This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa
File: 323830343a363637343a3a2f33322d3332203d3e20323639353539.roa (raw, json)
Hash identifier: eBodHRopMSnsbbrrefJfzq/4uRcL15qHfr9Gf0LqnYg=
Subject key identifier: BC:95:3E:6B:DA:EB:CD:0C:12:AC:76:69:16:79:7F:9A:E7:2E:D9:58
Certificate issuer: /CN=EE9B455E1A3117465AC7C7127E3428C56D41A76D
Certificate serial: 5A726D4EB00A77BC3DF783C5F7D11413B591BBAF
Authority key identifier: EE:9B:45:5E:1A:31:17:46:5A:C7:C7:12:7E:34:28:C5:6D:41:A7:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9B455E1A3117465AC7C7127E3428C56D41A76D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa
Signing time: Sat 17 Jan 2026 15:57:12 +0000
ROA not before: Sat 17 Jan 2026 15:52:12 +0000
ROA not after: Sat 16 Jan 2027 15:57:12 +0000
asID: 269559
IP address blocks: 2804:6674::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/EE9B455E1A3117465AC7C7127E3428C56D41A76D.crl
rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/EE9B455E1A3117465AC7C7127E3428C56D41A76D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9B455E1A3117465AC7C7127E3428C56D41A76D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 00:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:72:6d:4e:b0:0a:77:bc:3d:f7:83:c5:f7:d1:14:13:b5:91:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE9B455E1A3117465AC7C7127E3428C56D41A76D
Validity
Not Before: Jan 17 15:52:12 2026 GMT
Not After : Jan 16 15:57:12 2027 GMT
Subject: CN=BC953E6BDAEBCD0C12AC766916797F9AE72ED958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:80:a1:7c:07:7e:91:c5:bc:73:1b:c7:61:
8b:5f:bc:18:16:b8:4b:a1:2a:66:44:f7:54:fb:fe:
e9:ab:b2:9d:da:ce:ef:47:c0:c9:62:af:fe:8f:76:
78:8d:a5:d1:5d:5e:cf:fb:20:95:d1:ab:29:cc:7a:
43:43:a8:1a:55:ed:0d:b6:5e:9b:ab:a0:c4:2f:db:
0f:37:7c:e0:d8:96:40:07:13:4a:af:48:2e:37:21:
35:ae:e9:31:02:fa:ef:b3:90:ca:02:2b:3c:91:51:
97:10:84:31:f0:4f:b5:7a:22:1d:a6:a8:cf:6d:66:
59:3f:6e:dc:d1:7f:f8:55:2e:7a:c0:9d:13:b4:e4:
a3:06:ac:e3:11:9c:9f:05:c4:8d:9e:6e:67:29:41:
1c:eb:7c:5e:77:84:d1:81:55:25:48:df:9f:da:d8:
5d:73:d7:aa:fc:7e:87:b6:f6:3e:53:29:98:5d:8c:
00:99:37:bc:fa:0e:eb:9e:a7:a5:dc:a9:a1:10:28:
75:fb:f4:e7:f5:82:da:a9:47:74:70:1a:8b:05:f6:
ff:1e:2a:f1:08:5e:ec:d4:85:7a:d6:be:ff:20:1e:
c1:5f:a1:41:3b:b9:33:b0:ba:04:ec:5c:fa:93:13:
4a:e1:64:47:18:15:eb:f4:08:67:5f:2a:9f:0e:e6:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:95:3E:6B:DA:EB:CD:0C:12:AC:76:69:16:79:7F:9A:E7:2E:D9:58
X509v3 Authority Key Identifier:
keyid:EE:9B:45:5E:1A:31:17:46:5A:C7:C7:12:7E:34:28:C5:6D:41:A7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/EE9B455E1A3117465AC7C7127E3428C56D41A76D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9B455E1A3117465AC7C7127E3428C56D41A76D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6674::/32
Signature Algorithm: sha256WithRSAEncryption
ba:ad:7f:72:e5:f5:a2:3e:9a:c8:9f:63:8b:96:c4:02:ba:64:
38:e3:3e:12:8f:67:53:01:42:ac:05:e6:83:7e:b4:ca:0f:4b:
c3:f6:be:b7:3a:bc:6a:b3:c4:d8:8c:2a:88:e0:fb:41:3d:8d:
c5:71:14:16:4e:95:99:ce:f6:20:8b:1e:85:f9:1f:79:f6:9a:
53:6b:e2:69:5c:50:d7:8b:53:30:18:17:d9:b3:f7:3d:b1:b9:
a7:8d:93:59:39:08:6e:c1:64:d5:5f:13:c0:f0:94:f2:4e:2a:
c6:f1:74:42:15:be:05:19:9a:04:29:e0:69:40:da:a7:7c:ce:
fc:8a:e6:e3:f0:8c:88:f3:57:f2:8d:2f:e7:78:fc:85:48:c2:
e8:bd:7e:a3:f6:5e:2f:b5:b2:a3:cc:37:3e:2e:c7:67:cc:de:
95:9c:09:54:ac:c0:4b:b5:c3:99:65:e7:f3:53:6e:50:96:1c:
77:57:e2:2e:a0:e8:03:5e:38:9e:07:f0:75:00:b6:93:4f:a5:
c4:88:8c:9c:89:e0:b2:bc:75:08:3e:2d:f4:2f:05:09:a7:f9:
17:e7:13:65:8f:5f:9a:77:db:3a:5b:b2:ce:8b:65:1c:7f:2c:
66:25:4b:69:fc:bf:90:17:cf:f4:a6:48:9d:52:c4:77:62:6d:
6a:ee:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:58 2026 by rpki-client