This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa
File: 323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa (raw, json)
Hash identifier: e3vTrBQhQ7nmHiIWrQQqSAx9Tko3IockjT2NdAwNep8=
Subject key identifier: 99:77:12:AC:92:A7:1D:DD:77:3E:C2:A4:1F:D8:DB:25:D6:D0:49:79
Certificate issuer: /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial: 1DAD0725BDECE1857CFD298482E6E07698086194
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa
Signing time: Mon 22 Dec 2025 19:16:42 +0000
ROA not before: Mon 22 Dec 2025 19:11:42 +0000
ROA not after: Mon 21 Dec 2026 19:16:42 +0000
asID: 266268
IP address blocks: 2804:3d54:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 15:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ad:07:25:bd:ec:e1:85:7c:fd:29:84:82:e6:e0:76:98:08:61:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Validity
Not Before: Dec 22 19:11:42 2025 GMT
Not After : Dec 21 19:16:42 2026 GMT
Subject: CN=997712AC92A71DDD773EC2A41FD8DB25D6D04979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:1c:78:17:18:5a:d5:2f:67:eb:0c:a6:62:
47:af:b1:30:d3:84:49:ec:87:0a:31:98:4a:1f:e8:
dc:7b:0d:1f:3d:81:cf:2f:3f:0d:81:9e:f4:90:1f:
de:cd:bc:ca:72:a7:5d:8c:13:03:38:e6:ad:1d:1f:
b6:b2:c3:e7:90:9d:e7:e1:13:37:99:f7:ae:b0:eb:
65:d5:f9:fb:9b:7d:15:af:70:79:79:df:42:1d:da:
3e:aa:42:8d:ad:7c:f4:c6:58:c9:b4:2f:09:b0:9a:
a8:79:37:6f:59:99:e1:1c:ff:6f:f9:c8:87:3a:24:
ce:29:f5:f9:4b:d8:1c:83:79:b6:da:5a:72:0a:87:
71:09:53:7e:6a:45:f1:fd:5d:6c:32:7b:95:bc:31:
89:99:31:82:6c:42:47:a2:96:74:c2:6f:2f:27:3c:
a7:e2:2e:ba:b0:21:f4:f9:28:61:05:78:73:3a:5a:
ce:70:6c:af:2f:87:37:9b:4f:5e:7c:2f:74:0d:78:
9b:4b:f0:64:43:6e:7b:d7:32:3e:eb:11:82:eb:fb:
e8:f4:40:25:69:3e:ad:25:61:83:e3:34:4f:7b:de:
d6:a1:a2:34:72:8b:4d:a2:ed:7f:9c:6c:f5:d7:fb:
be:41:50:ff:1a:96:c9:81:e5:49:49:df:dd:cb:13:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:12:AC:92:A7:1D:DD:77:3E:C2:A4:1F:D8:DB:25:D6:D0:49:79
X509v3 Authority Key Identifier:
keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d54:8000::/33
Signature Algorithm: sha256WithRSAEncryption
14:ba:16:81:fd:32:26:1b:8a:46:e8:35:4d:c2:9f:76:55:10:
43:38:e6:98:f7:91:c6:ea:a7:36:2b:98:e7:be:43:69:41:a7:
cb:a0:91:14:9c:c8:6a:40:72:62:5a:7e:0b:e0:43:41:69:8b:
13:94:2f:a6:9e:cc:62:94:b0:8c:3e:31:ef:6f:d4:8f:e8:36:
21:3e:b5:f7:44:49:8e:05:64:0a:2b:94:ff:2c:1a:7a:5a:55:
a4:6e:ed:6d:10:4c:8e:08:e6:c3:7d:ea:be:33:c2:c3:65:f8:
01:8c:d2:9d:6f:1f:01:47:5a:b1:f3:ce:83:1b:9e:90:a6:47:
82:1e:fe:a1:ad:ec:8e:93:5b:81:9e:d7:97:28:4e:e1:11:3f:
f9:6a:ac:64:39:8e:c9:69:31:5b:32:a5:fd:d3:a4:83:3b:ae:
d0:4a:49:b4:50:77:86:92:9e:8a:e8:c6:e8:b4:cc:f7:54:e2:
c6:84:d4:04:bd:44:5f:d1:ab:ec:4c:21:9f:2e:a4:1f:6f:2e:
f8:cf:a3:89:0a:fd:49:00:10:ba:57:58:f8:fb:17:88:9e:fb:
96:b8:de:ed:bc:c1:cb:4a:9b:34:93:d7:55:75:fa:80:af:bd:
12:79:cb:96:d4:97:59:eb:df:56:eb:27:38:2f:08:53:72:1d:
36:30:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:36:29 2025 by rpki-client