This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
File: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (raw, json)
Hash identifier: RMxzWTzNde7mg7vjEKG+Ja5QneH6z2ZAUqF+ftNaFuA=
Subject key identifier: 11:67:48:D9:36:56:54:9F:FD:CA:14:25:37:8E:47:CB:F5:F5:DA:1D
Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0
Certificate serial: 7CE68E118A33B0A14154B4881F3DFAFD49348CB1
Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
Signing time: Fri 23 Jan 2026 15:06:32 +0000
ROA not before: Fri 23 Jan 2026 15:01:32 +0000
ROA not after: Fri 22 Jan 2027 15:06:32 +0000
asID: 266168
IP address blocks: 2804:3bbc::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 06:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e6:8e:11:8a:33:b0:a1:41:54:b4:88:1f:3d:fa:fd:49:34:8c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0
Validity
Not Before: Jan 23 15:01:32 2026 GMT
Not After : Jan 22 15:06:32 2027 GMT
Subject: CN=116748D93656549FFDCA1425378E47CBF5F5DA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:16:cc:70:c1:7e:78:09:8d:14:e6:ea:70:
53:20:08:96:d1:2d:62:ab:bb:0d:44:93:0c:e5:ec:
d7:b5:38:44:0e:49:71:c4:a1:cc:ec:f5:3d:c0:9e:
dc:4a:7c:31:54:70:0f:8e:2c:50:e8:66:1d:da:1f:
00:ef:be:12:74:4e:40:aa:4e:f9:99:55:8e:71:c6:
46:e0:12:e4:22:15:ff:2f:14:70:b4:bc:96:fc:4d:
d2:1a:4e:c6:03:84:8b:22:35:f1:d4:bb:a4:90:8f:
8b:2f:72:50:50:9d:f4:1e:a7:4a:bb:b4:f4:e5:8c:
67:cf:d8:72:e2:61:a6:de:6b:f0:95:6a:43:f9:3a:
dd:6d:61:9f:09:12:43:9e:86:21:5b:55:64:05:ab:
46:62:73:7d:b2:af:e2:ee:91:d2:3e:70:5b:41:35:
22:d8:96:8a:55:e0:8f:b6:81:35:a0:b0:e1:28:a9:
3e:fa:04:7e:22:98:42:1d:f8:26:0d:44:e6:49:82:
81:12:41:e0:54:77:2b:bf:26:2a:69:27:2f:43:c5:
cd:20:65:9e:13:dc:ca:19:19:b5:10:93:8b:a5:5e:
8a:67:57:41:5c:a0:27:bc:b5:51:0a:b7:6b:73:5f:
36:26:30:93:8f:5e:c2:66:9d:b9:2c:4f:0c:ae:b6:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:48:D9:36:56:54:9F:FD:CA:14:25:37:8E:47:CB:F5:F5:DA:1D
X509v3 Authority Key Identifier:
keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3bbc::/32
Signature Algorithm: sha256WithRSAEncryption
2d:16:8b:0f:73:fa:eb:18:52:fd:06:4a:68:59:5a:a2:25:73:
54:48:8c:ed:35:0e:5c:03:12:26:bb:1b:74:b4:8f:e6:64:ca:
a1:e8:d8:ae:09:09:df:cb:e4:ad:14:07:65:b4:8c:30:7f:15:
57:af:f7:3c:3a:71:ad:89:00:00:34:95:10:06:67:35:54:c4:
d5:0c:b8:9d:6c:15:f8:09:1b:ad:b5:dd:94:59:2d:20:46:e6:
2f:19:db:e5:d2:8f:56:67:e3:10:90:39:e3:c6:c6:e0:fa:59:
f4:d6:9d:1b:a7:9d:c6:9c:47:46:63:72:46:89:10:0a:1d:23:
f9:3c:d4:c9:87:d2:9a:2d:ac:f3:be:45:96:63:1c:d7:c1:0e:
df:4b:fa:28:90:30:1e:70:a3:f1:48:3b:72:70:b7:b8:83:fd:
21:be:b1:08:fe:a6:ff:a9:7b:28:c7:ce:d2:65:09:e4:62:90:
b7:db:12:d3:d0:5a:dd:f3:db:8e:9a:2d:fd:f7:b1:95:7b:58:
8f:96:35:1c:b8:9b:1b:23:0a:50:36:8b:56:53:25:73:bd:d5:
67:89:d9:3f:7f:d2:38:a8:3b:9d:99:c0:ec:ea:6e:64:ce:1c:
11:e9:96:0b:ee:94:2e:89:e0:3c:9c:7f:0c:4f:1a:c5:0c:fa:
79:5d:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:50 2026 by rpki-client