This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33342d3334203d3e20323638373933.roa
File: 323830343a356163303a3a2f33342d3334203d3e20323638373933.roa (raw, json)
Hash identifier: MVKlkPk6i7nqrhsTo5xTHw1Ju+LNpNGD4Q34YgIbWwE=
Subject key identifier: 74:C2:FC:D9:2B:DD:7D:87:72:FF:00:18:0C:AA:89:2C:DA:C2:61:99
Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial: 45986997FF6C7B39D3BF1E23E0E2EEA43FFF5D7E
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33342d3334203d3e20323638373933.roa
Signing time: Mon 15 Dec 2025 18:59:12 +0000
ROA not before: Mon 15 Dec 2025 18:54:12 +0000
ROA not after: Mon 14 Dec 2026 18:59:12 +0000
asID: 268793
IP address blocks: 2804:5ac0::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 16:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:98:69:97:ff:6c:7b:39:d3:bf:1e:23:e0:e2:ee:a4:3f:ff:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
Validity
Not Before: Dec 15 18:54:12 2025 GMT
Not After : Dec 14 18:59:12 2026 GMT
Subject: CN=74C2FCD92BDD7D8772FF00180CAA892CDAC26199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:f1:ec:11:2a:fc:0c:ae:13:15:34:0c:58:
46:d6:b6:ae:a3:3d:a1:50:82:bf:25:b0:07:c9:a7:
7b:92:ff:c3:7d:15:e4:f6:39:fa:77:98:b7:4f:46:
69:00:ac:1b:fe:80:0c:98:f9:8a:8a:7a:6c:54:79:
35:19:3f:ae:dd:1e:9a:33:76:4a:75:f2:ff:88:e7:
0b:b8:5b:b4:1f:ad:03:42:5a:be:cb:73:7d:99:78:
8a:5c:f8:6b:09:4c:ab:65:f4:50:c7:21:ab:d0:7e:
4f:78:2f:e6:e7:fc:3a:c3:c9:72:ad:7d:2f:f9:14:
f9:50:f2:18:ab:c7:ab:c1:65:11:6d:d2:f1:4d:1f:
5c:9b:00:8c:57:19:9f:3a:bb:8b:3d:c0:ca:70:8d:
c8:c4:62:7b:53:73:bc:38:b0:ff:7a:c5:be:48:d8:
3c:89:74:79:b6:b9:9e:9f:ac:5d:c6:23:1a:af:93:
16:d6:43:e6:cd:81:14:09:ea:31:5c:3c:b6:72:75:
92:07:6c:f8:54:11:a2:9b:47:0e:20:89:59:79:f3:
53:03:2b:0b:7d:d9:2c:12:ff:6e:ab:28:3b:42:ae:
e6:d9:ba:12:64:60:c4:df:55:58:29:c1:2e:4d:52:
bd:ab:54:9e:2d:4a:aa:0e:55:7f:df:f0:b6:9d:7a:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:FC:D9:2B:DD:7D:87:72:FF:00:18:0C:AA:89:2C:DA:C2:61:99
X509v3 Authority Key Identifier:
keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33342d3334203d3e20323638373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ac0::/34
Signature Algorithm: sha256WithRSAEncryption
40:60:08:06:37:c5:2b:05:c9:31:8c:22:c9:54:d1:7d:f7:d1:
ac:2e:91:5b:47:4b:ff:4e:27:d5:6c:72:30:c9:a9:66:54:9d:
ce:35:42:ff:dd:59:14:69:8c:0a:75:e9:0f:19:25:8d:e0:c9:
3a:1a:0f:e2:7d:62:a6:40:77:25:a3:9f:19:ef:e4:0e:d6:b1:
93:da:0e:94:3f:fd:40:b9:3c:c3:4a:e6:2b:55:75:f3:cb:ba:
1c:cb:9d:e9:8f:75:30:cc:d8:77:59:3c:1a:bd:c0:09:d4:a4:
7c:c4:e2:b9:68:26:9f:d1:8a:99:29:d8:9b:bd:ae:bc:27:6f:
03:0a:02:f4:5c:c1:7c:b2:53:e9:ba:85:bc:a5:06:79:38:b0:
fe:22:d9:5f:fe:ef:9c:10:e9:e3:74:8a:f0:ec:3a:ff:9a:c3:
f5:dc:50:e6:0c:85:15:e4:fa:83:25:e0:11:56:7b:88:b2:5c:
d3:de:3c:ea:65:e0:f5:49:c3:ac:30:3e:0f:30:65:7d:1f:16:
0a:c8:2d:f2:31:ce:db:86:0c:86:45:0c:5a:85:70:4d:ec:f1:
34:4b:c8:75:c5:a8:2a:41:5a:f3:98:a4:cd:80:a1:fc:7f:e3:
cd:a8:98:65:3c:76:bc:a3:eb:b2:c7:1f:d8:8a:74:22:db:dd:
12:b1:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 09:23:49 2025 by rpki-client