This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/323830343a326130633a3a2f33322d313238203d3e20323634303533.roa
File: 323830343a326130633a3a2f33322d313238203d3e20323634303533.roa (raw, json)
Hash identifier: Ns6jsp5nu7iGW+CdFbGthBCJhkKJO4vSciJ2QvNDvTQ=
Subject key identifier: C9:D2:69:1B:2F:DF:4A:63:C5:E0:D1:54:90:06:EE:D5:EA:07:8D:B2
Certificate issuer: /CN=8EBC5E01A63F9FF4E39A989F8968E1274668A5AF
Certificate serial: 2B15CB5B0BC02BDF8DE73D6CAFED6F9943D10EB3
Authority key identifier: 8E:BC:5E:01:A6:3F:9F:F4:E3:9A:98:9F:89:68:E1:27:46:68:A5:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/323830343a326130633a3a2f33322d313238203d3e20323634303533.roa
Signing time: Mon 15 Dec 2025 22:20:27 +0000
ROA not before: Mon 15 Dec 2025 22:15:27 +0000
ROA not after: Mon 14 Dec 2026 22:20:27 +0000
asID: 264053
IP address blocks: 2804:2a0c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.crl
rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:15:cb:5b:0b:c0:2b:df:8d:e7:3d:6c:af:ed:6f:99:43:d1:0e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EBC5E01A63F9FF4E39A989F8968E1274668A5AF
Validity
Not Before: Dec 15 22:15:27 2025 GMT
Not After : Dec 14 22:20:27 2026 GMT
Subject: CN=C9D2691B2FDF4A63C5E0D1549006EED5EA078DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:8e:b7:a9:71:8f:37:2b:78:ca:51:2b:4a:
22:4c:4a:92:5e:9a:57:af:40:5f:ba:f1:a3:5c:f7:
88:aa:4c:e8:23:16:32:94:98:f8:b3:3e:1e:eb:66:
1f:a1:1c:b4:e7:83:d7:58:94:c7:34:b6:57:60:cc:
37:9e:8b:3b:ad:58:be:54:19:dc:8b:2d:e2:c0:9f:
b7:c8:51:5d:2e:fd:8a:c3:4c:10:c3:df:3a:24:33:
58:23:c0:e0:72:be:b0:26:a5:e8:c5:41:f5:06:0e:
05:31:06:03:25:6d:ed:ee:ea:e4:4a:ce:5b:7e:de:
27:9b:cd:54:b4:02:99:48:0a:6f:48:3d:b8:02:65:
c7:88:14:8c:5a:3f:82:81:61:00:e2:a3:4d:de:8f:
fb:c1:87:e6:fd:60:ef:f7:6f:fc:4e:fb:c3:a7:46:
0f:c2:74:f4:6a:57:ca:99:eb:43:fe:44:02:f4:1d:
46:f0:03:dd:19:a9:e3:6e:cc:ec:e8:01:6d:59:39:
5a:da:15:69:35:9a:b0:9d:4c:ac:02:58:f2:3e:5f:
e6:08:9e:f9:1d:f7:f0:51:b9:a8:8d:99:6b:55:8d:
fb:41:97:f3:36:ab:08:8f:ee:50:02:27:fd:c6:29:
5d:44:8e:85:cc:64:e5:21:ce:8c:bc:c5:4b:36:31:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D2:69:1B:2F:DF:4A:63:C5:E0:D1:54:90:06:EE:D5:EA:07:8D:B2
X509v3 Authority Key Identifier:
keyid:8E:BC:5E:01:A6:3F:9F:F4:E3:9A:98:9F:89:68:E1:27:46:68:A5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/323830343a326130633a3a2f33322d313238203d3e20323634303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2a0c::/32
Signature Algorithm: sha256WithRSAEncryption
58:60:66:f9:da:b8:54:70:cb:ab:ba:8c:15:10:62:5d:48:3f:
ff:e9:b0:13:9f:a0:12:4d:41:cc:0c:49:14:75:10:20:ec:f8:
b5:78:1c:e8:27:97:5c:6c:32:e9:01:88:ea:a0:bc:59:a1:18:
23:2e:10:05:06:e1:34:30:6b:1f:57:ef:6b:7e:f8:d7:c0:2d:
6a:0d:60:03:8f:28:88:36:f8:e6:06:7f:87:36:38:8e:c2:f7:
92:69:5c:8e:d0:53:a5:d8:93:bd:79:c8:c4:4b:a9:d1:7c:cd:
58:32:bf:0c:66:58:69:71:9a:ed:3f:e1:3e:d2:a2:30:89:2e:
18:5a:0f:06:59:39:6e:83:be:3c:5a:4d:92:b6:9c:30:73:00:
7c:98:91:09:ad:dd:d7:a0:d1:2a:c7:cb:c4:f7:3c:d2:3d:86:
9d:b4:0d:cd:79:4c:f0:d8:94:40:20:57:2f:e6:33:35:28:21:
76:b1:c8:d0:1a:2b:59:35:34:cd:c1:3c:76:14:0a:1f:7f:86:
68:d9:c9:09:a3:9e:b0:00:85:7f:ad:a0:7b:8b:c3:cf:cc:68:
2e:12:cc:61:45:b9:d3:50:db:cf:72:21:cc:33:48:18:80:13:
99:0c:fa:c4:ca:e8:ea:d1:bf:fc:3f:78:fd:10:ac:38:64:59:
80:1f:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:24 2025 by rpki-client