This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a333030303a3a2f33362d3336203d3e20323639343434.roa
File: 323830343a363462383a333030303a3a2f33362d3336203d3e20323639343434.roa (raw, json)
Hash identifier: px9nxvphIt90J5/ZKRKoRbT+pGJdKG6S4tGr/kTSvQU=
Subject key identifier: B2:E1:A1:4E:C7:8F:7C:58:E9:33:9C:77:A1:D1:2B:73:68:75:00:6F
Certificate issuer: /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial: 334D03C8309346B5DB89656DF218AA4CB4F16C24
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a333030303a3a2f33362d3336203d3e20323639343434.roa
Signing time: Fri 19 Dec 2025 20:51:17 +0000
ROA not before: Fri 19 Dec 2025 20:46:17 +0000
ROA not after: Fri 18 Dec 2026 20:51:17 +0000
asID: 269444
IP address blocks: 2804:64b8:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 00:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4d:03:c8:30:93:46:b5:db:89:65:6d:f2:18:aa:4c:b4:f1:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Validity
Not Before: Dec 19 20:46:17 2025 GMT
Not After : Dec 18 20:51:17 2026 GMT
Subject: CN=B2E1A14EC78F7C58E9339C77A1D12B736875006F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:3a:7f:e3:1f:39:28:2e:53:82:c0:2f:08:
60:7b:d2:0c:90:1c:44:c5:8b:15:d3:a3:e2:5c:76:
7b:89:1f:76:05:00:8e:63:ab:bd:5a:62:a6:e9:42:
0f:ff:41:71:46:9a:3c:21:dd:7b:81:cd:40:06:1d:
5e:ea:f8:5d:fc:d9:05:80:01:af:3d:c1:2d:0a:79:
a8:d7:71:25:04:80:41:31:17:74:04:eb:b8:57:30:
5f:2a:59:81:26:39:7f:ad:e5:63:68:47:5b:43:ae:
b4:39:9d:e9:09:4e:7d:a4:cf:7d:ac:bf:38:eb:ed:
3d:16:64:f2:29:aa:71:91:cd:fc:98:e3:2d:bc:5b:
3d:69:4e:78:14:a1:82:7e:44:23:8b:7d:da:49:50:
91:a3:fa:6c:a5:20:f4:40:7a:fe:7f:e3:e0:cd:6a:
f2:7e:48:d1:ad:4f:be:c3:7e:35:d1:7a:28:92:89:
60:48:3d:3f:37:77:c2:dc:c0:3a:a1:e7:99:c9:01:
f6:66:e0:2d:98:ec:73:59:da:da:ba:2e:c5:0b:32:
89:eb:59:b5:50:1a:47:67:be:b7:84:d9:7d:9f:fd:
14:df:24:2c:c6:eb:13:84:73:a4:6a:3b:ce:fc:d2:
ee:20:fe:bd:f9:76:bd:f3:3e:63:15:59:f1:c2:27:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E1:A1:4E:C7:8F:7C:58:E9:33:9C:77:A1:D1:2B:73:68:75:00:6F
X509v3 Authority Key Identifier:
keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a333030303a3a2f33362d3336203d3e20323639343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:64b8:3000::/36
Signature Algorithm: sha256WithRSAEncryption
5a:9c:fe:38:ca:af:74:4d:5c:90:1d:3e:9e:96:79:78:ab:0c:
97:c3:b9:c5:85:b9:24:69:9e:3e:31:d4:39:c2:76:7c:0d:da:
6c:2d:27:67:a4:45:86:1f:97:aa:45:7c:8b:45:56:3a:43:0b:
5e:1e:44:21:3f:75:58:65:72:05:e3:93:c1:3b:a5:50:b1:29:
fa:f4:87:80:b9:ae:e7:67:1b:14:63:26:d7:d9:84:28:b7:70:
d6:1b:b1:45:25:69:89:cc:65:cc:9e:9c:de:ad:cc:c7:f9:70:
10:2b:d7:ac:b0:c0:76:69:da:d0:b9:ea:04:3b:6d:b9:5d:2c:
d0:73:46:a7:21:ac:3c:a8:49:c2:8e:b7:b2:2a:18:4a:65:51:
0d:9a:ac:95:0e:6b:9e:c8:0f:03:cc:7d:c1:c8:0e:d4:04:64:
f1:cd:e8:a2:b3:92:be:88:cf:c0:73:31:54:fd:8e:3b:cf:b3:
81:6f:dd:5f:67:23:cb:1b:54:85:a5:c5:c7:e5:e3:39:fd:f6:
ce:12:64:2c:fa:e7:e1:ac:1c:b4:e1:f3:11:eb:f2:e7:17:d9:
0d:dc:cd:0b:f6:b1:fd:b5:0f:ac:2d:c5:89:85:13:d6:56:27:
11:e5:1c:6b:6b:33:7a:ce:7c:c3:fb:9d:6a:d6:af:b8:5c:7e:
1b:22:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:21:47 2025 by rpki-client