This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3332203d3e20323636323638.roa
File: 323830343a336435343a3a2f33322d3332203d3e20323636323638.roa (raw, json)
Hash identifier: GMcaAiw2DS73oB7PqKUDUOL04XKd20lZf9UPwHJNRyE=
Subject key identifier: 90:F8:34:C4:84:29:9E:E9:2E:83:AA:D9:CB:25:CD:DA:44:DA:E6:0D
Certificate issuer: /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial: 276537FC98679E274DFEEBAEF3ECD47DA767B898
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3332203d3e20323636323638.roa
Signing time: Mon 22 Dec 2025 19:16:43 +0000
ROA not before: Mon 22 Dec 2025 19:11:43 +0000
ROA not after: Mon 21 Dec 2026 19:16:43 +0000
asID: 266268
IP address blocks: 2804:3d54::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 15:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:65:37:fc:98:67:9e:27:4d:fe:eb:ae:f3:ec:d4:7d:a7:67:b8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Validity
Not Before: Dec 22 19:11:43 2025 GMT
Not After : Dec 21 19:16:43 2026 GMT
Subject: CN=90F834C484299EE92E83AAD9CB25CDDA44DAE60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:65:77:27:15:9d:60:35:da:23:e6:9a:0f:
e6:6a:06:85:bd:86:6f:12:fd:d2:ea:f1:8c:ae:73:
70:50:f9:7f:3a:24:d3:d6:ee:26:ed:ee:41:aa:33:
31:07:bb:cb:f6:9f:c1:e3:20:63:52:6e:ec:30:48:
f3:37:ff:4d:d2:8b:6c:1f:b5:04:2a:e4:a9:69:ee:
02:26:c4:24:8c:46:4c:5f:34:f6:c0:25:b7:16:e4:
e6:77:d6:a4:6c:bc:04:1b:60:a6:5a:ee:f6:b6:74:
2d:75:33:50:ee:a1:f4:d6:90:14:e3:00:b8:78:37:
87:3b:af:6d:ef:95:7d:6f:17:16:24:33:b3:e7:fd:
cc:73:18:63:86:80:ef:66:3c:f6:e1:8a:69:08:ad:
1c:52:cf:50:f3:46:fa:8d:87:d7:04:1e:fc:4b:01:
9d:8c:9b:01:14:d1:45:a1:ea:53:40:1c:18:6d:4e:
3f:b6:79:e5:9d:ed:9a:66:11:65:50:91:88:e3:a3:
e5:70:64:2c:0c:61:40:f5:20:77:ef:1c:77:ff:3f:
24:e6:a5:37:1d:2b:75:f3:31:ca:e4:46:f3:32:00:
a2:42:9b:9e:a2:a2:23:a2:7c:f5:14:3b:a8:f5:a9:
eb:9a:7c:b3:0b:e1:42:99:2a:f0:b8:00:25:08:4a:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:34:C4:84:29:9E:E9:2E:83:AA:D9:CB:25:CD:DA:44:DA:E6:0D
X509v3 Authority Key Identifier:
keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3332203d3e20323636323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d54::/32
Signature Algorithm: sha256WithRSAEncryption
3c:fa:61:04:59:10:a3:bc:03:59:ca:05:2f:6d:23:8c:a2:6e:
a8:ac:cc:a6:6e:8a:bc:49:4b:0e:57:d5:aa:f3:c2:4c:96:bc:
13:ac:5d:ea:94:3c:db:f3:62:59:fc:3e:e9:0a:e3:b3:b7:39:
15:58:db:a9:a9:a3:18:6d:c1:3b:15:e4:07:2e:51:ca:dd:49:
3a:18:59:99:9e:61:60:a0:78:f4:16:aa:87:6f:3e:4f:c7:35:
71:22:d2:b4:b3:cc:75:be:43:33:df:2b:5a:8f:83:11:7c:0e:
3d:d4:b7:ec:9c:cb:56:dd:09:e1:b1:3f:2b:05:5b:f7:2d:12:
03:0a:cc:e8:1d:ce:aa:56:2d:a8:87:51:ff:ac:6c:62:76:4c:
40:b3:34:f9:91:9f:3a:a4:16:57:7b:92:04:e7:fb:71:4c:4d:
33:32:51:69:b2:1c:f5:c7:96:69:64:92:3a:af:e3:d5:82:ab:
e4:98:7c:68:0b:11:a0:51:a6:ed:4c:ca:6c:1e:85:58:0b:de:
e2:e7:a7:fe:50:1d:43:ed:70:41:d7:f6:a6:27:2f:c7:d2:13:
34:1d:0b:df:3f:fb:95:85:00:7b:db:f8:00:cb:21:a2:30:80:
e7:89:c6:6d:ee:bc:2c:7c:88:2a:5a:ec:f6:63:32:fa:ee:9a:
79:63:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:35:58 2025 by rpki-client