This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/323830343a343165383a3a2f33322d313238203d3e20323637343634.roa
File: 323830343a343165383a3a2f33322d313238203d3e20323637343634.roa (raw, json)
Hash identifier: 7d8GMm+/p7YDkmnvROFd6jkWM10bxjqxccU2roVGRDI=
Subject key identifier: CD:27:EF:D8:60:9E:A3:DF:91:E6:56:9E:84:89:18:56:F7:7E:08:FC
Certificate issuer: /CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
Certificate serial: 2ED66F501F35552A5FBBD9D859FB5D072A8C8807
Authority key identifier: 5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/323830343a343165383a3a2f33322d313238203d3e20323637343634.roa
Signing time: Thu 18 Dec 2025 15:00:47 +0000
ROA not before: Thu 18 Dec 2025 14:55:47 +0000
ROA not after: Thu 17 Dec 2026 15:00:47 +0000
asID: 267464
IP address blocks: 2804:41e8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl
rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 03:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d6:6f:50:1f:35:55:2a:5f:bb:d9:d8:59:fb:5d:07:2a:8c:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
Validity
Not Before: Dec 18 14:55:47 2025 GMT
Not After : Dec 17 15:00:47 2026 GMT
Subject: CN=CD27EFD8609EA3DF91E6569E84891856F77E08FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:25:6d:4d:52:e9:59:29:ac:f8:75:29:f1:
07:20:35:7a:e4:9a:ef:7a:84:5e:0a:4f:0e:ec:37:
cf:4a:47:a5:42:3f:24:3e:e8:8d:71:99:0a:88:cc:
2b:09:3f:c5:37:85:3c:39:19:c3:25:ba:0c:b0:6a:
35:fa:aa:0c:af:92:a6:8b:53:01:6a:39:e1:ca:82:
a7:a1:31:5e:53:c9:58:e8:c6:08:0b:0b:dc:82:65:
3a:95:77:ef:55:b7:07:17:39:70:97:59:35:fb:9d:
78:16:4e:55:03:0d:33:16:54:69:f2:8f:38:d0:46:
13:b3:2a:b4:42:1a:47:a5:55:a4:17:54:3f:00:36:
71:5d:2f:f0:f4:1f:66:9c:ce:dc:a0:59:48:44:c9:
2f:12:8d:5a:d4:eb:86:c3:21:f4:2d:c3:bf:9b:0d:
0a:f9:57:4b:b8:28:7a:54:73:72:e4:7b:37:3c:3d:
84:83:ca:e2:92:e5:bc:6f:87:f9:f5:73:07:90:9e:
cf:34:8f:22:46:d5:65:4a:e6:d0:5d:9a:d7:67:82:
d4:22:40:a1:72:a2:af:9a:55:79:f5:1e:b6:51:5f:
5b:16:c0:7f:7f:1a:aa:5d:19:23:6e:66:c6:ab:bd:
45:87:e5:65:83:60:5f:07:e1:6d:c2:9b:4f:fa:1c:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:EF:D8:60:9E:A3:DF:91:E6:56:9E:84:89:18:56:F7:7E:08:FC
X509v3 Authority Key Identifier:
keyid:5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/323830343a343165383a3a2f33322d313238203d3e20323637343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41e8::/32
Signature Algorithm: sha256WithRSAEncryption
63:1f:9f:a3:87:d0:d5:ed:75:98:e2:44:e8:6d:b2:d2:ea:86:
c3:ed:d4:c6:bd:e2:33:3a:7e:dc:77:b5:6a:e4:e0:a4:37:7a:
d5:b0:81:b9:11:f7:f7:5f:10:c0:e5:ba:97:68:bf:66:24:8b:
07:16:6c:0d:80:63:d4:5a:24:41:8d:ef:d8:3c:3d:c1:04:e0:
3f:b9:80:f1:5e:cb:d3:34:a4:35:d5:28:6a:64:bc:26:a3:10:
d2:3e:fd:8b:1d:dd:a2:7c:d1:75:3b:4e:75:d0:a4:d7:a1:53:
aa:e0:a2:48:55:cc:a9:cb:8d:5b:3e:68:05:78:da:fb:0f:8b:
0b:3b:4e:de:89:99:71:b4:7b:0b:51:e2:83:8e:bb:5b:68:3a:
c5:98:7e:09:59:d1:4a:3a:bf:2a:4b:7d:94:72:34:25:d4:aa:
59:31:bb:dd:dd:cf:1e:55:75:90:b9:5e:e7:03:13:b3:9a:e5:
7d:62:73:c3:f8:89:4c:1f:7e:1e:51:03:17:5a:60:dd:36:2d:
5d:93:1b:26:a1:5d:57:1d:71:df:64:cd:ec:01:93:f2:de:b1:
0c:a2:fb:0b:e5:35:4a:3d:5a:ce:25:26:55:33:69:d2:66:1c:
bc:c7:a1:a6:6b:98:6d:6c:6b:31:de:22:27:dc:0b:04:39:bf:
b9:cf:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:16 2025 by rpki-client