This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3332203d3e20323636393631.roa
File: 323830343a343630303a3a2f33322d3332203d3e20323636393631.roa (raw, json)
Hash identifier: Sq1S0YjZntH109BjZiU3x0FkoB91l0rX/6K5UER/jb8=
Subject key identifier: C9:AD:F7:7B:D7:FD:19:15:A1:70:3F:22:3C:6C:1B:F4:F3:14:76:0D
Certificate issuer: /CN=068991FC2FF257F34E828050A9B08B36CB649BE0
Certificate serial: 2AC9AB91779A743E9902E24BFDB4B89FFCA979F7
Authority key identifier: 06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3332203d3e20323636393631.roa
Signing time: Fri 23 Jan 2026 19:21:11 +0000
ROA not before: Fri 23 Jan 2026 19:16:11 +0000
ROA not after: Fri 22 Jan 2027 19:21:11 +0000
asID: 266961
IP address blocks: 2804:4600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl
rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c9:ab:91:77:9a:74:3e:99:02:e2:4b:fd:b4:b8:9f:fc:a9:79:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068991FC2FF257F34E828050A9B08B36CB649BE0
Validity
Not Before: Jan 23 19:16:11 2026 GMT
Not After : Jan 22 19:21:11 2027 GMT
Subject: CN=C9ADF77BD7FD1915A1703F223C6C1BF4F314760D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:ce:29:63:0a:89:27:f4:53:45:ec:15:26:
d5:e7:4a:ef:ea:29:71:ae:59:c9:98:e9:2b:e1:36:
3a:12:10:16:08:8e:04:c7:1d:0f:a0:82:a5:43:35:
c1:5f:ac:12:35:b3:09:c4:7b:5a:96:c5:15:d3:f0:
98:f5:57:8f:2f:41:76:4b:a6:7f:f3:5e:9c:5d:aa:
1a:37:0e:c6:62:53:4a:30:6e:c0:63:ea:41:ee:4a:
8a:a5:4e:ed:83:f9:b3:03:3a:ba:af:54:0b:f8:79:
ee:51:17:a0:e6:47:19:8f:ec:05:8e:6e:40:63:9d:
7d:c4:f9:10:87:f6:4a:9b:54:c8:18:12:18:c6:52:
c8:a3:a0:69:ec:88:86:d2:eb:ce:c4:5c:2d:1d:d5:
5a:5d:e9:fc:a6:d2:4b:7c:73:50:af:0b:6c:a0:98:
9a:0d:f1:8a:81:0c:50:e6:6c:a1:fa:47:fd:7d:b9:
a5:4a:bb:21:e4:09:44:77:fd:77:c0:dd:f4:87:39:
4c:e1:f0:bf:67:7b:d9:95:54:58:3c:f4:7a:15:39:
fe:e1:7d:f8:86:eb:49:72:3b:90:71:98:e5:ee:08:
14:cd:be:72:d0:7e:26:85:c5:61:40:71:e7:72:a0:
a4:16:01:ce:7a:ec:b7:ee:dc:a2:d1:14:96:c0:4c:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AD:F7:7B:D7:FD:19:15:A1:70:3F:22:3C:6C:1B:F4:F3:14:76:0D
X509v3 Authority Key Identifier:
keyid:06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3a2f33322d3332203d3e20323636393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4600::/32
Signature Algorithm: sha256WithRSAEncryption
60:0d:f6:18:19:9b:de:25:81:8f:61:c7:2b:07:4f:e2:6a:b0:
13:1c:91:a4:09:65:11:26:ce:c5:aa:c2:76:54:60:d5:36:30:
e9:b6:59:6d:14:7b:f9:27:e4:37:ab:12:64:f2:66:2d:b8:17:
7a:7d:d1:0d:58:3e:40:99:65:04:b0:d5:e5:85:2d:31:b5:21:
99:04:29:ac:25:17:b9:19:b7:2a:57:9a:42:43:30:96:2f:57:
ce:f6:f7:3e:4c:91:59:cf:dd:81:9f:6f:fe:61:0f:15:98:e0:
31:d9:d9:d2:89:ab:c6:33:41:af:75:32:b3:f9:93:b7:a3:96:
44:4a:98:48:49:79:15:c5:b2:68:74:d1:87:1d:00:a6:a9:50:
ad:e0:d0:25:1c:37:e1:6f:1b:45:84:b8:0f:cb:83:06:bf:43:
6a:dc:21:65:c2:dd:13:75:b2:e6:4c:e0:1f:19:b0:1b:64:8f:
51:62:19:a3:86:3a:84:5a:f8:68:b3:69:d8:eb:ab:f4:36:55:
4a:a2:5a:b3:be:c9:9e:bc:32:72:77:e7:19:20:92:19:9b:32:
bf:64:41:51:d3:aa:a3:d5:58:97:e1:da:f4:e2:b3:7a:3e:e3:
85:74:4a:74:c2:ad:ee:e9:75:98:99:b0:0a:00:26:e9:9e:4f:
e8:c6:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:24:54 2026 by rpki-client