This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
File: 323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier: c0/SqBV5T4crWw9NSjpX+dUNtD1PmlKVj5CYgW077KY=
Subject key identifier: 91:17:71:DC:5E:20:D0:42:47:E6:A7:47:85:AC:0A:35:5A:D7:62:97
Certificate issuer: /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial: 398407319878F34C5859561E093089640ED1C02C
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
Signing time: Wed 26 Nov 2025 15:54:45 +0000
ROA not before: Wed 26 Nov 2025 15:49:45 +0000
ROA not after: Wed 25 Nov 2026 15:54:45 +0000
asID: 264936
IP address blocks: 2804:3034:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:84:07:31:98:78:f3:4c:58:59:56:1e:09:30:89:64:0e:d1:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Validity
Not Before: Nov 26 15:49:45 2025 GMT
Not After : Nov 25 15:54:45 2026 GMT
Subject: CN=911771DC5E20D04247E6A74785AC0A355AD76297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:8f:ec:04:b7:09:99:4f:eb:70:f8:7c:ea:
b8:14:e0:57:bf:3c:de:d2:87:8a:25:ae:cc:88:9b:
8e:91:7a:c1:b6:37:36:e5:8a:84:4c:d0:77:75:97:
fa:cd:f8:ef:03:13:a2:c9:15:9a:3e:74:81:47:0a:
53:aa:9c:51:92:6b:26:05:cb:2d:2f:a7:61:14:17:
51:aa:0a:cc:74:2b:e6:f4:5f:6a:fe:7e:95:b3:f6:
a4:85:de:15:d9:3d:66:29:8e:7f:af:3d:98:89:39:
15:e6:4e:b7:f4:e0:3d:7e:46:ac:75:cc:b4:ec:26:
98:eb:e4:4b:57:7d:20:72:11:06:02:1e:0d:74:6f:
55:a8:6c:9c:ce:48:53:d3:11:7e:9a:04:55:44:0a:
28:71:40:88:7d:8c:b9:f8:77:15:55:11:ae:1d:24:
61:04:3f:e2:33:08:ff:c2:4d:df:c9:e9:ff:ce:70:
a5:a8:97:1a:dd:7f:8b:fb:ea:0e:8f:a6:9a:dd:50:
0d:45:1f:78:01:61:2d:45:2b:66:7f:ed:e2:11:81:
0b:64:52:48:ff:dd:67:94:2d:a0:49:70:4a:19:bf:
42:f9:16:7c:ec:a1:75:d7:95:d1:e3:49:ba:d1:23:
05:44:5c:00:d6:b1:cc:16:1c:21:79:2c:1c:d4:7e:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:17:71:DC:5E:20:D0:42:47:E6:A7:47:85:AC:0A:35:5A:D7:62:97
X509v3 Authority Key Identifier:
keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3034:40::/44
Signature Algorithm: sha256WithRSAEncryption
7a:8c:5d:6b:4d:b6:3d:59:07:14:2e:9f:d1:01:e1:4f:e1:f3:
47:d5:c3:30:48:b2:5b:ad:71:b8:f2:72:eb:51:1e:74:67:d8:
d9:f1:5d:17:f5:d4:a2:6e:ec:df:2d:71:72:42:bf:18:3f:59:
8a:09:36:c4:1d:67:5a:62:56:7e:9d:79:83:ed:d2:6d:0b:bb:
7d:d2:d8:10:1a:15:b4:32:a7:e5:cc:02:8f:8b:a4:2c:84:84:
f7:95:8c:66:14:3e:a6:52:86:6c:5b:94:68:b8:e5:60:59:6c:
ce:71:6a:69:1b:cb:23:0c:57:d9:f7:da:dc:c4:be:a4:93:d6:
a0:c7:a6:14:14:8f:24:55:72:f0:be:a6:29:41:c2:d7:f7:4d:
f2:95:62:2a:94:e2:44:f7:50:3d:8d:69:78:f6:70:f6:6c:ba:
75:7c:3d:0c:95:a0:8e:9d:86:9c:ce:15:ac:79:93:d7:81:ea:
65:4e:52:25:24:28:74:76:a4:c7:0b:46:87:91:3b:8b:78:2d:
a7:1c:a4:11:e9:0c:44:01:52:0c:08:08:32:d4:d1:82:d2:43:
36:c4:77:47:e7:ac:de:c3:fd:f7:3e:8f:5b:13:1a:13:1b:96:
63:d6:f1:70:0d:35:e5:1d:5e:9d:7a:3f:48:c8:c0:f5:d9:fb:
da:f7:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:33 2025 by rpki-client