This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa
File: 323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa (raw, json)
Hash identifier: H4t7sUl8InhVXstI2QjzxxsSmIeJgNW3pP+I62XbFxc=
Subject key identifier: 71:F1:64:48:F7:C4:CD:67:2F:C9:13:5C:08:FD:F9:D8:C8:FB:4C:0E
Certificate issuer: /CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Certificate serial: 0446EC012A230ED01274250E68879AF9D3283480
Authority key identifier: 13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa
Signing time: Sat 29 Nov 2025 18:09:00 +0000
ROA not before: Sat 29 Nov 2025 18:04:00 +0000
ROA not after: Sat 28 Nov 2026 18:09:00 +0000
asID: 266563
IP address blocks: 2804:3dec:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl
rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 02:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:46:ec:01:2a:23:0e:d0:12:74:25:0e:68:87:9a:f9:d3:28:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Validity
Not Before: Nov 29 18:04:00 2025 GMT
Not After : Nov 28 18:09:00 2026 GMT
Subject: CN=71F16448F7C4CD672FC9135C08FDF9D8C8FB4C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:e5:56:37:76:27:6a:cb:af:18:12:26:0a:
80:11:b6:66:66:ae:62:55:40:ff:d2:4d:2c:e2:f7:
a2:72:94:f5:36:bb:f0:42:80:1c:9d:35:7d:e4:4b:
bf:bb:b6:1f:42:4c:77:11:73:a8:71:75:9b:8a:e6:
dd:95:f8:82:68:41:0b:75:ec:e0:6c:c6:8d:92:fb:
a0:01:50:5b:02:dc:ff:1a:0e:0c:c6:79:b9:4a:da:
2b:a0:5c:4a:6b:00:ad:2e:7c:7e:7f:d2:db:e8:c6:
f2:ef:d7:27:99:59:b1:71:3e:a1:46:a4:20:58:14:
ef:1c:0c:c5:26:a7:a1:09:f0:ab:89:fd:03:7c:28:
6a:e3:bf:59:ca:28:b1:9d:7d:c0:e2:34:c8:2b:e5:
44:59:b1:69:83:20:fb:5b:37:1a:d6:58:da:7c:9f:
a9:68:b9:d5:24:33:7f:56:2d:ae:07:f1:77:fa:b3:
61:92:d4:52:3e:ca:56:5e:84:2b:24:ae:1e:4f:04:
fc:02:b9:90:f2:f2:f8:25:41:5e:27:41:46:5e:bd:
21:50:80:e7:39:4e:a3:ba:e7:bf:52:f5:ca:22:dc:
0f:ee:c9:36:15:9a:24:1d:30:e7:09:e9:f7:82:79:
00:2d:45:63:b9:d8:75:94:61:cc:04:a7:98:59:6a:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:64:48:F7:C4:CD:67:2F:C9:13:5C:08:FD:F9:D8:C8:FB:4C:0E
X509v3 Authority Key Identifier:
keyid:13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3dec:8000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:69:74:8d:f2:1f:34:b0:2c:70:e4:43:3d:94:1d:87:8a:43:
40:d7:df:f2:39:50:9f:8b:c7:b0:e9:3b:c8:c5:3b:a8:30:bf:
ed:aa:a7:dc:91:9b:6a:c8:0a:d7:82:0a:2f:a0:ee:38:bb:23:
d6:00:94:c5:78:db:2d:09:9c:15:b4:9b:bb:64:68:e9:59:76:
79:36:99:65:74:7c:d7:bf:66:d0:ab:21:f0:f7:1c:95:fb:66:
1c:3e:f2:ef:ca:e0:44:5a:e2:0b:c6:4c:cb:4b:df:91:e1:f6:
01:19:71:40:77:b6:63:13:6d:69:a9:3b:6d:ca:da:46:6d:0b:
22:c5:aa:b7:8e:f6:5e:e8:9a:f3:18:ef:89:bf:32:12:2d:eb:
78:89:7a:72:db:57:46:f1:d7:55:9a:a9:ef:88:fb:67:4f:a2:
1a:1b:25:91:5b:a6:2c:b0:7c:e9:38:22:64:d3:b8:96:d1:64:
7b:c3:11:89:1d:8c:c5:f0:53:ce:bc:85:a1:09:a8:05:50:3b:
ed:7b:30:dc:ad:5a:e4:c0:e0:58:41:04:23:9f:8c:de:4a:c6:
fc:e9:62:fe:5c:76:e9:d0:e9:da:f2:c1:f9:2f:72:9e:3b:00:
90:30:5e:c4:5f:c8:85:ed:eb:b7:49:95:b5:9b:10:64:67:fb:
76:c4:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:58:33 2025 by rpki-client