This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f34382d3438203d3e203532393436.roa
File: 323830343a6232633a3a2f34382d3438203d3e203532393436.roa (raw, json)
Hash identifier: Q/hTGEDmiPhrcmtsP3IkVjQQei5FdNCFOQ+jD49/Hcg=
Subject key identifier: 2F:8F:47:3E:3E:6C:93:59:7A:DD:1B:9E:E0:EB:4D:F3:6C:D3:4D:FF
Certificate issuer: /CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Certificate serial: 249F4A6DDC9EEA312C7FF234A48E07D13866C853
Authority key identifier: EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f34382d3438203d3e203532393436.roa
Signing time: Fri 28 Nov 2025 18:56:35 +0000
ROA not before: Fri 28 Nov 2025 18:51:35 +0000
ROA not after: Fri 27 Nov 2026 18:56:35 +0000
asID: 52946
IP address blocks: 2804:b2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 08:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9f:4a:6d:dc:9e:ea:31:2c:7f:f2:34:a4:8e:07:d1:38:66:c8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Validity
Not Before: Nov 28 18:51:35 2025 GMT
Not After : Nov 27 18:56:35 2026 GMT
Subject: CN=2F8F473E3E6C93597ADD1B9EE0EB4DF36CD34DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:96:0f:49:f9:54:92:3b:c5:39:d6:df:93:
e9:b0:70:c7:ec:61:3b:1f:4a:a7:f6:d3:b4:8c:35:
15:1c:7a:10:26:c8:99:03:52:62:77:08:d6:1b:dd:
c9:16:dd:69:c5:80:5e:6f:af:50:f6:bf:28:b4:1d:
84:87:f9:75:81:56:75:fb:03:ea:a8:f2:8f:e1:63:
17:69:85:11:13:71:a9:3d:23:c5:4b:11:cb:8a:a3:
48:4a:4d:58:62:3e:d1:59:1f:03:5e:ef:c1:59:fc:
89:45:9c:3f:b3:7b:1e:51:70:0c:58:ef:31:9c:08:
3a:ac:74:1e:8c:37:9a:85:8c:86:56:16:c8:77:13:
1d:c0:29:2e:a5:f6:8e:bc:ff:7f:4d:04:c4:97:86:
ad:84:4a:9e:88:2d:98:19:a4:e7:2e:a2:b0:2b:5f:
78:d0:10:c6:05:2c:08:7e:43:e0:14:64:5a:85:50:
6b:4d:66:59:1d:6e:6b:fe:d4:d1:0e:ec:b6:a2:1a:
3b:92:f6:2c:96:93:ff:f3:bf:f3:97:5e:ba:63:89:
fd:90:50:21:05:29:3e:b3:6c:97:23:c8:e4:27:c8:
f0:f8:26:f5:76:c9:34:75:4a:60:e6:08:f0:5a:65:
83:1a:eb:e3:83:19:2a:42:b7:8f:f8:88:21:6c:1c:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:47:3E:3E:6C:93:59:7A:DD:1B:9E:E0:EB:4D:F3:6C:D3:4D:FF
X509v3 Authority Key Identifier:
keyid:EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f34382d3438203d3e203532393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:b2c::/48
Signature Algorithm: sha256WithRSAEncryption
1c:3d:6c:f5:46:fd:97:c3:79:c7:b9:e2:13:6f:5e:bd:5b:fb:
fa:6f:35:b9:bf:38:1e:d5:8f:f8:dc:cc:d5:55:4e:5f:7c:b4:
f8:f2:03:24:09:4e:6f:4f:72:02:70:c6:43:4c:d6:ab:41:33:
7e:b9:ef:e1:65:e8:7e:6c:13:34:ff:77:da:61:c1:ac:e6:c1:
11:71:38:87:32:05:d2:c2:0b:1e:9a:58:fc:52:79:97:12:21:
88:d6:f8:4f:87:64:ac:3e:3a:24:cd:96:8f:f0:cd:07:cb:fa:
c7:e2:95:46:6c:79:2c:87:4d:ac:76:79:75:31:0d:7b:49:94:
57:68:56:07:5f:5f:98:d3:ac:4e:51:f1:4e:91:3b:80:30:d0:
b5:8c:81:7b:a7:9c:73:3e:26:63:92:a3:59:7e:13:0d:9a:13:
e5:ea:e4:c4:70:b9:f2:90:fa:49:f2:a1:73:9f:98:11:9d:f9:
fc:92:b4:1b:fb:ea:d3:bd:15:7b:3f:36:90:22:13:ea:2c:05:
0b:3c:c0:81:77:f8:06:77:87:42:7f:a4:bb:94:a4:3c:56:a4:
cf:9b:74:43:1f:d0:bc:f9:79:46:d7:43:66:51:7c:70:33:43:
5c:23:b7:93:4a:9f:1d:7b:83:27:5e:87:a6:6f:8e:ef:cd:cd:
5e:af:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:27 2025 by rpki-client