This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
File: 323830343a333334303a3a2f33322d3332203d3e20323635333834.roa (raw, json)
Hash identifier: GsCpoIWLpGYyMahOdxgay1K34T05OxooyGmbHf4SdMA=
Subject key identifier: 9A:5D:35:22:26:03:6D:09:85:C5:6A:74:FB:DF:2A:68:E4:FC:CE:6C
Certificate issuer: /CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Certificate serial: 5A6FECBA04B2FEE4AF9F7E1F4444499A13BCB5A1
Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
Signing time: Wed 03 Dec 2025 15:17:24 +0000
ROA not before: Wed 03 Dec 2025 15:12:24 +0000
ROA not after: Wed 02 Dec 2026 15:17:24 +0000
asID: 265384
IP address blocks: 2804:3340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6f:ec:ba:04:b2:fe:e4:af:9f:7e:1f:44:44:49:9a:13:bc:b5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Validity
Not Before: Dec 3 15:12:24 2025 GMT
Not After : Dec 2 15:17:24 2026 GMT
Subject: CN=9A5D352226036D0985C56A74FBDF2A68E4FCCE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:4d:97:96:cd:b1:07:1f:cb:8c:7f:37:29:
f6:0a:e1:a5:44:23:7f:bb:31:e0:7e:8a:5a:c2:cb:
ea:8b:a5:13:fc:9c:ce:3a:cc:e2:e0:6e:2e:84:1d:
ab:c6:1f:91:bb:bf:5e:66:dc:f9:ad:d4:b5:9d:d4:
e6:d0:76:80:ad:fc:da:99:26:52:ea:e1:ef:36:95:
30:b6:6e:ca:74:39:6e:93:62:3c:28:ec:f0:5a:d8:
03:79:35:0c:c3:07:12:1b:ea:dd:c7:ea:e2:13:01:
01:68:6c:dd:33:36:22:f4:d2:f4:0a:ff:83:bb:58:
40:35:7c:bc:bc:be:65:65:16:94:f0:a4:a4:ff:6c:
4e:5f:d2:68:17:77:56:66:2e:0d:13:81:18:0e:4d:
fb:b2:3f:f4:85:ef:34:37:af:12:2f:89:06:9b:06:
cd:a2:63:cd:3b:c5:6a:10:55:2e:1b:be:39:b3:65:
ea:47:3e:f3:0d:53:e5:bd:e0:e9:c4:4c:89:93:7d:
f7:c4:52:8b:23:30:e4:6f:12:b9:c2:88:83:cb:b4:
3e:e1:be:50:24:36:d5:30:14:9c:c7:ca:e2:8d:b1:
6d:96:62:00:5f:6c:87:92:e2:04:9c:3e:61:47:b0:
a3:de:4b:1c:08:55:57:e0:12:3a:32:d3:6b:fc:c7:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:35:22:26:03:6D:09:85:C5:6A:74:FB:DF:2A:68:E4:FC:CE:6C
X509v3 Authority Key Identifier:
keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3340::/32
Signature Algorithm: sha256WithRSAEncryption
49:be:90:02:4b:0d:c2:c2:6c:f1:24:32:12:87:bd:19:fa:d9:
fe:f1:f4:9e:6b:99:16:9e:b4:98:81:25:c1:06:88:a2:ae:ff:
0b:de:85:eb:59:df:77:74:a7:04:1b:6f:4c:6c:07:f1:31:fb:
52:cc:93:c3:1d:aa:f2:00:cf:fa:a8:a9:ae:34:50:a2:33:92:
92:1d:e7:7f:cb:38:d1:e4:06:ce:fb:e1:8e:70:89:ec:a1:4e:
92:65:df:15:b5:40:9e:4f:c8:60:41:60:5d:10:e7:29:cb:d2:
c1:d9:6f:26:27:51:bd:13:91:f7:9f:83:e4:03:35:22:f8:40:
45:f6:8b:4d:a0:93:b1:ae:85:aa:27:94:60:54:1d:8a:db:01:
fd:45:88:5d:11:d4:bc:6c:61:e0:4b:ed:29:e8:02:0e:5e:ef:
f8:11:2c:2a:d3:6c:ce:68:6f:ff:39:f4:29:01:16:fe:a5:5f:
1d:7d:08:83:07:1f:9d:e9:ec:63:39:26:c3:94:58:54:eb:cd:
16:49:7d:2f:27:21:74:b8:95:07:04:16:d5:3d:91:04:01:e7:
e9:cb:f0:c3:15:d0:49:ea:fc:93:d5:91:89:54:d6:f6:5f:79:
5f:14:be:cc:be:dd:2f:c9:a5:5b:1a:dd:6f:20:54:4e:b1:ba:
55:3b:f2:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWm/sugSy/uSvn34fRERJmhO8taEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBRDA1NDZEODY5MDUxREY4OEY4ODYwQTM1NDBDMzU4
MkJBMTQ1NjAeFw0yNTEyMDMxNTEyMjRaFw0yNjEyMDIxNTE3MjRaMDMxMTAvBgNV
BAMTKDlBNUQzNTIyMjYwMzZEMDk4NUM1NkE3NEZCREYyQTY4RTRGQ0NFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHjE2Xls2xBx/LjH83KfYK4aVE
I3+7MeB+ilrCy+qLpRP8nM46zOLgbi6EHavGH5G7v15m3Pmt1LWd1ObQdoCt/NqZ
JlLq4e82lTC2bsp0OW6TYjwo7PBa2AN5NQzDBxIb6t3H6uITAQFobN0zNiL00vQK
/4O7WEA1fLy8vmVlFpTwpKT/bE5f0mgXd1ZmLg0TgRgOTfuyP/SF7zQ3rxIviQab
Bs2iY807xWoQVS4bvjmzZepHPvMNU+W94OnETImTfffEUosjMORvErnCiIPLtD7h
vlAkNtUwFJzHyuKNsW2WYgBfbIeS4gScPmFHsKPeSxwIVVfgEjoy02v8x8pFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUml01IiYDbQmFxWp0+98qaOT8zmwwHwYDVR0j
BBgwFoAUKq0FRthpBR34j4hgo1QMNYK6FFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR
cHQvMC8yQUFEMDU0NkQ4NjkwNTFERjg4Rjg4NjBBMzU0MEMzNTgyQkExNDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQUQwNTQ2RDg2OTA1MURG
ODhGODg2MEEzNTQwQzM1ODJCQTE0NTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv
MzIzODMwMzQzYTMzMzMzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzQDANBgkqhkiG9w0BAQsFAAOCAQEASb6QAksN
wsJs8SQyEoe9GfrZ/vH0nmuZFp60mIElwQaIoq7/C96F61nfd3SnBBtvTGwH8TH7
UsyTwx2q8gDP+qiprjRQojOSkh3nf8s40eQGzvvhjnCJ7KFOkmXfFbVAnk/IYEFg
XRDnKcvSwdlvJidRvROR95+D5AM1IvhARfaLTaCTsa6FqieUYFQditsB/UWIXRHU
vGxh4EvtKegCDl7v+BEsKtNszmhv/zn0KQEW/qVfHX0IgwcfnensYzkmw5RYVOvN
Fkl9LychdLiVBwQW1T2RBAHn6cvwwxXQSer8k9WRiVTW9l95XxS+zL7dL8mlWxrd
byBUTrG6VTvy6A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:28 2025 by rpki-client