This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a3a2f33332d3333203d3e20323636343630.roa
File: 323830343a333832383a3a2f33332d3333203d3e20323636343630.roa (raw, json)
Hash identifier: AYr9/ZPTJqY0OvBXImW5FHZIubcJm1xNWcfbyHorhWE=
Subject key identifier: 64:DB:39:8B:E9:B8:92:61:20:EE:28:AD:41:A4:0F:74:5F:7A:51:5D
Certificate issuer: /CN=5E9CEC440C325459B3067A402A845FD05A2D92AA
Certificate serial: 664D812B70E917C17BF3880A3B6D4EB68C7F6D09
Authority key identifier: 5E:9C:EC:44:0C:32:54:59:B3:06:7A:40:2A:84:5F:D0:5A:2D:92:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a3a2f33332d3333203d3e20323636343630.roa
Signing time: Wed 12 Nov 2025 18:18:16 +0000
ROA not before: Wed 12 Nov 2025 18:13:16 +0000
ROA not after: Wed 11 Nov 2026 18:18:16 +0000
asID: 266460
IP address blocks: 2804:3828::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.crl
rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4d:81:2b:70:e9:17:c1:7b:f3:88:0a:3b:6d:4e:b6:8c:7f:6d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E9CEC440C325459B3067A402A845FD05A2D92AA
Validity
Not Before: Nov 12 18:13:16 2025 GMT
Not After : Nov 11 18:18:16 2026 GMT
Subject: CN=64DB398BE9B8926120EE28AD41A40F745F7A515D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:31:b0:e7:83:7f:f6:09:64:d9:08:f5:46:
8e:be:24:aa:c2:19:b2:43:b9:6a:fb:32:31:76:cf:
0f:94:8c:1b:e4:08:01:39:ab:99:51:95:d8:36:e8:
a6:6e:c8:4a:76:33:fc:7e:ab:0e:7c:e3:ff:31:d3:
ec:b6:c0:e4:e5:85:be:92:0e:f8:b2:5d:72:70:ef:
b9:57:cb:01:cc:ec:b5:cd:ee:3e:3e:6d:14:3b:ef:
fb:54:a2:cb:bb:b8:5a:4c:3e:95:f1:ba:a6:23:f6:
46:0f:6f:35:38:88:57:28:54:84:5a:aa:f8:03:fa:
2e:3f:69:cd:b7:c1:76:64:d7:87:3c:75:e7:57:29:
e5:59:e3:7a:73:40:58:c7:59:2f:ef:5c:b9:a8:3e:
bb:7e:25:8d:e8:b2:ac:2b:20:23:76:23:d2:8d:36:
4e:14:65:18:4f:fa:06:b9:60:c7:ca:9c:d6:bc:61:
1b:72:84:28:af:2f:67:01:dd:57:4f:7f:b8:f0:21:
fe:bf:6d:6b:df:4b:c8:2b:1b:ab:d7:4b:ff:7c:24:
c6:8d:b0:8a:aa:a4:66:b8:55:c2:f5:c8:60:41:87:
9d:23:1f:c2:bb:3e:41:58:c7:42:dc:bc:a4:cf:36:
d4:1c:6f:d2:57:b8:f8:46:f2:f6:09:c1:d9:db:3e:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:39:8B:E9:B8:92:61:20:EE:28:AD:41:A4:0F:74:5F:7A:51:5D
X509v3 Authority Key Identifier:
keyid:5E:9C:EC:44:0C:32:54:59:B3:06:7A:40:2A:84:5F:D0:5A:2D:92:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a3a2f33332d3333203d3e20323636343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3828::/33
Signature Algorithm: sha256WithRSAEncryption
7a:cb:dd:c0:7b:98:82:b0:45:80:50:5a:be:df:f5:9f:57:af:
03:c2:82:f3:93:26:79:c9:84:68:28:2c:55:56:57:5d:bf:55:
09:39:fb:09:51:95:0e:f8:58:0c:b2:25:d9:94:c0:c3:a0:06:
f1:4b:a4:37:d8:77:bc:7d:8d:e3:cc:9d:0d:14:38:62:a6:c3:
e8:d7:b9:60:2a:8c:e0:35:db:8a:b1:60:f0:b5:bc:12:4d:3f:
cc:42:20:3e:1e:8f:46:ee:47:06:17:da:35:8b:a7:bf:93:91:
60:d6:57:26:1f:1b:7c:62:3d:7a:bb:f4:ba:ce:15:e7:4a:be:
04:9b:11:0f:fe:e5:6c:2f:84:a6:13:6a:57:96:c8:1f:a8:09:
64:87:21:ac:1a:13:4e:7a:f1:37:a7:9e:df:03:e5:fd:9e:c1:
10:11:76:ef:b9:0c:4e:cf:47:26:d2:2e:f7:a5:ca:bc:bb:ef:
fd:e3:99:63:3e:12:84:b3:c2:a7:fb:93:ba:df:bd:7c:cb:0e:
de:a8:bb:5a:11:17:e7:8b:23:8f:aa:40:6f:83:a8:17:29:5d:
7d:bc:7c:8b:a5:e1:a3:25:c7:5f:7f:62:a9:8f:36:37:15:a8:
e5:b6:0e:2f:3f:b4:51:de:08:6d:74:04:60:b3:97:5a:b7:aa:
8a:b5:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:01 2025 by rpki-client