This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/323830343a326363343a3a2f33322d313238203d3e20323635323432.roa
File: 323830343a326363343a3a2f33322d313238203d3e20323635323432.roa (raw, json)
Hash identifier: CqfsmrXQSw0KVMoN7/rDxEOPPqtIUHfuvqYfHXSfdNA=
Subject key identifier: 1B:E4:0A:E1:64:03:32:A0:7B:EE:B5:4B:ED:A6:DD:38:E3:1F:F9:96
Certificate issuer: /CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E
Certificate serial: 6370500DEF865F12097D33B0B201A3B2D0ECD34C
Authority key identifier: D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/323830343a326363343a3a2f33322d313238203d3e20323635323432.roa
Signing time: Sun 23 Nov 2025 22:04:07 +0000
ROA not before: Sun 23 Nov 2025 21:59:07 +0000
ROA not after: Sun 22 Nov 2026 22:04:07 +0000
asID: 265242
IP address blocks: 2804:2cc4::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl
rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 17:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:70:50:0d:ef:86:5f:12:09:7d:33:b0:b2:01:a3:b2:d0:ec:d3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E
Validity
Not Before: Nov 23 21:59:07 2025 GMT
Not After : Nov 22 22:04:07 2026 GMT
Subject: CN=1BE40AE1640332A07BEEB54BEDA6DD38E31FF996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:89:75:dc:2e:35:c1:9f:03:4e:e4:d0:60:
14:d4:aa:4b:66:de:eb:a3:23:01:a7:e7:9b:ad:95:
88:f6:70:f7:8d:63:9b:5a:a1:34:43:c4:31:06:a3:
7a:ea:e0:6c:75:c2:f4:b4:bd:22:b3:9d:83:f3:7f:
52:a8:24:d0:5f:f3:87:28:3e:38:a7:bb:9f:83:fe:
ac:c8:8c:3b:63:e2:bf:ea:29:d8:a5:2a:62:e5:0e:
f6:1b:6f:50:07:39:8e:b4:ad:6c:35:49:90:ee:3a:
7d:28:a5:f6:f6:f0:b2:23:48:05:cb:66:07:ea:5a:
de:71:e1:11:98:12:57:e6:d1:42:7d:01:e8:41:9f:
e3:71:f4:eb:b8:6b:73:54:a5:90:a7:69:d9:01:e9:
8e:c7:d6:a5:1a:ce:b9:52:f6:1b:a7:02:55:84:96:
c6:9d:ae:77:25:ce:b7:e4:83:f0:85:bd:68:46:ca:
3d:c2:b0:8b:f3:cc:1f:bd:e2:3a:81:c0:75:05:51:
64:f0:02:3f:11:7f:e5:03:97:f5:4f:af:8f:fb:b7:
bb:45:3c:7f:54:33:3d:4b:3b:22:40:35:a8:8d:66:
7d:e1:f1:f1:04:5d:93:31:d9:32:cf:0a:08:c3:8b:
ce:3d:cf:e7:07:69:8e:a3:46:6f:ee:dc:74:11:ee:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:0A:E1:64:03:32:A0:7B:EE:B5:4B:ED:A6:DD:38:E3:1F:F9:96
X509v3 Authority Key Identifier:
keyid:D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/323830343a326363343a3a2f33322d313238203d3e20323635323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2cc4::/32
Signature Algorithm: sha256WithRSAEncryption
17:d6:c2:4e:7a:f7:a1:70:86:62:57:c3:89:bb:41:55:67:5d:
49:ea:bb:f9:b7:ad:ef:78:06:5e:26:73:c5:e8:d8:33:26:7d:
07:61:0d:5f:a3:ad:41:53:f1:97:b0:33:0d:2c:22:31:54:02:
33:4a:8a:b6:72:d4:7a:7c:32:28:fe:1a:79:f2:bb:92:53:34:
c0:2e:bc:88:ab:b8:d8:6d:48:b9:5a:89:80:b2:64:0e:46:8f:
07:c8:9e:30:b0:3c:8f:e4:73:00:fc:52:31:d9:4d:1e:7e:00:
d5:cb:45:fa:b9:88:a1:74:3e:01:15:a8:c3:f1:73:30:59:92:
0b:55:76:6b:c1:35:db:b4:ec:b3:e7:b9:8a:21:9f:c0:c1:ac:
9d:f5:d4:89:22:70:ed:af:f9:08:45:dd:02:44:ad:eb:72:c6:
49:d0:2d:a0:48:68:da:88:54:ce:91:b3:cb:04:c5:3a:2b:e4:
f7:e7:b5:31:3a:d2:c2:49:02:0a:35:bb:4b:af:50:8a:01:83:
d4:d0:0b:3a:16:95:c5:3a:75:6f:0e:80:e4:84:db:a0:a8:c7:
b5:41:81:0b:2c:88:07:d2:06:0b:06:cb:cd:f2:7d:17:7f:4c:
e2:ac:84:31:11:30:da:08:86:1c:7b:4c:99:b2:c8:8e:e4:b9:
fd:05:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:53:18 2025 by rpki-client