This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa
File: 323830343a336639343a3a2f33332d3333203d3e20323632343532.roa (raw, json)
Hash identifier: lHjDVrKXLU7fqnlDqdJJNsuMBlyQShP6cPyp2MJKNGc=
Subject key identifier: D2:55:59:AC:CD:85:27:44:F4:6E:99:87:F2:23:B6:2F:38:12:CF:4A
Certificate issuer: /CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
Certificate serial: 39340DDCE5FA9362BA40DB90B90F8B98007B50DC
Authority key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa
Signing time: Mon 12 Jan 2026 19:00:13 +0000
ROA not before: Mon 12 Jan 2026 18:55:13 +0000
ROA not after: Mon 11 Jan 2027 19:00:13 +0000
asID: 262452
IP address blocks: 2804:3f94::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl
rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:34:0d:dc:e5:fa:93:62:ba:40:db:90:b9:0f:8b:98:00:7b:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
Validity
Not Before: Jan 12 18:55:13 2026 GMT
Not After : Jan 11 19:00:13 2027 GMT
Subject: CN=D25559ACCD852744F46E9987F223B62F3812CF4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:5d:7e:fa:5a:e5:59:1b:16:4b:62:bb:fc:
ae:ec:31:79:b1:0f:fb:c5:66:a7:0a:78:33:c9:85:
33:ff:18:34:98:ec:7a:85:d1:65:f0:b9:59:d5:4b:
51:10:9d:9d:1a:c0:59:ee:ee:05:c7:65:31:2f:e6:
78:06:9f:b0:ad:71:d7:80:87:a6:08:6b:6e:2d:a0:
2c:62:97:df:4b:9a:3b:ca:97:b5:5c:98:24:fe:c4:
37:10:86:2c:8e:79:2e:a3:2e:a1:94:13:eb:f7:b4:
8c:b3:d5:2a:1a:49:12:d3:71:ea:cb:a3:18:06:d1:
b7:92:c1:f0:2f:e0:86:4b:d3:f3:20:fe:61:eb:b8:
61:50:70:a7:76:27:56:4e:94:05:54:6b:b9:54:e7:
f6:31:c4:39:48:54:7a:6f:1c:7a:c4:d1:dc:86:cd:
f0:90:ea:06:5f:20:ed:67:ff:9b:0f:c5:0e:a3:81:
a0:69:52:7b:7f:37:99:06:3c:77:39:fb:1b:08:a7:
0c:26:f9:33:76:93:2c:65:57:15:fd:e6:65:a4:9b:
f7:39:bb:ca:88:b4:89:49:ab:d9:36:76:94:8b:ae:
8c:a7:c9:17:f7:66:30:d9:ea:d3:2f:0f:09:29:af:
e9:a0:3d:10:3e:bb:dc:7e:a2:69:57:d4:c0:da:a2:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:59:AC:CD:85:27:44:F4:6E:99:87:F2:23:B6:2F:38:12:CF:4A
X509v3 Authority Key Identifier:
keyid:F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f94::/33
Signature Algorithm: sha256WithRSAEncryption
23:d8:cd:15:b2:53:ed:6e:c5:e7:c8:ff:bc:b5:73:81:d2:27:
45:24:05:ee:36:65:88:a5:4c:e7:65:19:e6:4c:30:ee:37:9b:
e8:0a:5a:ed:3b:67:d5:72:a5:44:3f:c0:81:30:3f:e8:c1:a8:
52:3f:23:e9:17:91:2d:5d:79:b9:f1:e5:8e:4a:37:b2:86:9e:
e1:27:e6:4b:84:af:78:3f:92:64:05:6f:db:43:e8:80:7d:c5:
d6:99:da:e9:99:dd:60:92:38:d0:21:ed:16:2f:f4:c2:d2:e3:
4a:40:b2:23:40:6c:56:db:7a:1f:15:1c:2d:c6:2c:fc:9d:3e:
52:a4:68:99:c9:19:78:6a:25:4a:53:42:e7:a6:64:73:a3:41:
e9:62:1c:d7:aa:91:81:be:2f:20:9f:05:4b:8b:db:c8:e8:b5:
2f:13:e8:06:c6:56:5d:c8:16:43:07:ba:ba:c6:be:62:0d:c0:
98:3c:39:af:9f:cd:09:eb:f2:75:34:ef:42:33:4d:a0:02:2f:
43:6b:95:f7:3d:2d:bb:82:e0:1f:cc:fe:e0:55:7c:91:d7:e3:
65:8b:ab:e3:e1:60:a4:05:58:cf:d0:f2:02:71:84:ee:cb:c3:
d6:c4:07:bb:68:2d:97:5b:65:6a:e8:5e:0c:79:e9:f5:04:53:
05:11:79:60
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOTQN3OX6k2K6QNuQuQ+LmAB7UNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQzMkUwRURCNjlCRDZFMjUzRUUyMEY0QzE1ODlBNDYy
NjdBQTJCOTAeFw0yNjAxMTIxODU1MTNaFw0yNzAxMTExOTAwMTNaMDMxMTAvBgNV
BAMTKEQyNTU1OUFDQ0Q4NTI3NDRGNDZFOTk4N0YyMjNCNjJGMzgxMkNGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyM11++lrlWRsWS2K7/K7sMXmx
D/vFZqcKeDPJhTP/GDSY7HqF0WXwuVnVS1EQnZ0awFnu7gXHZTEv5ngGn7CtcdeA
h6YIa24toCxil99LmjvKl7VcmCT+xDcQhiyOeS6jLqGUE+v3tIyz1SoaSRLTcerL
oxgG0beSwfAv4IZL0/Mg/mHruGFQcKd2J1ZOlAVUa7lU5/YxxDlIVHpvHHrE0dyG
zfCQ6gZfIO1n/5sPxQ6jgaBpUnt/N5kGPHc5+xsIpwwm+TN2kyxlVxX95mWkm/c5
u8qItIlJq9k2dpSLroynyRf3ZjDZ6tMvDwkpr+mgPRA+u9x+omlX1MDaojDfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0lVZrM2FJ0T0bpmH8iO2LzgSz0owHwYDVR0j
BBgwFoAU9DLg7bab1uJT7iD0wViaRiZ6orkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNt
bWYvMC9GNDMyRTBFREI2OUJENkUyNTNFRTIwRjRDMTU4OUE0NjI2N0FBMkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MzJFMEVEQjY5QkQ2RTI1
M0VFMjBGNEMxNTg5QTQ2MjY3QUEyQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVrRjd1R3NlZ0dFMTMydlZpYTc0SFQ1WmFFQlFRaVpzWXdoZncyTmZjbW1mLzAv
MzIzODMwMzQzYTMzNjYzOTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMy
MzQzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ/lAAwDQYJKoZIhvcNAQELBQADggEBACPYzRWy
U+1uxefI/7y1c4HSJ0UkBe42ZYilTOdlGeZMMO43m+gKWu07Z9VypUQ/wIEwP+jB
qFI/I+kXkS1debnx5Y5KN7KGnuEn5kuEr3g/kmQFb9tD6IB9xdaZ2umZ3WCSONAh
7RYv9MLS40pAsiNAbFbbeh8VHC3GLPydPlKkaJnJGXhqJUpTQuemZHOjQeliHNeq
kYG+LyCfBUuL28jotS8T6AbGVl3IFkMHurrGvmINwJg8Oa+fzQnr8nU070IzTaAC
L0Nrlfc9LbuC4B/M/uBVfJHX42WLq+PhYKQFWM/Q8gJxhO7Lw9bEB7toLZdbZWro
Xgx56fUEUwUReWA=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:05 2026 by rpki-client