This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d3332203d3e20323632383535.roa
File: 323830343a323365383a3a2f33322d3332203d3e20323632383535.roa (raw, json)
Hash identifier: HEDKIFiEasBRASHngV49ogs3j8CtqHoFqV2XblEL9/c=
Subject key identifier: FA:6F:6A:61:9E:3C:29:23:6F:1D:C3:3F:23:8B:CD:50:1E:30:F9:25
Certificate issuer: /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Certificate serial: 22BD6880CB57173B8D0A81C35D7E7D919C1E60F4
Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d3332203d3e20323632383535.roa
Signing time: Fri 07 Nov 2025 12:13:49 +0000
ROA not before: Fri 07 Nov 2025 12:08:49 +0000
ROA not after: Fri 06 Nov 2026 12:13:49 +0000
asID: 262855
IP address blocks: 2804:23e8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:bd:68:80:cb:57:17:3b:8d:0a:81:c3:5d:7e:7d:91:9c:1e:60:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Validity
Not Before: Nov 7 12:08:49 2025 GMT
Not After : Nov 6 12:13:49 2026 GMT
Subject: CN=FA6F6A619E3C29236F1DC33F238BCD501E30F925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:75:12:89:21:80:0b:d7:a7:55:cc:b9:a9:
3b:23:7f:4b:0d:46:82:08:43:f3:01:e7:8a:c7:f3:
dc:ad:ff:77:2c:72:ae:62:a3:e7:52:2c:62:79:a2:
3f:ba:bc:61:49:a6:95:66:e9:c6:2f:f5:00:3d:34:
86:c3:3e:4b:33:ff:29:a4:8a:f5:6a:fd:c6:1b:6c:
3f:e6:18:73:a6:44:99:4b:fe:ae:de:6c:f4:6f:98:
5e:6e:14:04:6e:bc:33:c8:0a:e1:af:2b:a3:42:91:
aa:a3:e8:94:65:55:b0:f4:b5:b4:73:47:49:36:72:
1c:69:2d:bb:2c:e3:59:a6:ac:f2:f2:44:ac:1c:48:
c2:6f:12:08:14:6d:c2:f6:08:2e:a2:de:bf:56:0d:
00:39:ff:7a:3b:6a:ab:bb:c4:cd:a1:77:37:72:44:
17:2e:50:83:dc:d0:54:b2:33:98:94:76:74:58:ed:
65:a6:34:47:51:ff:6e:52:9f:7a:cb:9b:08:c1:c0:
62:50:5c:18:23:f8:d0:a6:33:3d:d7:ef:5f:17:18:
db:17:8e:d9:72:c7:be:54:f4:8b:b3:10:a0:ca:cb:
59:74:bb:65:25:c7:68:6b:df:16:04:de:01:e8:03:
c6:20:a9:cb:ac:62:b2:34:76:82:f4:03:68:75:3c:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:6A:61:9E:3C:29:23:6F:1D:C3:3F:23:8B:CD:50:1E:30:F9:25
X509v3 Authority Key Identifier:
keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d3332203d3e20323632383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:23e8::/32
Signature Algorithm: sha256WithRSAEncryption
a4:c6:0b:1a:09:f2:7c:41:35:b3:bd:52:66:7b:a4:dc:bc:8f:
29:1b:4b:a1:85:1b:1f:fc:20:29:7f:da:5c:82:b1:af:92:ff:
07:7f:0a:ef:1a:f6:5c:11:80:61:76:13:74:5d:85:26:9b:06:
a2:5c:00:be:0d:4c:95:05:03:78:7b:27:ae:9d:f0:31:26:83:
57:a0:82:9b:30:70:b1:fb:f7:6e:ef:f0:b2:61:c1:87:2c:3a:
61:61:b8:00:0c:f1:00:8c:47:12:47:72:0d:26:cc:f0:92:f7:
42:c6:a5:51:91:f6:7d:c1:e0:02:e8:3d:ac:a0:67:c9:79:c1:
6f:a8:0e:2d:25:94:e6:84:d3:05:b0:62:a6:be:53:37:10:3f:
91:0b:f5:94:58:c9:9b:48:12:f5:d4:b0:7a:ab:cd:fa:66:a6:
59:91:90:d3:32:31:25:93:a4:1e:f5:2b:13:82:b3:0e:72:ca:
cd:1d:ae:60:6d:c5:63:a5:4a:64:ad:dc:d0:67:b8:e7:c9:06:
8a:82:66:5d:26:9e:1a:d8:d6:0a:0a:4c:27:11:63:85:87:ef:
55:b4:67:d4:21:61:47:19:47:c8:e7:83:45:6e:27:7d:4e:84:
2c:01:9a:f2:e1:9e:b2:4a:1d:a8:9b:a9:b4:c0:33:1f:df:1d:
26:05:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:40:57 2025 by rpki-client