This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d313238203d3e20323639343935.roa
File: 323830343a363538303a3a2f33322d313238203d3e20323639343935.roa (raw, json)
Hash identifier: XOz28XqRjHpVA12Sm/Qo3GU/2/0tXwXz+GU7JOlODos=
Subject key identifier: E5:C9:C4:F3:95:AF:DE:77:B2:F2:F8:A7:30:12:EA:23:BB:C7:70:6C
Certificate issuer: /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial: 522F675C07487E272108441AC2991C39849EF9EC
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d313238203d3e20323639343935.roa
Signing time: Sat 08 Nov 2025 16:26:13 +0000
ROA not before: Sat 08 Nov 2025 16:21:13 +0000
ROA not after: Sat 07 Nov 2026 16:26:13 +0000
asID: 269495
IP address blocks: 2804:6580::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 19:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2f:67:5c:07:48:7e:27:21:08:44:1a:c2:99:1c:39:84:9e:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Validity
Not Before: Nov 8 16:21:13 2025 GMT
Not After : Nov 7 16:26:13 2026 GMT
Subject: CN=E5C9C4F395AFDE77B2F2F8A73012EA23BBC7706C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:90:73:06:f4:9b:c6:a8:94:de:4d:42:0b:
cb:20:de:fe:2f:e4:2a:15:21:b4:8b:a6:de:89:96:
ff:ed:53:e8:62:f1:28:9c:33:4b:7d:fc:2f:89:3f:
3d:45:7c:0a:22:7a:90:fa:c8:9d:8d:8f:f8:66:bd:
e2:0d:e4:d2:a2:93:6d:aa:1b:7a:df:02:e8:1e:3a:
9c:41:90:06:6f:76:c3:9c:09:0f:b3:b6:03:7f:6d:
f2:f1:1a:aa:a8:ad:c1:fe:6b:7d:ec:40:36:b8:c5:
2a:6f:9b:d9:e9:1c:84:84:32:01:24:c9:18:52:38:
6c:da:f0:29:eb:74:6b:e4:88:21:bf:d3:6e:a9:95:
84:c2:fa:17:aa:23:25:8a:1a:eb:91:b0:77:52:29:
62:1c:f7:b3:0b:a1:da:4e:32:7f:ef:1c:bd:5b:f0:
2c:7b:f8:a5:f3:37:49:e9:9c:d0:47:c2:d8:53:85:
ca:4c:1d:fc:5c:e4:8a:a1:85:8d:a1:a5:d7:68:c0:
8f:a0:20:e6:2b:a7:ae:75:3d:7d:33:52:9a:21:e8:
4c:63:f6:01:82:0b:7c:95:42:40:2e:b8:af:43:c6:
96:cb:5a:ae:87:a5:04:a0:8d:21:fb:9a:30:0a:21:
10:80:b2:22:81:a7:2f:4c:c3:5d:18:9e:5e:60:bb:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:C4:F3:95:AF:DE:77:B2:F2:F8:A7:30:12:EA:23:BB:C7:70:6C
X509v3 Authority Key Identifier:
keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d313238203d3e20323639343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6580::/32
Signature Algorithm: sha256WithRSAEncryption
50:f0:4c:1d:29:56:5b:77:45:26:11:99:5a:70:fe:12:17:96:
de:a1:d3:06:b5:1a:db:dd:a8:6e:69:f0:a8:c2:e1:c7:32:09:
bd:c5:88:08:2e:ce:f2:9f:87:bc:2a:6a:14:86:c9:92:a6:80:
c8:8d:f5:8e:9e:34:e7:78:c4:2a:26:0e:05:27:cb:72:35:a9:
fa:c9:71:ea:d7:40:da:04:7e:5f:d5:2c:81:9a:94:c7:0c:e4:
78:4d:73:f2:e0:ad:dd:eb:a2:3a:99:02:58:b2:dc:be:f1:e4:
dd:80:48:04:77:c4:d3:16:f6:fe:b9:55:6f:f5:78:05:45:b3:
0f:35:e6:67:d3:dc:14:44:96:87:e3:bf:ac:94:ac:07:47:77:
3b:98:97:35:4a:37:51:6a:89:fb:3e:e2:dc:93:c1:5d:a4:39:
1b:3d:8c:35:88:ba:b0:21:9b:57:a5:39:b3:ac:37:19:39:1e:
c6:92:e6:07:9d:46:bb:89:1a:25:4d:cc:e5:a4:f7:2d:7c:83:
1c:22:2e:36:5e:74:c6:6d:3f:2b:4b:5e:ab:8f:ea:6c:d9:16:
b9:4c:ed:e3:5c:90:4b:b5:09:fb:12:39:6e:28:4c:78:90:1a:
75:1f:1b:86:cb:0c:05:bb:da:ca:08:fd:91:f6:62:54:6d:f8:
b7:31:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:42 2025 by rpki-client