This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33332d3333203d3e20323636343436.roa
File: 323830343a333766343a3a2f33332d3333203d3e20323636343436.roa (raw, json)
Hash identifier: 4l4RIAzeURLug3mkn3zzgcoqz6Sf66d1E+AagBJPygk=
Subject key identifier: F3:04:97:12:61:57:97:5A:A3:6E:5A:B6:BA:72:2E:42:07:85:A9:16
Certificate issuer: /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial: 2AFFA92E5386FCDE88CBC094E79A75B3DE803FD8
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33332d3333203d3e20323636343436.roa
Signing time: Fri 28 Nov 2025 13:35:11 +0000
ROA not before: Fri 28 Nov 2025 13:30:11 +0000
ROA not after: Fri 27 Nov 2026 13:35:11 +0000
asID: 266446
IP address blocks: 2804:37f4::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 08:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ff:a9:2e:53:86:fc:de:88:cb:c0:94:e7:9a:75:b3:de:80:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Validity
Not Before: Nov 28 13:30:11 2025 GMT
Not After : Nov 27 13:35:11 2026 GMT
Subject: CN=F30497126157975AA36E5AB6BA722E420785A916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:4a:de:11:29:2e:7e:1a:6c:f9:f0:20:fe:
c3:16:53:0b:0d:7f:2e:3c:be:bd:c0:11:ce:96:62:
9e:26:3f:47:fe:ee:17:15:b9:a8:27:95:a2:92:72:
27:f8:2f:a8:1b:22:47:d0:66:e0:e1:82:5b:f7:75:
75:56:5b:e2:dd:9d:c7:bd:5b:1e:69:12:b2:31:b2:
9a:21:c2:45:01:bc:c5:38:e6:72:56:fa:5c:13:a8:
96:ac:36:2e:6b:d2:33:ac:0d:59:6c:6c:6b:be:42:
1a:d5:93:33:47:b7:b7:bd:a2:0f:62:99:13:d6:e4:
30:75:46:4b:e2:10:c2:c9:00:cc:d5:6f:86:83:23:
2c:23:fc:e0:59:52:25:bc:ac:b6:3e:81:53:1a:eb:
fa:76:1f:d9:bc:0f:57:1c:cf:71:05:b0:a2:36:7d:
19:2d:74:5a:e1:48:9b:f9:a7:70:6b:0b:37:b0:5e:
76:17:8b:df:93:f7:96:27:c7:af:df:3e:37:62:78:
d4:1a:c3:fb:1f:ce:68:09:c4:39:dc:c3:7b:19:be:
cd:00:67:92:46:5e:95:b4:72:c4:89:3d:da:fc:38:
ba:b9:ee:fb:6f:04:80:20:c4:62:c9:9d:bf:86:cc:
aa:60:41:f9:89:05:45:5f:ba:34:38:c6:e0:bc:c8:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:97:12:61:57:97:5A:A3:6E:5A:B6:BA:72:2E:42:07:85:A9:16
X509v3 Authority Key Identifier:
keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33332d3333203d3e20323636343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:37f4::/33
Signature Algorithm: sha256WithRSAEncryption
9b:12:e6:2c:01:9b:3b:f0:83:85:b5:30:3e:61:d5:55:b5:89:
b4:6a:cc:7f:e8:0c:e9:ce:39:6c:67:5c:f2:73:64:5f:6e:47:
98:a2:5d:2f:06:13:45:38:58:b4:f7:f0:85:05:d5:2f:06:7d:
2a:fe:d3:46:8a:aa:81:c7:de:60:2c:49:e3:d3:a5:f3:5b:5b:
2f:98:d3:15:06:da:cd:e5:db:e5:2f:75:a5:dd:6d:b3:e5:2c:
af:11:55:f2:d5:ef:12:fa:b2:fb:93:9e:3a:58:86:93:6f:e0:
ec:34:b1:62:e4:5a:a9:3c:69:d6:82:40:d3:a4:ad:08:4e:3a:
39:f5:d5:7c:99:1a:26:cf:ad:cf:71:04:ca:5a:7e:fd:9a:6b:
ff:6a:c2:f1:a3:5e:25:c0:c8:df:e6:4d:04:9c:ba:62:ae:16:
d9:1e:be:a8:1c:af:0a:63:a8:6e:ac:f3:e1:ab:8a:4c:1f:50:
ee:9c:a3:72:ac:bd:b3:7c:50:5b:11:bd:02:e6:91:00:55:ca:
b0:4c:5a:ee:30:ea:21:38:ed:bb:15:4d:32:e7:15:e5:37:4b:
5c:96:1a:35:3d:04:fc:9f:c6:ea:7f:b0:e2:a8:cb:b2:97:e9:
df:15:5b:4d:18:2c:a0:55:06:5a:d6:f6:06:62:e5:0b:60:70:
2a:43:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:27:56 2025 by rpki-client