This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d3332203d3e203532393436.roa
File: 323830343a6232633a3a2f33322d3332203d3e203532393436.roa (raw, json)
Hash identifier: CvgqQ/IQBdOtMO9ImDMYOMa+eCVHs8yPFLF9RpdD4EI=
Subject key identifier: 43:61:4F:AE:DD:19:D6:2F:0D:2E:6A:73:E5:B8:5D:98:3E:73:42:6B
Certificate issuer: /CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Certificate serial: 4861C443A55520C24F35EDC9F6D0977A8BC8B44E
Authority key identifier: EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d3332203d3e203532393436.roa
Signing time: Fri 28 Nov 2025 18:55:00 +0000
ROA not before: Fri 28 Nov 2025 18:50:00 +0000
ROA not after: Fri 27 Nov 2026 18:55:00 +0000
asID: 52946
IP address blocks: 2804:b2c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 08:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:61:c4:43:a5:55:20:c2:4f:35:ed:c9:f6:d0:97:7a:8b:c8:b4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Validity
Not Before: Nov 28 18:50:00 2025 GMT
Not After : Nov 27 18:55:00 2026 GMT
Subject: CN=43614FAEDD19D62F0D2E6A73E5B85D983E73426B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:dd:f7:8f:a4:c7:45:64:b4:c9:0f:b4:df:
a1:63:be:41:86:9d:c1:12:75:a2:4b:27:77:9a:2b:
19:fa:05:ba:fe:aa:47:cb:0b:e6:e4:74:56:da:b0:
19:80:db:b6:58:05:c2:ae:52:17:cb:26:d2:c0:35:
6f:57:66:1f:49:ab:fa:8b:19:51:e2:72:43:74:49:
f1:86:07:f6:9d:9a:73:42:46:65:01:9c:5c:2e:cf:
44:78:f2:16:c3:a3:c6:39:6f:27:67:29:a7:02:6e:
28:10:cb:06:7d:b8:ea:01:78:c9:0b:ae:29:d8:a6:
38:00:b1:56:7c:72:9a:5e:eb:ae:a8:0b:e2:ca:1c:
b7:4e:75:ea:27:74:a1:73:65:c6:08:ea:72:78:cb:
66:60:9f:03:7e:3c:c1:ec:30:82:e4:f4:8a:1b:b1:
4f:5c:8f:a2:9c:0f:55:ae:02:ed:11:51:82:3c:40:
16:e8:89:3a:5b:00:fa:83:33:15:c7:9e:88:90:8e:
13:34:16:e8:1e:f1:2d:f7:86:63:a4:14:d9:3a:64:
24:b9:59:c4:db:22:d4:73:ea:03:d2:ef:e9:95:83:
d4:7c:9b:20:28:fd:ec:d1:40:6b:e7:72:b0:0d:1b:
71:78:b3:5f:68:61:a8:07:c3:ea:5d:d1:78:47:fb:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:4F:AE:DD:19:D6:2F:0D:2E:6A:73:E5:B8:5D:98:3E:73:42:6B
X509v3 Authority Key Identifier:
keyid:EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d3332203d3e203532393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:b2c::/32
Signature Algorithm: sha256WithRSAEncryption
92:8d:1e:4f:d0:c3:53:f3:97:fc:3d:2d:96:8d:1c:cf:83:fc:
87:64:de:ad:90:cf:93:45:7b:be:cd:36:d5:58:96:62:1b:18:
1b:c2:59:55:7f:6b:68:d4:01:43:ad:79:96:df:0e:d3:b9:22:
7a:2f:a4:28:0e:2e:04:99:3b:2d:d5:07:43:7b:5e:35:80:80:
46:17:14:de:ef:23:66:46:88:53:d0:bf:c2:d0:af:5d:95:1f:
40:b3:dc:e2:f7:bd:d5:a8:e0:42:c1:b5:c8:ab:31:40:8f:5b:
d3:28:d8:7f:84:b6:55:de:ff:8b:7c:3d:3f:a2:b8:b9:c4:06:
29:da:92:1c:40:ad:09:3c:ed:b4:b3:e4:84:16:db:ac:9a:44:
7d:90:b3:f8:83:71:b0:3b:78:14:f0:ac:05:a6:73:d1:17:5f:
e0:04:bd:23:ac:b6:ff:4c:83:49:bf:87:7f:13:dc:af:a6:64:
2c:b6:38:60:8e:83:77:cb:c6:17:39:50:62:60:89:b1:5f:ef:
b0:c7:18:c1:c4:cd:7f:32:f7:af:5c:8f:54:a4:13:26:a6:13:
5a:f1:c9:64:e9:c7:aa:8f:5e:b8:d0:95:8a:fd:56:4c:70:01:
c5:bf:5f:2e:ca:6e:73:a8:f3:5b:36:10:98:ee:bc:c2:a8:2e:
fc:06:a6:45
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUSGHEQ6VVIMJPNe3J9tCXeovItE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVFRkRGMDU2MUY1MDdGNkE4RUVDMzNENTU2MDREN0Ew
MTFCQjU4ODAeFw0yNTExMjgxODUwMDBaFw0yNjExMjcxODU1MDBaMDMxMTAvBgNV
BAMTKDQzNjE0RkFFREQxOUQ2MkYwRDJFNkE3M0U1Qjg1RDk4M0U3MzQyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCN33j6THRWS0yQ+036FjvkGG
ncESdaJLJ3eaKxn6Bbr+qkfLC+bkdFbasBmA27ZYBcKuUhfLJtLANW9XZh9Jq/qL
GVHickN0SfGGB/admnNCRmUBnFwuz0R48hbDo8Y5bydnKacCbigQywZ9uOoBeMkL
rinYpjgAsVZ8cppe666oC+LKHLdOdeondKFzZcYI6nJ4y2ZgnwN+PMHsMILk9Iob
sU9cj6KcD1WuAu0RUYI8QBboiTpbAPqDMxXHnoiQjhM0Fuge8S33hmOkFNk6ZCS5
WcTbItRz6gPS7+mVg9R8myAo/ezRQGvncrANG3F4s19oYagHw+pd0XhH+8qlAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUQ2FPrt0Z1i8NLmpz5bhdmD5zQmswHwYDVR0j
BBgwFoAU7u/fBWH1B/ao7sM9VWBNegEbtYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1rN2o2WURhbk5OWm44TkdnS2dvMzUySmM3NWNCUnZWQ3BEVzdwZlpC
akwvMC9FRUVGREYwNTYxRjUwN0Y2QThFRUMzM0Q1NTYwNEQ3QTAxMUJCNTg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFRUZERjA1NjFGNTA3RjZB
OEVFQzMzRDU1NjA0RDdBMDExQkI1ODguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNazdqNllEYW5OTlpuOE5HZ0tnbzM1MkpjNzVjQlJ2VkNwRFc3cGZaQmpMLzAv
MzIzODMwMzQzYTYyMzI2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzOTM0
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAssMA0GCSqGSIb3DQEBCwUAA4IBAQCSjR5P0MNT85f8
PS2WjRzPg/yHZN6tkM+TRXu+zTbVWJZiGxgbwllVf2to1AFDrXmW3w7TuSJ6L6Qo
Di4EmTst1QdDe141gIBGFxTe7yNmRohT0L/C0K9dlR9As9zi973VqOBCwbXIqzFA
j1vTKNh/hLZV3v+LfD0/ori5xAYp2pIcQK0JPO20s+SEFtusmkR9kLP4g3GwO3gU
8KwFpnPRF1/gBL0jrLb/TINJv4d/E9yvpmQstjhgjoN3y8YXOVBiYImxX++wxxjB
xM1/MvevXI9UpBMmphNa8clk6ceqj1640JWK/VZMcAHFv18uym5zqPNbNhCY7rzC
qC78BqZF
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:30 2025 by rpki-client