This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa
File: 323830343a353539303a3a2f33322d313238203d3e20323637393432.roa (raw, json)
Hash identifier: UWk9gqYHwtJZWKGBxg3oJitLjqYJzG1BNmS3vXWXB6s=
Subject key identifier: EA:BA:24:19:DF:AC:F5:A1:6F:7B:40:90:C7:8C:6A:13:F4:47:6E:DC
Certificate issuer: /CN=F153C6C516AC81BC29F58C07FE9D2985ACF768BC
Certificate serial: 16FC865924A818D9A75D89D30370959AA0C36A9D
Authority key identifier: F1:53:C6:C5:16:AC:81:BC:29:F5:8C:07:FE:9D:29:85:AC:F7:68:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa
Signing time: Thu 13 Nov 2025 20:37:27 +0000
ROA not before: Thu 13 Nov 2025 20:32:27 +0000
ROA not after: Thu 12 Nov 2026 20:37:27 +0000
asID: 267942
IP address blocks: 2804:5590::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.crl
rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fc:86:59:24:a8:18:d9:a7:5d:89:d3:03:70:95:9a:a0:c3:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F153C6C516AC81BC29F58C07FE9D2985ACF768BC
Validity
Not Before: Nov 13 20:32:27 2025 GMT
Not After : Nov 12 20:37:27 2026 GMT
Subject: CN=EABA2419DFACF5A16F7B4090C78C6A13F4476EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:2c:74:8f:9c:02:20:cf:89:97:dd:89:4d:
3f:ed:a1:f6:de:63:4c:b9:3f:82:b2:39:7e:f9:66:
64:4e:2c:5f:f0:4a:cf:66:bc:b5:75:ce:59:29:d6:
cb:65:5c:62:1a:8c:54:0b:02:5f:44:8e:0b:0f:c6:
c4:c8:65:2f:c0:e7:b4:a6:ee:29:93:c4:a8:f8:1b:
06:71:f0:64:66:cd:38:4d:cc:ed:32:bb:f7:33:42:
73:da:2f:58:03:e1:44:bb:23:36:f6:22:5c:db:a5:
64:f4:65:a0:12:00:74:fb:7a:20:24:0b:31:b0:6e:
37:6e:ac:38:16:bc:b2:28:42:9b:5f:f5:31:61:86:
38:97:92:f3:69:ab:12:fc:72:19:10:56:b6:0c:9f:
35:5e:c7:03:b3:05:29:54:7c:3b:46:23:db:d1:bd:
e7:43:45:3f:97:c8:cf:d1:88:e1:b1:b7:6f:96:0b:
1a:da:cb:40:71:de:86:ac:d8:6f:39:ed:3b:a7:77:
6f:be:86:0d:ba:a6:dd:0d:3c:79:14:e8:b5:c6:38:
7c:86:75:3c:ec:f4:c3:8e:d8:22:00:d3:9b:b9:86:
27:d1:26:8f:d3:e1:8f:81:1d:0e:66:80:4a:bc:1e:
40:e1:3c:c3:80:94:6f:f4:ac:77:03:ea:7d:89:9a:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:24:19:DF:AC:F5:A1:6F:7B:40:90:C7:8C:6A:13:F4:47:6E:DC
X509v3 Authority Key Identifier:
keyid:F1:53:C6:C5:16:AC:81:BC:29:F5:8C:07:FE:9D:29:85:AC:F7:68:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590::/32
Signature Algorithm: sha256WithRSAEncryption
70:a2:83:2c:4c:52:e9:a4:22:6c:4f:b9:1d:26:f7:d6:46:26:
9a:6f:86:bb:17:fc:9f:e4:54:95:ea:5a:26:90:36:ea:9c:b7:
5e:68:f5:1a:53:fc:b2:79:81:49:b3:4e:e0:3d:44:10:84:d5:
ed:20:c9:e5:9d:cb:11:03:f1:5c:09:03:09:09:97:38:da:81:
28:cb:a4:2a:21:5d:1a:67:a4:cf:18:78:38:40:13:4e:1c:f8:
6d:b8:b1:a8:5c:a3:b1:15:0a:90:2d:3d:48:68:1b:3f:98:52:
c4:a1:86:05:e3:7a:c5:a3:4f:70:5a:b6:0d:fa:10:38:1b:bf:
33:7e:b9:f0:66:23:90:5f:9e:ab:31:ec:4a:ad:e6:e0:7a:cb:
45:e2:4b:d2:38:d9:96:53:a2:52:a2:31:75:a9:fb:db:37:cc:
b7:b4:95:14:a8:5d:74:e8:31:a2:49:d9:a9:00:01:4c:e7:51:
af:1e:c0:9b:6b:58:21:cc:3b:12:f0:e8:e2:cb:08:2b:e4:3b:
4e:ad:df:3f:ba:e5:d2:f5:50:7b:f0:95:b1:7d:33:08:db:bd:
e7:af:62:94:25:f7:26:2f:dd:ad:60:81:20:79:9c:c9:29:d2:
46:be:0d:d6:18:41:1e:3d:f6:c4:bc:67:fb:2a:3a:0d:80:a3:
f5:6c:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:32 2025 by rpki-client