37:b2:fb:12:3f:28:26:fc:eb:bd:2f:
c0:f5:0d:c2:5f:29:72:1a:3d:29:65:5c:75:80:8e:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:AF:79:2E:F2:74:96:68:E5:39:48:A8:6A:CD:26:64:A4:96:07
X509v3 Authority Key Identifier:
keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d54:4000::/36
Signature Algorithm: sha256WithRSAEncryption
37:3d:f4:cc:1a:1a:36:0d:c9:22:34:ec:75:e8:99:60:6d:64:
3a:80:82:2b:20:de:d6:05:0a:b0:fd:2b:ca:42:64:31:20:dd:
0b:23:bf:9d:2c:db:80:d6:ca:80:c8:93:93:44:ab:46:5f:10:
dc:8e:41:75:e3:15:70:33:bd:e4:b9:af:55:af:84:dd:a4:6e:
ec:47:82:b7:cc:6e:d7:ae:67:97:05:88:75:ac:fd:89:ed:21:
64:9a:ae:9b:54:05:66:18:d8:66:e9:cf:fe:ad:d3:9a:df:14:
60:4a:85:41:c1:92:5b:c5:14:03:67:94:34:f8:e9:ff:30:6c:
2a:d7:c5:a5:03:6e:fd:e5:98:c9:6e:d9:95:77:0d:7d:a2:ef:
1c:1a:74:76:0f:3c:2a:75:f6:4f:0b:5c:18:13:4a:3d:b0:04:
52:4d:e9:e7:dd:fe:74:34:63:fe:9f:43:52:76:57:a2:1a:91:
59:45:d9:04:be:ca:16:10:d8:ea:85:38:5e:06:d3:1a:ec:31:
d4:3b:c5:0b:55:4c:91:78:ec:1f:85:cc:68:c0:8b:23:d6:76:
e6:e7:a0:e5:13:4c:72:43:38:92:7a:8e:37:f7:a0:f7:dc:71:
cf:2d:32:97:c1:f6:e7:b7:33:2c:27:6d:55:63:09:95:90:b3:
9e:cc:d6:72
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFqvXiT6Q1aP9ND9hWTq/GX5C8qIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlENzM2ODQxQjA2MzhCM0RGQUI4OTcxRUVCQjRBRUVG
MjU2MUYxNTAeFw0yNTEyMjIxOTExMzFaFw0yNjEyMjExOTE2MzFaMDMxMTAvBgNV
BAMTKDVBQjVBRjc5MkVGMjc0OTY2OEU1Mzk0OEE4NkFDRDI2NjRBNDk2MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ana9Ob5HFHNAcSsqY1rLtL3m
enkluJfDrsxUFEZJ8rgE6wvTL9BEF4PPVYCj0+mIVsMmQX88CFmf2ok01PFLQK2b
g1zsePKbquTS3Z7Tdlcy814yae29S1yWXXhWB1x79X+ogsH8Of8X0tGLGfQw9RLG
HjTuNt81d31hGoo1K4xhCPa81ncOQrLM22e2ABExN0+QGQh0gHjnf7GoVmpbG269
8wvAr5HjebH/GbTCow166B3ZsK+edsQcHfausvAiTEVu0Rlk0FEkvwnisZjXgIc+
8dvNx55oBiJNDOwaiwm9MCo3svsSPygm/Ou9L8D1DcJfKXIaPSllXHWAjsNVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWrWveS7ydJZo5TlIqGrNJmSklgcwHwYDVR0j
BBgwFoAUqdc2hBsGOLPfq4lx7rtK7vJWHxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC9BOUQ3MzY4NDFCMDYzOEIzREZBQjg5NzFFRUJCNEFFRUYyNTYxRjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RDczNjg0MUIwNjM4QjNE
RkFCODk3MUVFQkI0QUVFRjI1NjFGMTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv
MzIzODMwMzQzYTMzNjQzNTM0M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjMyMzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEPVRAMA0GCSqGSIb3DQEBCwUA
A4IBAQA3PfTMGho2DckiNOx16JlgbWQ6gIIrIN7WBQqw/SvKQmQxIN0LI7+dLNuA
1sqAyJOTRKtGXxDcjkF14xVwM73kua9Vr4TdpG7sR4K3zG7XrmeXBYh1rP2J7SFk
mq6bVAVmGNhm6c/+rdOa3xRgSoVBwZJbxRQDZ5Q0+On/MGwq18WlA2795ZjJbtmV
dw19ou8cGnR2DzwqdfZPC1wYE0o9sARSTenn3f50NGP+n0NSdleiGpFZRdkEvsoW
ENjqhTheBtMa7DHUO8ULVUyReOwfhcxowIsj1nbm56DlE0xyQziSeo4396D33HHP
LTKXwfbntzMsJ21VYwmVkLOezNZy
-----END CERTIFICATE-----
Generated at Tue Dec 23 23:53:34 2025 by rpki-client