This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
File: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (raw, json)
Hash identifier: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=
Subject key identifier: A6:50:26:B2:6E:7E:F7:E0:DF:1D:97:C7:69:F7:77:7F:F5:B6:63:2B
Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
Certificate serial: 36F4854818C7866494FD8BFDA316812F2C245F92
Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
Signing time: Fri 16 Jan 2026 15:45:20 +0000
ROA not before: Fri 16 Jan 2026 15:40:20 +0000
ROA not after: Fri 15 Jan 2027 15:45:20 +0000
asID: 266304
IP address blocks: 2804:35c0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl
rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 21:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f4:85:48:18:c7:86:64:94:fd:8b:fd:a3:16:81:2f:2c:24:5f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
Validity
Not Before: Jan 16 15:40:20 2026 GMT
Not After : Jan 15 15:45:20 2027 GMT
Subject: CN=A65026B26E7EF7E0DF1D97C769F7777FF5B6632B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:7b:c0:66:a5:18:8e:51:31:0f:35:f7:3d:
b3:b8:dd:7d:5d:f5:4c:c1:fc:50:1c:6d:ec:b2:c5:
33:c4:05:b8:4c:b5:ca:a9:40:38:05:f7:a9:7c:a7:
00:3a:e5:97:56:61:bd:c8:2e:80:90:29:8f:e9:36:
38:8f:d9:af:ef:d0:66:f8:cb:5c:58:1b:b4:b0:ef:
0c:74:18:c7:32:b0:58:27:6d:95:be:e6:86:5d:f4:
43:40:a8:3c:0b:a4:f9:ff:94:64:03:13:e8:6e:c6:
02:f0:41:82:d3:a4:66:b7:bb:1e:df:8c:bb:83:27:
61:7e:ff:99:76:8b:ec:dc:df:fd:a9:51:b8:12:82:
9b:2e:f7:4c:9a:d8:8f:b2:d0:39:d8:d9:8d:73:64:
7f:bf:fd:97:c5:f0:4e:0c:7a:e2:67:f5:5e:d0:a7:
15:c5:1e:8c:1a:41:56:ca:0e:90:db:b1:68:2b:02:
ef:1d:fa:92:8a:1f:08:33:e5:0b:6b:93:da:d6:35:
d0:d3:a1:ef:bb:e3:c6:f4:29:c7:15:57:32:3a:af:
06:2a:78:fb:dd:7e:09:2a:5a:c2:f0:12:86:e4:5d:
7e:6d:9c:26:87:8a:10:1d:46:89:ce:e1:86:48:a9:
48:1a:ba:24:90:8e:53:03:26:16:df:8e:c5:1e:d8:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:26:B2:6E:7E:F7:E0:DF:1D:97:C7:69:F7:77:7F:F5:B6:63:2B
X509v3 Authority Key Identifier:
keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:f9:33:90:a0:19:9f:03:3a:82:a0:d6:2c:d2:ef:fa:d6:6d:
69:ca:66:33:d2:c9:b7:31:93:1e:c7:b0:cb:bd:71:2b:47:fe:
36:e4:94:5b:01:52:34:77:22:04:f3:28:1d:6b:5f:b1:16:58:
d7:9c:7a:c2:60:6e:db:f1:75:5d:49:50:75:95:81:32:5b:04:
b9:84:73:80:f5:ec:9b:b2:ae:3e:2b:b2:60:f4:bb:d5:9d:b5:
c7:1b:46:b7:51:b0:e9:74:38:ce:f3:59:34:6f:4e:95:e0:03:
12:b3:99:7e:ce:a4:63:b6:95:e7:8f:3b:3b:05:56:09:65:7d:
47:43:52:71:d0:ce:13:2b:75:5b:71:3b:2c:53:bf:1f:dd:68:
ae:86:6c:26:80:49:32:c1:fd:d8:8b:ba:c9:49:cd:88:ff:6a:
12:b9:7d:4a:68:28:b1:a1:a5:b1:4a:3d:f2:99:b1:1f:76:15:
b8:b6:f1:ec:bc:24:43:32:e5:21:4b:f5:83:ae:82:71:9d:99:
4d:89:82:ca:f2:f2:1b:2a:a9:a7:dc:f1:14:79:f2:de:13:f9:
37:41:3a:9b:cd:a4:bf:83:10:68:66:85:8d:cf:bc:6f:40:f5:
cf:f4:38:65:80:fb:2c:f5:83:1c:fb:0b:05:f3:1e:0a:51:75:
a6:39:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:45 2026 by rpki-client