This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/323830343a323237633a3a2f33322d313238203d3e20323634313034.roa
File: 323830343a323237633a3a2f33322d313238203d3e20323634313034.roa (raw, json)
Hash identifier: J7vcvUAbjcaB6WId8GEyEmQ1+qn02r20n+JNM4O4ock=
Subject key identifier: 81:DB:86:86:EA:2D:0D:92:6A:A6:62:47:0A:78:B1:33:2D:51:13:0E
Certificate issuer: /CN=60492EF363CCBEBD72926A28053650F83D65CC29
Certificate serial: 643AA6E9699E98EEDF8B01166C98D11C91F30548
Authority key identifier: 60:49:2E:F3:63:CC:BE:BD:72:92:6A:28:05:36:50:F8:3D:65:CC:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60492EF363CCBEBD72926A28053650F83D65CC29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/323830343a323237633a3a2f33322d313238203d3e20323634313034.roa
Signing time: Tue 02 Dec 2025 13:46:10 +0000
ROA not before: Tue 02 Dec 2025 13:41:10 +0000
ROA not after: Tue 01 Dec 2026 13:46:10 +0000
asID: 264104
IP address blocks: 2804:227c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.crl
rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60492EF363CCBEBD72926A28053650F83D65CC29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3a:a6:e9:69:9e:98:ee:df:8b:01:16:6c:98:d1:1c:91:f3:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60492EF363CCBEBD72926A28053650F83D65CC29
Validity
Not Before: Dec 2 13:41:10 2025 GMT
Not After : Dec 1 13:46:10 2026 GMT
Subject: CN=81DB8686EA2D0D926AA662470A78B1332D51130E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:bf:3f:32:02:06:96:fe:5d:4b:00:27:c7:
5d:2a:ac:ee:7e:20:26:39:a6:2a:bc:40:f7:de:2c:
b1:e7:b7:6f:03:67:54:96:d6:96:ad:56:41:9f:2d:
71:c6:34:b5:08:ec:36:75:30:21:a0:0d:eb:d5:3b:
10:80:2d:00:14:32:29:00:1d:15:fa:77:65:b7:2d:
b6:32:f8:5b:f5:fd:87:ea:95:27:6a:c0:44:db:cf:
9f:74:09:b9:14:19:c0:9b:82:0c:5a:25:30:f5:de:
fb:4d:9c:dc:69:bd:11:85:2c:ce:31:9a:91:54:f1:
0d:a3:c8:8c:f2:c5:13:53:f4:0f:9c:77:b4:ce:89:
de:81:77:c4:43:db:d8:ff:00:e4:6e:b0:35:6a:ca:
35:56:3d:78:1e:48:97:0a:fa:e8:c4:84:b1:ea:dc:
a1:8a:71:4e:9b:3f:f1:59:8c:65:92:34:da:20:04:
ff:c6:17:b6:a0:86:23:ce:60:ef:d6:7b:6a:6c:de:
9e:33:b0:d3:36:56:94:60:b5:87:4c:35:fb:9c:5d:
92:2a:c2:d9:31:59:bc:3a:88:7f:25:2c:ed:71:4e:
14:ca:7f:ff:ff:2d:27:b7:b2:17:17:c5:d0:45:e6:
9d:36:8a:02:ec:7c:19:2e:f2:49:e1:a3:ed:95:1c:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:86:86:EA:2D:0D:92:6A:A6:62:47:0A:78:B1:33:2D:51:13:0E
X509v3 Authority Key Identifier:
keyid:60:49:2E:F3:63:CC:BE:BD:72:92:6A:28:05:36:50:F8:3D:65:CC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60492EF363CCBEBD72926A28053650F83D65CC29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/323830343a323237633a3a2f33322d313238203d3e20323634313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:227c::/32
Signature Algorithm: sha256WithRSAEncryption
89:22:c8:9c:ff:8f:cf:59:69:61:00:28:ab:aa:69:33:21:72:
8c:06:48:a3:0b:1d:fb:fa:82:68:45:ad:2b:77:e3:1c:0c:cb:
15:09:22:b0:aa:48:2c:5e:02:ea:81:52:55:ac:8d:4f:30:d3:
04:36:26:d2:8c:3e:32:da:84:3e:fd:fa:1e:8a:8f:b1:c6:37:
c3:be:90:39:3a:2a:d7:a8:97:2b:75:d5:e9:18:9f:fa:77:5e:
ee:62:9f:47:8c:1b:97:c9:1a:ca:08:44:19:8d:5c:b7:36:0b:
82:8f:52:14:7b:b7:15:64:9b:4f:48:81:6b:92:e5:7a:52:78:
3d:f0:f8:f6:aa:f9:25:e6:41:e9:dd:cd:f1:dc:7b:0d:53:7d:
3c:32:59:19:c8:0d:dd:7e:23:4e:41:31:fc:01:27:58:ab:0f:
1b:12:16:19:cd:49:10:b3:68:ab:c6:b6:ab:fa:58:ef:4b:ca:
18:89:e8:ba:25:2e:e9:f5:bc:86:43:39:fb:89:82:f4:ab:35:
48:a7:ce:3d:71:97:fd:fd:69:e4:a7:2a:88:e4:1c:3e:7d:28:
df:8a:b6:08:be:4b:2b:9b:f6:58:3b:a4:6d:25:40:5e:4b:1b:
c0:8b:59:88:7a:ba:cd:6d:46:60:57:3e:75:56:b6:31:7f:38:
9d:c8:1d:ce
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZDqm6WmemO7fiwEWbJjRHJHzBUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA0OTJFRjM2M0NDQkVCRDcyOTI2QTI4MDUzNjUwRjgz
RDY1Q0MyOTAeFw0yNTEyMDIxMzQxMTBaFw0yNjEyMDExMzQ2MTBaMDMxMTAvBgNV
BAMTKDgxREI4Njg2RUEyRDBEOTI2QUE2NjI0NzBBNzhCMTMzMkQ1MTEzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3b8/MgIGlv5dSwAnx10qrO5+
ICY5piq8QPfeLLHnt28DZ1SW1patVkGfLXHGNLUI7DZ1MCGgDevVOxCALQAUMikA
HRX6d2W3LbYy+Fv1/YfqlSdqwETbz590CbkUGcCbggxaJTD13vtNnNxpvRGFLM4x
mpFU8Q2jyIzyxRNT9A+cd7TOid6Bd8RD29j/AORusDVqyjVWPXgeSJcK+ujEhLHq
3KGKcU6bP/FZjGWSNNogBP/GF7aghiPOYO/We2ps3p4zsNM2VpRgtYdMNfucXZIq
wtkxWbw6iH8lLO1xThTKf///LSe3shcXxdBF5p02igLsfBku8knho+2VHLMXAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUgduGhuotDZJqpmJHCnixMy1REw4wHwYDVR0j
BBgwFoAUYEku82PMvr1ykmooBTZQ+D1lzCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5ucnNaQ011OGZ3c0prYVpEVlNXQlBlRFQyblVWYXBvVnJDMmo3SlQy
VEMvMC82MDQ5MkVGMzYzQ0NCRUJENzI5MjZBMjgwNTM2NTBGODNENjVDQzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNDkyRUYzNjNDQ0JFQkQ3
MjkyNkEyODA1MzY1MEY4M0Q2NUNDMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRubnJzWkNNdThmd3NKa2FaRFZTV0JQZURUMm5VVmFwb1ZyQzJqN0pUMlRDLzAv
MzIzODMwMzQzYTMyMzIzNzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMTMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCJ8MA0GCSqGSIb3DQEBCwUAA4IBAQCJIsic
/4/PWWlhACirqmkzIXKMBkijCx37+oJoRa0rd+McDMsVCSKwqkgsXgLqgVJVrI1P
MNMENibSjD4y2oQ+/foeio+xxjfDvpA5OirXqJcrddXpGJ/6d17uYp9HjBuXyRrK
CEQZjVy3NguCj1IUe7cVZJtPSIFrkuV6Ung98Pj2qvkl5kHp3c3x3HsNU308MlkZ
yA3dfiNOQTH8ASdYqw8bEhYZzUkQs2irxrar+ljvS8oYiei6JS7p9byGQzn7iYL0
qzVIp849cZf9/WnkpyqI5Bw+fSjfirYIvksrm/ZYO6RtJUBeSxvAi1mIerrNbUZg
Vz51VrYxfzidyB3O
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:42:19 2025 by rpki-client