This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa
File: 323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (raw, json)
Hash identifier: RuLwpb36Mc/aQP5+sXykZeAX0jgsnSK9Ur8mUN1VxfU=
Subject key identifier: 7F:FC:0A:4A:99:2E:4E:02:D5:61:77:2C:D8:F0:66:AE:D5:14:E2:9D
Certificate issuer: /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial: 496DEED764E51AE57945F7402D1157DE0298BC1D
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa
Signing time: Mon 24 Nov 2025 16:21:06 +0000
ROA not before: Mon 24 Nov 2025 16:16:06 +0000
ROA not after: Mon 23 Nov 2026 16:21:06 +0000
asID: 262438
IP address blocks: 2804:31c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6d:ee:d7:64:e5:1a:e5:79:45:f7:40:2d:11:57:de:02:98:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Validity
Not Before: Nov 24 16:16:06 2025 GMT
Not After : Nov 23 16:21:06 2026 GMT
Subject: CN=7FFC0A4A992E4E02D561772CD8F066AED514E29D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:a5:9c:52:e3:20:b3:db:5e:79:18:d8:7e:
e0:92:c0:56:b2:7f:68:a7:5f:13:15:f6:53:47:ec:
64:70:04:01:0a:2a:a1:50:49:95:6d:d0:97:23:e4:
aa:b0:9c:20:fd:4a:cc:56:c9:01:60:a1:3a:31:e5:
16:ca:b3:99:36:1e:a8:94:ca:13:a0:07:ca:d3:4f:
7a:da:1d:fa:14:25:4e:bf:09:65:0e:09:a5:4b:80:
fb:c1:de:70:9c:69:b6:60:cc:33:60:cd:67:87:cf:
03:a2:94:46:8d:4a:68:49:56:5f:d3:9c:9b:5f:38:
39:cf:5e:4d:fb:c2:07:80:67:9e:e3:23:99:44:1b:
78:45:5a:e7:1a:e5:10:c4:e0:3c:32:e6:bf:6c:51:
2d:76:f4:76:f3:93:ea:44:33:8b:75:b2:57:ce:ac:
48:49:80:4d:13:e2:dd:2b:cd:8b:71:73:1f:0c:be:
23:e8:2e:e0:90:5a:31:6a:e4:ad:d8:91:70:8a:10:
69:bd:8a:9e:cf:8c:fa:ac:76:b4:90:3b:4c:73:0b:
9d:78:33:ed:83:16:a8:24:eb:06:ab:16:ac:8d:d4:
bb:a8:a8:06:49:01:a6:ca:bb:9f:62:2d:4a:10:40:
42:80:06:58:8e:0a:32:32:7d:b2:0d:5f:8f:9e:0e:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:0A:4A:99:2E:4E:02:D5:61:77:2C:D8:F0:66:AE:D5:14:E2:9D
X509v3 Authority Key Identifier:
keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:31c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:c3:2f:aa:13:f1:29:08:31:7d:c2:32:24:9a:ea:dc:1d:56:
e4:7c:fb:59:ed:9e:e2:2b:1e:d0:c9:b7:a9:14:a3:a8:54:f3:
96:86:d6:6c:c3:2f:4a:ca:86:32:bc:c0:8f:3c:77:af:bc:4e:
1c:9b:2e:93:52:be:3e:e9:67:21:85:71:06:71:f7:1b:82:f2:
59:fb:35:12:a0:10:04:e2:11:12:d1:0b:d2:d4:14:fd:86:2b:
06:89:2f:da:03:2e:cb:1a:f7:04:2f:9d:2e:bb:f0:64:5b:8b:
32:03:a7:c4:56:61:d1:e7:cc:f2:c4:28:5f:77:fa:b1:f3:1e:
5d:f1:97:16:8f:45:87:03:31:1e:19:f1:25:1f:22:9d:37:d1:
72:98:c8:6a:53:7e:71:74:7a:ee:19:5a:12:9b:c5:a4:d2:73:
ec:f2:22:23:7e:ee:c0:a6:0d:18:b8:a8:75:65:e4:2d:10:4b:
fa:f4:c2:74:5a:17:5f:08:d9:56:18:10:29:ab:d0:b8:38:18:
5f:33:a1:02:a4:f2:fd:04:3b:86:99:29:f0:0a:1f:0f:81:ad:
e8:30:eb:f7:f5:b4:9b:b4:da:23:79:3b:1d:22:04:fc:04:ff:
32:b4:a1:e2:ee:51:03:61:08:24:1d:69:6e:dd:c8:7b:34:72:
8a:8a:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:13 2025 by rpki-client