This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
File: 323830343a313336383a3a2f33322d3333203d3e20323632383038.roa (raw, json)
Hash identifier: SrvfElEDHbx3kvGKOU1PlgVM0GjK+Jw5tg56uIIQw/Y=
Subject key identifier: FE:D1:07:01:5E:A8:89:6A:2A:D3:94:5A:47:6D:22:8F:1A:CD:1B:4C
Certificate issuer: /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Certificate serial: 6A165857F439BEBD3EF0D8A569D7A84AFAD02310
Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
Signing time: Wed 24 Dec 2025 18:59:20 +0000
ROA not before: Wed 24 Dec 2025 18:54:20 +0000
ROA not after: Wed 23 Dec 2026 18:59:20 +0000
asID: 262808
IP address blocks: 2804:1368::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl
rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Jan 2026 07:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:16:58:57:f4:39:be:bd:3e:f0:d8:a5:69:d7:a8:4a:fa:d0:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Validity
Not Before: Dec 24 18:54:20 2025 GMT
Not After : Dec 23 18:59:20 2026 GMT
Subject: CN=FED107015EA8896A2AD3945A476D228F1ACD1B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:f0:74:48:9f:cd:f7:5c:89:13:77:b0:5e:
bd:90:d0:17:5d:3c:30:00:6a:21:1b:00:71:41:49:
ca:20:c0:d7:f0:2e:89:d4:60:b0:f6:bc:9b:de:dc:
a7:a8:ea:75:d0:c1:44:81:ef:28:03:7e:fc:60:ba:
50:b7:af:93:7b:1b:0f:86:b3:1f:a8:b8:f3:38:5f:
d2:93:39:2c:5b:93:69:0e:be:af:12:86:e9:df:e8:
b5:f5:04:40:04:43:fc:44:77:bf:2e:f1:0c:c5:c4:
9f:03:37:90:5b:45:f2:3d:14:99:3f:30:a7:76:3e:
ea:24:5c:d7:37:4e:10:71:64:12:46:f2:57:13:87:
3d:15:f6:d4:c7:cc:c6:41:01:af:44:7d:59:52:98:
49:4b:4a:83:5c:a3:c1:78:7e:97:ea:e2:e2:d4:c0:
a0:f2:f2:c1:f8:b5:30:9b:35:0a:ba:a7:a0:6f:23:
7a:af:8c:fe:4f:56:87:d1:0a:3b:75:e6:5a:f7:85:
6d:9b:e4:1c:29:56:7a:ce:a4:f2:3e:8b:8c:92:f1:
17:be:36:59:ca:02:f6:68:f9:89:5f:68:19:fc:c5:
ed:79:b3:72:63:d9:c5:3b:7e:37:d2:e8:31:1b:7a:
5c:c9:74:f7:74:32:27:fb:27:bd:c6:87:4c:a6:d3:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:07:01:5E:A8:89:6A:2A:D3:94:5A:47:6D:22:8F:1A:CD:1B:4C
X509v3 Authority Key Identifier:
keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1368::/32
Signature Algorithm: sha256WithRSAEncryption
27:50:bc:8b:9a:41:e8:1b:e9:4f:eb:81:4b:1f:1c:5c:9f:5b:
08:ee:92:38:58:89:a5:ee:a7:ff:45:27:ae:72:bb:1b:6d:ca:
fe:c0:92:21:99:9d:57:46:4f:ce:1b:3d:91:e5:81:6c:6f:eb:
14:6e:3f:11:96:89:c0:fd:d8:ed:19:b3:c1:74:ec:ba:f2:1c:
c4:13:87:5c:33:06:7e:98:28:b0:05:f7:70:b3:42:2c:1b:80:
0c:82:02:37:3b:df:ab:ac:4f:96:fa:83:d5:9b:92:d3:35:46:
32:03:05:23:82:8a:b3:23:51:46:1a:ce:bc:a2:22:e6:a4:57:
af:95:1b:2a:1e:6a:af:78:cd:ee:cf:c1:10:00:cc:be:a2:4d:
70:e1:fb:37:8d:e7:98:a9:70:e6:e6:fa:21:7e:81:32:09:6c:
3a:76:3b:14:3a:bb:23:1f:de:1f:ec:be:a8:ab:79:fd:29:a0:
4f:dd:09:ae:31:1c:de:ab:2c:63:b8:b9:39:f3:b0:79:4c:87:
b5:74:1d:84:82:8f:e5:a9:67:53:d5:20:ae:a3:f1:66:bd:8e:
1b:c4:e8:de:78:9d:2e:43:f8:a3:e4:50:4e:57:06:e0:79:48:
70:07:4a:39:e4:37:5f:b8:c2:b9:53:e6:b4:58:5a:b7:e3:bd:
0a:35:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:33:37 2026 by rpki-client