This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/323830343a383534633a3a2f33322d313238203d3e20323732353730.roa
File: 323830343a383534633a3a2f33322d313238203d3e20323732353730.roa (raw, json)
Hash identifier: Bn+gCxgIPH/EJF8td2/ckDJa4nSufA5hgSL+Tqi1nDk=
Subject key identifier: 9B:43:D1:A6:3D:5F:EC:C7:09:9E:FF:CB:AE:28:07:52:87:36:7F:AC
Certificate issuer: /CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2
Certificate serial: 55534B1CC34640A5F7A0C12489C10289E9E906FB
Authority key identifier: 11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/323830343a383534633a3a2f33322d313238203d3e20323732353730.roa
Signing time: Fri 16 Jan 2026 21:25:17 +0000
ROA not before: Fri 16 Jan 2026 21:20:17 +0000
ROA not after: Fri 15 Jan 2027 21:25:17 +0000
asID: 272570
IP address blocks: 2804:854c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl
rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 00:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:53:4b:1c:c3:46:40:a5:f7:a0:c1:24:89:c1:02:89:e9:e9:06:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2
Validity
Not Before: Jan 16 21:20:17 2026 GMT
Not After : Jan 15 21:25:17 2027 GMT
Subject: CN=9B43D1A63D5FECC7099EFFCBAE28075287367FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:99:c0:47:e5:7c:98:4b:53:5c:b5:ca:f1:
20:ef:e4:3b:0f:04:8e:79:6f:52:c0:dd:2b:a0:8e:
78:c0:97:7b:a9:f6:c7:92:bc:51:27:ff:b0:50:a4:
4f:a9:45:e4:73:db:67:d4:d8:09:bb:51:29:b0:7e:
ac:1b:85:01:d2:b5:82:83:31:89:53:da:a0:53:4d:
34:b5:aa:db:73:88:5b:a2:98:da:8b:4d:dc:40:22:
2c:6e:d7:19:19:34:66:a3:b1:26:76:6c:30:1e:ec:
c1:b8:ce:09:4f:57:a4:35:d8:bb:fd:77:ef:53:99:
b7:e9:1e:e7:06:df:ad:89:f1:36:53:61:12:88:63:
3f:08:2d:c9:c7:74:9e:0d:30:a3:0d:20:1f:4b:91:
17:9e:d1:d5:81:9a:5c:87:19:d7:8a:d5:13:e4:58:
cb:5e:4e:12:d7:1d:8d:3b:03:ee:fb:9f:d9:72:81:
ff:fd:03:38:ec:17:51:16:b2:3a:63:5a:82:bc:24:
f9:19:7b:b3:af:37:f8:40:dc:38:1c:9d:79:70:31:
3d:9b:2c:6f:d5:6c:82:df:0e:36:a3:20:e6:30:bd:
df:ea:74:e5:35:78:90:6e:e1:92:b5:b9:9c:23:9e:
a5:b3:24:bc:12:77:05:31:de:84:2c:10:3d:3e:72:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:D1:A6:3D:5F:EC:C7:09:9E:FF:CB:AE:28:07:52:87:36:7F:AC
X509v3 Authority Key Identifier:
keyid:11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/323830343a383534633a3a2f33322d313238203d3e20323732353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:854c::/32
Signature Algorithm: sha256WithRSAEncryption
7d:2c:2a:5c:03:f1:c2:40:8f:08:56:89:7d:7a:76:71:24:2d:
fb:e8:97:85:7f:9d:60:c1:a7:60:f2:f3:37:30:80:74:1b:78:
e3:d3:46:80:0a:70:42:fe:f9:fb:a2:10:d6:82:e1:10:20:4f:
5d:65:ef:21:f6:79:11:6c:ef:89:bb:ee:03:02:ac:8a:29:d8:
2b:cb:7c:3d:71:ab:af:1c:fd:a0:20:62:a0:02:20:53:eb:47:
b2:14:9b:eb:28:33:3f:57:57:0b:f3:7c:08:a8:64:fc:d2:32:
ac:71:de:04:f1:18:68:dd:86:0c:04:56:88:3a:53:b2:6e:7b:
73:78:aa:7d:1d:8c:cd:8f:aa:a0:ed:ec:fb:63:0f:ae:3e:eb:
04:36:3b:ce:45:11:84:b1:0a:13:1e:38:22:b9:f9:59:d4:8f:
4d:fc:f7:74:72:d8:03:9d:0e:29:51:99:66:6f:e4:f1:f1:31:
68:ba:79:b6:a2:59:fe:dc:e3:7b:a4:cd:c0:f5:f7:78:d3:c5:
0a:ae:e1:88:af:87:af:f0:cd:b7:13:03:95:10:75:a8:d7:d0:
ac:fd:54:d6:57:30:1f:c4:9b:17:61:16:9a:36:48:ec:38:76:
0e:1f:79:0d:5d:fe:26:41:cd:59:01:d5:b5:62:e8:e3:db:2e:
9c:73:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:46:36 2026 by rpki-client