This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/323830343a313461383a3a2f33322d3332203d3e20323633333432.roa
File: 323830343a313461383a3a2f33322d3332203d3e20323633333432.roa (raw, json)
Hash identifier: GYX0mB3x3J4D4tF+JcyLMYlQpZmJU2yMR+NipM9JQWU=
Subject key identifier: C0:D1:15:78:DF:9A:E8:9E:CC:A1:4F:7D:52:7D:B8:73:AE:D2:2E:D1
Certificate issuer: /CN=8C5E332614CF6AC22608C2224E7F03455AAEA552
Certificate serial: 5207705F02C8AD01BA617ED202A4D315F46B93C5
Authority key identifier: 8C:5E:33:26:14:CF:6A:C2:26:08:C2:22:4E:7F:03:45:5A:AE:A5:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C5E332614CF6AC22608C2224E7F03455AAEA552.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/323830343a313461383a3a2f33322d3332203d3e20323633333432.roa
Signing time: Fri 26 Dec 2025 19:36:55 +0000
ROA not before: Fri 26 Dec 2025 19:31:55 +0000
ROA not after: Fri 25 Dec 2026 19:36:55 +0000
asID: 263342
IP address blocks: 2804:14a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/8C5E332614CF6AC22608C2224E7F03455AAEA552.crl
rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/8C5E332614CF6AC22608C2224E7F03455AAEA552.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C5E332614CF6AC22608C2224E7F03455AAEA552.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 03 Jan 2026 15:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:07:70:5f:02:c8:ad:01:ba:61:7e:d2:02:a4:d3:15:f4:6b:93:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C5E332614CF6AC22608C2224E7F03455AAEA552
Validity
Not Before: Dec 26 19:31:55 2025 GMT
Not After : Dec 25 19:36:55 2026 GMT
Subject: CN=C0D11578DF9AE89ECCA14F7D527DB873AED22ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:a7:8f:8a:42:31:0e:5b:b5:95:14:56:0c:
70:18:92:43:c4:13:e5:29:e3:cc:f3:54:5a:a0:68:
a7:e7:13:4a:24:94:cf:b2:05:b5:db:58:03:d2:bb:
80:8a:21:61:5f:d3:1d:62:e9:30:d5:aa:27:29:de:
60:74:ff:c3:ca:22:f7:c7:89:48:51:0e:fa:dc:fd:
cb:70:1c:b6:6b:8b:55:92:f4:35:42:d8:95:98:7e:
c5:56:be:cd:10:68:f8:d3:8f:ac:ec:b6:bd:b6:fa:
a4:3c:bb:e2:b2:f7:95:1e:2d:b3:be:2e:0a:1e:58:
82:cc:a3:22:ab:b8:f4:c9:bc:09:95:fe:25:a6:2a:
bb:0d:90:2e:cf:aa:ee:05:7c:e2:44:0b:2b:80:6f:
c5:50:24:de:43:69:d9:8b:2a:10:27:f1:eb:92:4e:
da:2e:f2:f5:48:5e:8d:0e:06:33:96:e1:40:87:a5:
20:a6:72:7f:98:2f:94:c7:73:23:cb:46:d9:0a:fe:
e3:5a:92:7d:67:c0:a0:23:f2:4d:95:bb:3c:b7:8d:
6f:6a:87:ad:6d:00:8a:f8:48:3a:da:4e:85:66:55:
61:78:cb:ab:0f:21:8b:91:23:f3:fd:c5:f4:36:71:
8e:bf:b4:35:d3:a5:1c:fa:65:86:f5:f0:fe:f8:fd:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:15:78:DF:9A:E8:9E:CC:A1:4F:7D:52:7D:B8:73:AE:D2:2E:D1
X509v3 Authority Key Identifier:
keyid:8C:5E:33:26:14:CF:6A:C2:26:08:C2:22:4E:7F:03:45:5A:AE:A5:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/8C5E332614CF6AC22608C2224E7F03455AAEA552.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C5E332614CF6AC22608C2224E7F03455AAEA552.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/323830343a313461383a3a2f33322d3332203d3e20323633333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14a8::/32
Signature Algorithm: sha256WithRSAEncryption
17:54:66:df:38:42:27:80:eb:7b:f2:69:7c:cf:13:d5:04:de:
ca:3d:97:a0:c1:b7:f2:41:9e:10:9c:52:90:4e:1b:05:ee:8a:
df:ed:20:f1:ae:fa:67:3b:2f:a9:7d:37:b1:25:a6:2a:88:4e:
f0:32:7d:97:bf:a1:62:99:fb:62:b1:85:c0:58:90:d9:2e:35:
a3:0b:f9:96:77:ae:5d:0a:8c:e8:b2:26:8b:06:4d:66:f3:f6:
4d:cc:ff:b8:1f:d3:4e:e7:d5:cc:f0:01:80:72:ad:2c:69:9f:
2a:07:52:f3:f4:be:0d:5a:97:9b:fe:f6:29:31:7a:7d:89:95:
96:22:83:76:7a:08:7e:84:84:98:17:ac:a5:6f:28:9c:01:35:
c0:70:07:6d:bc:cc:40:64:cf:38:63:94:b9:42:73:eb:9d:8e:
53:40:02:03:92:ea:4b:07:3b:0a:22:f8:10:54:73:d5:4f:91:
a8:02:1f:e0:c2:20:da:43:cf:c9:88:62:1b:1d:99:3f:8f:aa:
dc:69:a4:53:b0:03:b8:db:80:2b:b5:42:8f:54:e6:aa:ce:a3:
8a:15:74:17:42:2d:1c:78:15:10:08:b3:6a:dc:25:c6:62:23:
29:3b:dc:c8:fc:c6:31:9e:4e:fe:15:52:5d:46:52:7a:6d:06:
3a:fb:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:41:04 2026 by rpki-client