This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/323830343a376134343a3a2f33322d313238203d3e20323731333539.roa
File: 323830343a376134343a3a2f33322d313238203d3e20323731333539.roa (raw, json)
Hash identifier: PmvR7HkefnOERRXEzkOO3kSI77myCE9oXGKs8Ext4AE=
Subject key identifier: 8E:F5:7D:14:4B:BB:4B:2C:C4:4A:84:5A:5F:FE:9C:F8:75:37:2C:81
Certificate issuer: /CN=F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE
Certificate serial: 2EF411AD4309A73DC229A8436060CECDDB341B58
Authority key identifier: F8:DA:4F:77:39:BF:F5:C8:C9:C8:C8:E6:3B:8D:4D:C2:F6:43:56:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/323830343a376134343a3a2f33322d313238203d3e20323731333539.roa
Signing time: Mon 12 Jan 2026 19:53:18 +0000
ROA not before: Mon 12 Jan 2026 19:48:18 +0000
ROA not after: Mon 11 Jan 2027 19:53:18 +0000
asID: 271359
IP address blocks: 2804:7a44::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.crl
rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 21:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f4:11:ad:43:09:a7:3d:c2:29:a8:43:60:60:ce:cd:db:34:1b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE
Validity
Not Before: Jan 12 19:48:18 2026 GMT
Not After : Jan 11 19:53:18 2027 GMT
Subject: CN=8EF57D144BBB4B2CC44A845A5FFE9CF875372C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:fd:fa:a4:78:5c:54:e3:89:6a:87:54:41:
61:67:ed:81:74:13:93:17:45:0e:97:45:51:1c:f9:
fd:39:37:dd:b7:66:06:07:85:25:9a:43:91:74:ee:
c6:83:52:b3:9c:69:0e:62:1e:4e:ea:20:b2:e1:46:
13:75:f2:88:ee:77:79:55:49:48:f9:ab:93:a3:49:
49:e5:03:e5:bc:d2:0c:8f:cd:5e:86:05:0b:1a:47:
ea:7e:de:5f:b6:88:ac:db:12:12:d5:72:22:dc:85:
9a:2f:c9:7b:ea:34:4a:a1:8b:1c:aa:8a:ad:b5:bc:
9b:60:cf:15:e9:23:31:97:65:4d:77:c6:b5:06:2d:
e4:e7:d5:be:f2:24:b0:74:fd:9a:62:c5:8f:44:36:
39:79:4e:d4:d6:49:dd:79:b3:38:60:89:2f:da:93:
29:66:61:1f:50:95:07:64:79:f9:94:fe:52:41:9b:
3b:23:8c:44:cd:fa:1d:db:63:07:8d:bd:96:58:be:
2c:a7:a4:85:53:cf:11:1d:56:cc:97:de:40:d5:ad:
20:ae:ec:e2:16:c1:78:c9:2a:75:ac:0e:70:4d:dd:
a1:4a:9d:fa:ab:b5:fe:7f:ca:a4:12:23:a3:a3:d1:
ab:53:8c:f8:cf:6a:a3:f2:7d:33:1e:58:4a:99:77:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F5:7D:14:4B:BB:4B:2C:C4:4A:84:5A:5F:FE:9C:F8:75:37:2C:81
X509v3 Authority Key Identifier:
keyid:F8:DA:4F:77:39:BF:F5:C8:C9:C8:C8:E6:3B:8D:4D:C2:F6:43:56:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/323830343a376134343a3a2f33322d313238203d3e20323731333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a44::/32
Signature Algorithm: sha256WithRSAEncryption
3a:b3:b1:8e:5c:9a:e3:0b:f4:30:b3:61:46:18:0f:cd:de:89:
0e:b0:a9:c6:0f:56:f5:72:a0:d7:c6:5e:15:25:f2:2f:19:cc:
f4:f4:27:af:0b:8c:eb:56:5c:1e:f5:6e:4c:ce:7d:7d:4c:08:
cb:d2:6b:75:b1:3c:bc:1d:8f:f0:58:c3:c5:80:05:77:e4:49:
47:ec:a2:83:5b:f3:03:ff:05:fb:d2:b4:64:43:94:bc:a7:87:
9d:c8:3b:c8:ce:38:f5:d2:05:3f:3c:e5:38:bc:c9:b9:24:2d:
b7:13:82:23:bb:49:ca:28:c2:c0:0a:a8:36:99:b0:fd:36:1f:
ff:1a:a9:64:f3:a4:a7:6d:aa:95:d7:46:59:f7:fc:c1:91:88:
ee:24:46:a5:5e:04:75:90:7a:7f:fc:e0:4d:d7:29:7e:69:33:
bb:25:d5:1d:e9:91:71:6e:ad:72:cb:bf:af:6a:4f:f6:b5:c5:
21:5e:a0:56:4f:47:8c:7c:39:8e:47:45:2c:41:45:03:75:5d:
38:be:36:da:75:51:a6:aa:a0:31:d1:9f:77:ea:ce:9d:c8:6c:
c2:bb:7e:b1:c7:9e:ed:ac:18:fa:27:23:b7:f1:83:e3:6d:85:
79:03:82:fd:51:d3:05:93:68:12:b0:c0:27:cc:ef:d3:2d:69:
26:e9:e7:1e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULvQRrUMJpz3CKahDYGDOzds0G1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhEQTRGNzczOUJGRjVDOEM5QzhDOEU2M0I4RDREQzJG
NjQzNTZFRTAeFw0yNjAxMTIxOTQ4MThaFw0yNzAxMTExOTUzMThaMDMxMTAvBgNV
BAMTKDhFRjU3RDE0NEJCQjRCMkNDNDRBODQ1QTVGRkU5Q0Y4NzUzNzJDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSXv36pHhcVOOJaodUQWFn7YF0
E5MXRQ6XRVEc+f05N923ZgYHhSWaQ5F07saDUrOcaQ5iHk7qILLhRhN18ojud3lV
SUj5q5OjSUnlA+W80gyPzV6GBQsaR+p+3l+2iKzbEhLVciLchZovyXvqNEqhixyq
iq21vJtgzxXpIzGXZU13xrUGLeTn1b7yJLB0/ZpixY9ENjl5TtTWSd15szhgiS/a
kylmYR9QlQdkefmU/lJBmzsjjETN+h3bYweNvZZYviynpIVTzxEdVsyX3kDVrSCu
7OIWwXjJKnWsDnBN3aFKnfqrtf5/yqQSI6Oj0atTjPjPaqPyfTMeWEqZdwTZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUjvV9FEu7SyzESoRaX/6c+HU3LIEwHwYDVR0j
BBgwFoAU+NpPdzm/9cjJyMjmO41NwvZDVu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEEyNDl2VFdXaG1udEdpOURKUjU4OEJyQ3dMNW5kTlFyWHBzcTF5OE5K
Z3MvMC9GOERBNEY3NzM5QkZGNUM4QzlDOEM4RTYzQjhENERDMkY2NDM1NkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4REE0Rjc3MzlCRkY1QzhD
OUM4QzhFNjNCOEQ0REMyRjY0MzU2RUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBMjQ5dlRXV2htbnRHaTlESlI1ODhCckN3TDVuZE5Rclhwc3ExeThOSmdzLzAv
MzIzODMwMzQzYTM3NjEzNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHpEMA0GCSqGSIb3DQEBCwUAA4IBAQA6s7GO
XJrjC/Qws2FGGA/N3okOsKnGD1b1cqDXxl4VJfIvGcz09CevC4zrVlwe9W5Mzn19
TAjL0mt1sTy8HY/wWMPFgAV35ElH7KKDW/MD/wX70rRkQ5S8p4edyDvIzjj10gU/
POU4vMm5JC23E4Iju0nKKMLACqg2mbD9Nh//Gqlk86SnbaqV10ZZ9/zBkYjuJEal
XgR1kHp//OBN1yl+aTO7JdUd6ZFxbq1yy7+vak/2tcUhXqBWT0eMfDmOR0UsQUUD
dV04vjbadVGmqqAx0Z936s6dyGzCu36xx57trBj6JyO38YPjbYV5A4L9UdMFk2gS
sMAnzO/TLWkm6ece
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:39 2026 by rpki-client