This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa
File: 323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier: ItCF7/5WWPpDpautNlBrdm7eR4JtF6m2sPLjVkRN/4U=
Subject key identifier: 69:52:9A:DC:21:22:F1:ED:8B:A8:18:FC:A9:BD:3D:79:36:35:7F:D7
Certificate issuer: /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial: 123DD2474650C54FDC39312D65664340C9BA5A3D
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa
Signing time: Wed 26 Nov 2025 15:54:45 +0000
ROA not before: Wed 26 Nov 2025 15:49:45 +0000
ROA not after: Wed 25 Nov 2026 15:54:45 +0000
asID: 264936
IP address blocks: 2804:3034:60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3d:d2:47:46:50:c5:4f:dc:39:31:2d:65:66:43:40:c9:ba:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Validity
Not Before: Nov 26 15:49:45 2025 GMT
Not After : Nov 25 15:54:45 2026 GMT
Subject: CN=69529ADC2122F1ED8BA818FCA9BD3D7936357FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:39:33:fd:87:3d:9a:7b:3c:87:1e:30:ec:
a2:5b:3f:1d:b5:f7:57:0f:ff:4a:f8:93:70:41:25:
fb:ca:42:6b:86:a8:a2:b5:ba:2c:07:9e:b8:f9:b6:
5e:a7:0e:71:1f:32:2c:be:a6:94:d5:75:05:1a:2d:
dd:31:53:ff:bc:d1:51:af:90:d8:be:8f:c3:6a:3f:
bf:dd:4e:14:46:42:1e:10:f4:cb:1b:44:53:df:76:
d6:00:d6:d2:28:1e:92:8d:3d:20:52:a2:32:82:0c:
fd:a2:b1:66:d1:24:1e:44:e9:40:a7:fc:3c:a0:38:
41:83:1f:1a:67:99:09:4b:62:af:be:59:49:95:6a:
c8:dd:5a:d6:9b:68:38:03:20:2e:16:2e:e1:ca:43:
9a:6f:95:8a:5c:79:28:c7:dc:e8:b6:42:95:e8:d7:
32:df:6f:74:2e:35:1d:a2:db:1d:a2:64:d3:3e:c8:
ec:81:e2:93:57:e5:6a:d9:fb:a2:eb:b1:06:4c:e5:
67:66:b3:fb:f3:fc:8d:e0:75:bd:d7:b3:90:d5:31:
d4:76:96:f9:1c:d5:20:5c:53:22:4d:2e:0c:b0:91:
75:fc:5d:4c:30:53:6d:6b:6e:20:45:ca:ba:ff:6a:
3e:b5:d0:36:97:9e:0e:1f:91:04:ed:9f:1d:f0:f0:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:9A:DC:21:22:F1:ED:8B:A8:18:FC:A9:BD:3D:79:36:35:7F:D7
X509v3 Authority Key Identifier:
keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3034:60::/44
Signature Algorithm: sha256WithRSAEncryption
66:80:89:c7:ef:c6:3e:7a:d4:97:d7:69:45:22:f3:99:b9:23:
64:a1:a0:07:93:c4:5d:d0:b7:dc:bb:d6:bc:2b:a3:c4:18:b0:
c0:28:0f:17:34:87:75:74:09:2e:80:c7:cc:79:c1:94:61:ee:
5d:4b:34:ad:7d:ce:8c:37:42:66:ce:91:b4:66:6b:0c:26:e7:
df:db:53:b0:e7:16:be:47:69:3c:51:db:26:fe:f9:ac:57:8b:
e1:c8:0f:c3:8c:f0:04:86:c2:cb:5a:36:36:40:74:89:ba:3f:
9c:90:ab:a3:a4:66:59:e8:fd:70:05:b7:13:58:b9:29:68:47:
a8:03:41:db:a6:c4:67:af:45:c4:45:71:40:61:d9:8b:25:1b:
da:ff:b4:13:79:55:bc:36:45:58:65:7b:97:00:27:c0:b8:79:
32:0b:cc:a7:b5:f0:f8:3c:29:bc:ad:22:17:2a:6a:f2:eb:a3:
c7:45:6f:57:1d:1d:e0:1d:54:91:1e:a0:18:2f:7e:c1:b1:8c:
63:10:e6:0e:b3:35:2f:d0:aa:42:a0:dc:ce:e8:65:29:2c:1d:
69:36:a3:59:a6:df:2a:64:28:90:9c:66:b8:47:60:a7:d1:e9:
08:3c:6c:1d:43:87:a0:b2:fd:e6:21:0e:33:c5:ff:22:c7:f8:
00:ec:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:01 2025 by rpki-client