This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa
File: 323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier: VYPJmR+bSgKh4ZSmIyNc+43+bncYaleMRi0FjrTAjQc=
Subject key identifier: D6:F3:1B:0F:90:78:D0:64:82:CA:D4:23:13:E6:25:AF:15:84:92:4A
Certificate issuer: /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial: 2EB4C8E712CA2BF71BFBFAE43B68ABBC19E44F85
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa
Signing time: Mon 10 Nov 2025 19:10:50 +0000
ROA not before: Mon 10 Nov 2025 19:05:50 +0000
ROA not after: Mon 09 Nov 2026 19:10:50 +0000
asID: 271484
IP address blocks: 2804:7c40:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 14:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b4:c8:e7:12:ca:2b:f7:1b:fb:fa:e4:3b:68:ab:bc:19:e4:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Validity
Not Before: Nov 10 19:05:50 2025 GMT
Not After : Nov 9 19:10:50 2026 GMT
Subject: CN=D6F31B0F9078D06482CAD42313E625AF1584924A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cb:49:8b:76:a0:cb:8d:0f:87:ab:25:90:11:
10:63:08:96:20:a2:ab:1b:70:f0:83:86:78:4f:85:
3e:f3:7e:ac:78:e2:62:b1:2f:2a:63:95:ec:c7:41:
4d:20:e7:a6:aa:fc:24:48:03:80:fa:46:d6:19:0d:
2e:96:f8:a2:91:eb:dc:50:59:8b:01:c3:33:ce:c6:
d2:f2:9c:c6:60:c1:1f:a1:6e:5e:93:4e:49:9a:a0:
6a:79:be:dc:86:f3:47:e9:eb:0a:f0:cf:dd:9b:bd:
a7:45:f7:04:de:35:fc:35:a1:78:04:d4:c4:d1:31:
27:c9:e9:ab:0e:f7:c7:13:cf:c7:5e:26:20:ae:25:
53:c9:c7:1e:6d:19:a8:11:09:5e:74:31:22:43:7b:
8b:53:ef:bd:8b:61:ad:32:1f:7c:1e:c5:e5:6e:a2:
1b:63:96:7b:3c:67:1c:71:38:75:f9:34:73:8d:23:
ed:b5:cb:01:8c:93:ed:4f:23:93:6a:86:4a:c2:46:
a9:9f:06:30:a2:60:13:b0:37:01:ec:a2:8e:40:b4:
57:c6:6b:6f:a9:bb:83:26:44:c3:75:01:f7:2d:a4:
5b:0d:e0:8f:ac:2e:d4:26:1f:44:f8:33:7f:1d:80:
c0:49:0f:0b:dc:f4:83:09:46:84:02:fc:00:7f:5d:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:1B:0F:90:78:D0:64:82:CA:D4:23:13:E6:25:AF:15:84:92:4A
X509v3 Authority Key Identifier:
keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c40:300::/40
Signature Algorithm: sha256WithRSAEncryption
93:73:72:ff:53:fb:10:5a:33:e7:24:8b:36:c2:74:08:a1:9f:
7f:7a:ec:5f:26:0b:7d:ef:99:6b:5a:10:88:90:b9:50:95:26:
11:6e:d8:dc:72:c4:b8:60:9f:66:7c:ea:dc:8c:74:ed:b7:b8:
09:72:53:a5:8a:55:44:b7:7d:f3:c0:e2:fa:e7:04:a1:f8:8a:
bb:eb:a2:4d:2c:05:75:f4:b1:eb:75:ee:c6:f0:49:a5:37:5b:
9f:39:b3:60:a5:6f:3c:a9:29:ee:8f:6f:cb:b2:a6:a6:97:91:
0f:f5:70:12:28:ab:93:ba:b7:96:d2:68:4c:ba:33:f2:6a:f0:
c1:de:cb:76:4c:fd:60:56:f6:3a:8e:bf:40:67:fd:ad:09:bc:
fe:f1:c8:94:94:db:63:4a:1a:22:dd:80:f0:b8:db:eb:3f:2c:
b5:df:17:f7:7b:33:49:14:a4:16:63:cc:1c:de:81:44:cb:a2:
8e:bd:8f:26:80:c4:79:1a:17:59:76:0d:c0:e9:20:cd:c8:7e:
8b:85:b8:95:ee:a3:43:87:82:36:a3:21:78:b5:ae:1d:c9:6a:
51:04:8c:8a:cf:09:b1:69:71:e4:ae:bf:35:11:3e:82:04:8c:
23:4c:2b:18:89:3c:7b:20:00:ab:ee:41:24:52:2c:9d:58:70:
a1:cf:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:22 2025 by rpki-client