This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33362d3336203d3e20323636323638.roa
File: 323830343a336435343a383030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier: kMxYeKwiIvhpGdSRxUThniAs8pwtY5bWvKvatZYtIPU=
Subject key identifier: 30:2D:2A:09:B0:1E:CC:52:BC:23:1E:E4:A9:48:39:98:F7:44:B3:9B
Certificate issuer: /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial: 039DB0729DF491C9925A9519C3677B114F402BDD
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33362d3336203d3e20323636323638.roa
Signing time: Mon 22 Dec 2025 19:16:42 +0000
ROA not before: Mon 22 Dec 2025 19:11:42 +0000
ROA not after: Mon 21 Dec 2026 19:16:42 +0000
asID: 266268
IP address blocks: 2804:3d54:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 15:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9d:b0:72:9d:f4:91:c9:92:5a:95:19:c3:67:7b:11:4f:40:2b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Validity
Not Before: Dec 22 19:11:42 2025 GMT
Not After : Dec 21 19:16:42 2026 GMT
Subject: CN=302D2A09B01ECC52BC231EE4A9483998F744B39B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:12:32:10:e9:42:be:c0:6e:d8:04:bb:f2:
d1:4c:8f:e4:60:4a:1c:58:43:09:d6:c0:f5:7a:ef:
b9:82:6c:61:82:01:78:41:16:23:02:4e:e7:49:af:
00:04:49:da:3b:94:62:04:12:0f:ae:d7:13:e3:20:
40:f5:97:d7:bb:aa:4b:1e:7f:b8:b7:ee:d8:7e:32:
b4:49:58:c8:f3:e2:88:ce:0e:64:33:18:fa:b5:81:
96:08:97:5e:3c:cb:22:d4:d1:b0:98:03:c2:af:c7:
33:1e:3d:69:50:0e:9b:2d:46:69:7d:28:df:12:dc:
c6:a1:61:80:a6:ab:10:3f:ea:bf:e1:39:73:fa:03:
49:30:7f:19:85:31:b9:cb:d8:7a:e5:cf:72:c6:ef:
fc:72:d6:84:0f:51:4d:14:ec:9b:a6:e1:b4:d5:85:
a0:b2:a3:33:95:56:21:cf:6d:70:40:da:a5:63:06:
75:90:f4:bc:9e:91:5e:15:1f:31:47:78:84:dc:8c:
89:89:f4:4a:7d:8c:f3:89:a1:45:72:f6:e5:2f:cd:
17:0b:42:2a:34:11:85:c4:30:d7:21:57:0f:e4:ba:
57:32:a2:af:ae:0e:c6:b8:0c:f1:d2:57:48:43:d9:
7a:d3:86:25:2b:95:62:96:dc:a1:ab:c5:a8:73:a7:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:2A:09:B0:1E:CC:52:BC:23:1E:E4:A9:48:39:98:F7:44:B3:9B
X509v3 Authority Key Identifier:
keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33362d3336203d3e20323636323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d54:8000::/36
Signature Algorithm: sha256WithRSAEncryption
11:9e:65:c0:13:e8:0f:99:79:85:d2:ff:78:ec:a2:f9:f1:cf:
05:e2:17:89:05:bf:ad:26:2c:08:95:95:22:37:14:88:c2:c0:
72:a4:80:13:be:7f:08:0b:ef:27:88:04:2f:2f:fc:c7:48:d6:
b5:8b:4a:8a:af:49:84:30:18:b6:ea:b8:ea:44:24:88:96:ab:
04:f2:99:df:71:69:3e:23:a7:36:b5:97:c3:6d:7f:46:3b:e6:
09:85:29:52:18:f8:6e:a3:fc:82:15:7b:8c:5f:df:18:d1:ae:
6e:be:7b:09:e5:8b:ed:dd:72:aa:cc:36:f8:c8:3d:22:43:0e:
39:44:78:57:d2:c5:98:4e:7e:81:4b:9d:72:38:ac:1c:25:4c:
7e:c5:70:fa:30:eb:f1:06:70:9c:92:03:ab:9f:47:73:e8:fa:
63:10:7a:99:0e:c1:02:8f:64:81:81:25:a1:5c:c7:44:9f:27:
8c:a6:7f:41:2c:51:3d:b4:a5:aa:23:83:43:76:14:4a:8c:79:
2e:8a:74:b8:5f:ec:30:82:47:d7:f1:3b:74:d4:7c:cc:b9:2c:
f7:4c:7f:f0:df:a9:18:8b:9f:b0:2e:ae:c3:11:83:58:6d:90:
2c:66:0c:d8:80:99:24:4a:32:42:86:ad:a7:6a:5d:2a:d1:8f:
2c:7a:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:15:09 2025 by rpki-client