This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3334203d3e20323733343835.roa
File: 323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (raw, json)
Hash identifier: 8zTnDBU/ctRiwzvyYleMQiuI7BwUVubfXCCycOPdhGg=
Subject key identifier: B5:79:89:B3:38:61:B9:15:23:AF:5C:0C:E4:44:B3:6B:56:7B:0B:E7
Certificate issuer: /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Certificate serial: 7EAB08B72F49CC9B1242B1DA0665C2867DE66E9E
Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3334203d3e20323733343835.roa
Signing time: Tue 18 Nov 2025 19:07:42 +0000
ROA not before: Tue 18 Nov 2025 19:02:42 +0000
ROA not after: Tue 17 Nov 2026 19:07:42 +0000
asID: 273485
IP address blocks: 2804:8f58::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 20:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ab:08:b7:2f:49:cc:9b:12:42:b1:da:06:65:c2:86:7d:e6:6e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Validity
Not Before: Nov 18 19:02:42 2025 GMT
Not After : Nov 17 19:07:42 2026 GMT
Subject: CN=B57989B33861B91523AF5C0CE444B36B567B0BE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:83:32:6d:e4:78:2b:56:23:e8:1c:ae:e3:
a2:a8:d3:30:1a:7b:87:ee:f4:16:57:ff:13:1e:d6:
22:52:8b:66:d6:0c:d8:0e:ac:1e:47:14:6d:30:86:
56:8d:81:a9:da:b4:d9:c9:9b:04:d7:f8:c0:b1:cc:
ed:f1:41:47:d4:9e:67:d6:04:ab:50:a1:9b:91:dc:
84:b3:a7:0c:9e:34:0d:a0:df:70:af:38:02:a1:e5:
ab:06:97:a5:41:f9:ad:5f:67:0c:b2:7e:76:90:d9:
d9:c0:c0:5b:74:6a:0f:fe:65:5f:da:9c:11:a7:c0:
32:26:61:08:c6:41:98:70:c5:a1:79:a8:07:af:bf:
73:d0:b0:d3:41:9e:92:ee:37:ff:bf:fd:29:97:a1:
86:ab:b4:e0:88:00:01:24:eb:a6:47:3f:d1:86:3a:
8c:69:68:e3:5e:e8:ad:67:70:27:62:19:f1:f7:6f:
64:fe:86:35:a3:3a:a2:09:6e:ec:95:a5:72:e1:48:
7f:c6:bd:dc:22:1c:67:2d:76:25:63:fa:f5:ec:fa:
d7:50:65:18:7d:10:e5:7a:13:97:d1:e5:30:aa:6c:
9e:33:af:8c:1d:e1:63:6e:da:f9:df:9f:59:66:54:
a2:b0:b0:e3:d2:f2:cb:12:94:12:29:32:ad:91:28:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:89:B3:38:61:B9:15:23:AF:5C:0C:E4:44:B3:6B:56:7B:0B:E7
X509v3 Authority Key Identifier:
keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d3334203d3e20323733343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f58::/32
Signature Algorithm: sha256WithRSAEncryption
16:69:01:0b:8e:72:c4:df:7b:24:c8:18:7d:4c:f7:d7:2b:64:
2e:4b:0c:f5:ce:e1:27:86:78:3d:1d:44:f6:dc:bd:58:9f:31:
d0:14:8a:9f:2d:d3:51:61:a8:06:58:d1:62:57:9f:1a:91:b4:
04:6f:e7:08:c8:49:11:10:22:59:77:1e:ca:e0:a5:55:96:48:
b1:c4:6b:96:07:37:04:ef:d8:62:4f:d2:96:f0:37:8e:4f:e4:
6f:38:00:55:d1:20:de:c6:53:f7:49:bb:98:5e:f8:79:78:2d:
fd:79:56:a3:62:85:2b:8c:39:be:12:70:b6:8b:c0:86:03:8e:
77:ee:e2:fd:12:56:92:43:cd:51:8f:8f:01:6e:4b:8d:9c:70:
98:7c:d7:bb:05:25:af:18:36:b8:12:53:58:8a:6c:b9:18:9c:
34:9f:c1:1a:32:4d:0d:de:9d:b0:cb:c6:63:69:6e:11:58:15:
4a:5c:a1:2f:4f:8d:c0:91:a5:ea:7f:a1:5a:01:db:dd:23:f2:
f5:91:c6:cf:07:27:70:71:1e:4d:34:f0:2f:62:f9:e0:c4:be:
6d:72:b2:be:eb:4a:d5:6b:9b:61:c1:b3:a1:dd:35:af:c8:11:
08:0d:14:cc:3f:fa:88:6d:5d:a2:8b:b7:f2:22:6c:60:4b:bd:
8f:a7:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:30:09 2025 by rpki-client