This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File: 323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier: RZU/s6PNv0N2pTgVWGE6tOR1GTQxjMFb/f3kP/QuFTE=
Subject key identifier: 0A:08:7B:85:8C:A2:38:78:17:A8:47:FD:D2:79:AB:BA:77:43:09:4E
Certificate issuer: /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial: 07D2BB1A42A53B5DC5C76C3CF41B17EDA25C6B06
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time: Wed 26 Nov 2025 15:54:44 +0000
ROA not before: Wed 26 Nov 2025 15:49:44 +0000
ROA not after: Wed 25 Nov 2026 15:54:44 +0000
asID: 264936
IP address blocks: 2804:3034::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d2:bb:1a:42:a5:3b:5d:c5:c7:6c:3c:f4:1b:17:ed:a2:5c:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Validity
Not Before: Nov 26 15:49:44 2025 GMT
Not After : Nov 25 15:54:44 2026 GMT
Subject: CN=0A087B858CA2387817A847FDD279ABBA7743094E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:2a:f9:3e:58:34:ce:6e:e4:f5:f5:1a:d4:
e2:e0:c7:d0:ee:89:00:27:c1:6b:df:06:ac:1d:2e:
2b:28:f3:8b:d2:b2:98:05:b4:cc:83:3c:00:74:3a:
07:96:f3:cc:c0:b0:20:0e:ea:40:a3:ab:aa:55:fd:
6a:0c:e3:9d:5f:e6:93:0e:5e:e5:77:de:b5:56:db:
f2:d7:2f:ca:cb:51:fe:c1:82:b2:ca:0e:98:ab:bc:
65:3d:96:08:7c:8a:52:4e:41:3f:c4:7e:e6:36:d8:
2d:63:1a:1e:37:7d:7f:14:8a:3b:4e:b9:61:4e:d3:
46:68:58:11:d1:20:16:bb:94:56:0d:26:c7:2b:2d:
6e:5f:bf:37:c2:4f:06:04:02:ab:46:71:1c:2c:23:
8e:95:ea:29:e0:40:de:96:5c:44:f0:b8:8b:1a:ae:
94:b7:e8:a3:0c:a3:83:36:ad:fe:18:3f:6d:7b:50:
53:8f:3e:95:d3:f9:1e:a3:9c:79:f1:b9:fb:bd:97:
98:e5:72:ed:f4:43:9b:be:b6:72:47:e8:f4:97:d3:
2e:63:b5:8c:7f:0b:ac:98:68:90:ca:25:28:81:83:
dd:8a:e9:94:ee:46:2c:ba:32:e0:71:6a:33:6e:e2:
fe:8f:b8:24:b1:0d:d7:44:e7:a5:23:9b:3d:f7:f3:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:7B:85:8C:A2:38:78:17:A8:47:FD:D2:79:AB:BA:77:43:09:4E
X509v3 Authority Key Identifier:
keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3034::/44
Signature Algorithm: sha256WithRSAEncryption
09:c7:5f:af:78:9a:ce:7f:72:6a:01:5a:32:79:68:f8:d8:fd:
6f:5b:46:7d:57:1b:17:7d:d0:bb:14:62:8d:a1:2e:12:33:0c:
7d:bb:5b:4c:ac:ac:0f:2d:9e:ed:ba:91:53:1b:b7:cf:e0:62:
fc:d0:84:58:2f:79:da:8b:fb:b5:ec:df:04:7f:cb:6f:e0:5b:
48:30:bd:28:14:0f:dd:2e:75:a7:46:81:a8:80:e8:43:6c:5c:
21:24:36:1b:59:e3:3d:d2:ca:06:03:67:81:9f:75:9d:51:7a:
81:bc:d0:0b:10:a5:06:d2:86:80:2b:31:f2:b2:9d:96:8a:10:
14:c7:71:82:1f:51:e2:d8:f3:ad:99:3e:ea:8e:9d:c2:3d:49:
e5:fe:44:72:e8:5e:28:e0:b9:11:f2:ed:bf:31:03:99:c2:f7:
e6:c6:8d:5f:f8:c7:99:fe:c4:35:5a:17:aa:a4:47:a4:57:66:
81:32:1b:16:a3:ec:e0:a1:cd:cc:45:9b:0d:1d:a8:00:89:12:
50:da:f6:40:08:45:71:33:ac:48:91:ea:a4:f3:ea:22:29:e0:
c6:74:66:c6:76:64:bb:07:32:ee:c0:9b:b6:37:03:6f:90:a4:
b8:0f:2f:85:b9:b9:3a:57:7d:c3:94:9d:84:a9:66:7b:e6:a7:
f4:03:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:34 2025 by rpki-client