This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/323830343a373864633a3a2f33322d3438203d3e20323731323730.roa
File: 323830343a373864633a3a2f33322d3438203d3e20323731323730.roa (raw, json)
Hash identifier: T+kVGDw7/MNNTI53jKxLlbGfxvtCAibH7oJcQP74AW8=
Subject key identifier: 37:93:CB:F6:E0:DB:67:E7:E6:7E:78:F7:51:41:09:05:38:F9:60:EA
Certificate issuer: /CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
Certificate serial: 23A161D9D324C08D2BAB43B3ABA3A5F2FA4F91FA
Authority key identifier: E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/323830343a373864633a3a2f33322d3438203d3e20323731323730.roa
Signing time: Fri 21 Nov 2025 23:05:34 +0000
ROA not before: Fri 21 Nov 2025 23:00:34 +0000
ROA not after: Fri 20 Nov 2026 23:05:34 +0000
asID: 271270
IP address blocks: 2804:78dc::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.crl
rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 10:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a1:61:d9:d3:24:c0:8d:2b:ab:43:b3:ab:a3:a5:f2:fa:4f:91:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
Validity
Not Before: Nov 21 23:00:34 2025 GMT
Not After : Nov 20 23:05:34 2026 GMT
Subject: CN=3793CBF6E0DB67E7E67E78F75141090538F960EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:79:d5:cb:34:0e:64:bb:be:48:4b:0b:02:
5a:7c:5a:9b:7f:61:a9:ba:98:24:7c:25:ef:0b:b2:
89:d5:02:d7:ec:ba:68:bb:db:16:60:4c:bf:ad:b5:
66:eb:12:f5:2e:79:1d:1f:ab:82:f8:ec:64:d6:ca:
a1:50:27:51:bd:a3:40:d1:66:02:8e:6b:0f:d8:48:
e9:35:ef:58:54:5e:e8:5c:0e:da:b0:ed:c5:28:85:
bf:e5:eb:b9:26:66:33:04:48:94:e4:df:50:ed:c0:
2f:dd:c5:05:ce:09:0d:d2:3d:55:33:8c:51:36:b5:
0e:5f:e1:d2:d3:4f:56:08:ac:ab:5f:ec:0e:a6:7d:
d7:6d:a7:94:47:ab:74:68:a3:04:cd:6c:99:f9:2f:
c5:02:95:5d:2f:cf:f5:0f:88:31:cc:55:52:c7:9e:
dd:4b:67:a7:40:a8:b7:ee:c2:60:82:e5:e8:91:8e:
41:b7:ba:e4:f2:ea:6f:31:bc:5b:1e:71:61:c6:8b:
22:46:b3:c3:a3:43:6c:46:9a:30:7c:33:ac:c2:a3:
31:11:22:71:19:e5:e1:8e:55:09:b0:d9:e2:c7:42:
3c:a8:6a:bc:e6:bd:0f:db:a1:55:46:72:4f:4a:8a:
0d:f7:cb:32:87:7f:22:6e:8e:72:86:b7:55:76:45:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:CB:F6:E0:DB:67:E7:E6:7E:78:F7:51:41:09:05:38:F9:60:EA
X509v3 Authority Key Identifier:
keyid:E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/323830343a373864633a3a2f33322d3438203d3e20323731323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:78dc::/32
Signature Algorithm: sha256WithRSAEncryption
77:c0:35:97:77:41:40:75:e5:1b:c6:48:8b:3d:d0:d4:53:65:
c0:08:bd:9f:0e:39:22:cf:c4:ce:59:00:d1:02:fb:8a:8a:54:
11:0f:f2:f0:8b:0e:0d:67:42:0a:2b:b5:f4:37:bb:d6:a9:65:
9a:d7:0c:75:74:dc:6b:24:16:a6:b3:b1:25:79:6d:17:cc:e9:
9b:6c:7c:86:21:d9:a3:95:c1:69:6f:8a:f6:ea:97:6a:df:a1:
86:0a:4a:d0:2c:e6:30:a0:c0:7c:49:40:7d:63:2a:04:65:06:
b7:8e:d6:9d:44:5f:59:2c:be:06:ca:e3:c4:cd:96:c9:d3:c4:
0c:9a:21:96:24:c7:ca:a7:06:64:b3:24:b7:39:64:2a:9e:55:
77:72:aa:23:1b:25:76:2a:50:97:af:d2:b7:c2:0a:72:99:85:
f4:66:a7:a8:0f:a6:db:69:25:50:58:5c:47:28:60:ae:b3:42:
2c:4f:48:f1:ba:36:90:b7:ba:df:bf:29:e1:c3:4a:8f:11:54:
f4:8c:fc:bb:63:88:44:36:eb:d0:1d:b7:ee:08:88:7b:8e:84:
c6:89:ad:4e:00:10:a2:6a:8b:e0:6d:08:51:b2:c5:21:b7:f9:
a7:fd:de:7c:51:b7:c6:cc:13:f8:f9:b9:29:32:68:52:ff:7e:
59:92:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:11:33 2025 by rpki-client