This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
File: 323830343a6464303a3a2f33322d313238203d3e203238363339.roa (raw, json)
Hash identifier: WQoboyImui1okPybhUmMkwRTPTqA4Wr/K4QTuEd2D6g=
Subject key identifier: 60:5F:AE:18:25:57:66:4F:39:2E:09:03:57:24:94:F0:40:03:17:D7
Certificate issuer: /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Certificate serial: 4AA3BF27A19A40FEE7FE57CBAA80544431163F68
Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
Signing time: Wed 05 Mar 2025 23:18:33 +0000
ROA not before: Wed 05 Mar 2025 23:13:33 +0000
ROA not after: Wed 04 Mar 2026 23:18:33 +0000
asID: 28639
IP address blocks: 2804:dd0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a3:bf:27:a1:9a:40:fe:e7:fe:57:cb:aa:80:54:44:31:16:3f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Validity
Not Before: Mar 5 23:13:33 2025 GMT
Not After : Mar 4 23:18:33 2026 GMT
Subject: CN=605FAE182557664F392E0903572494F0400317D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:ea:aa:68:7e:d1:8c:3a:97:b5:ba:6c:48:
f5:e3:dd:24:d4:6a:dc:94:8f:ec:0c:ef:59:b0:33:
18:8a:3f:07:1a:86:89:b5:d7:4e:f4:ec:30:f0:25:
7a:87:6c:0c:77:31:15:25:8f:65:e6:42:a3:31:af:
d7:7f:7e:89:c5:23:1c:cd:8d:4c:22:cc:80:56:4b:
74:03:17:14:b7:3a:25:22:d5:21:3b:f3:66:8a:d4:
bc:83:e8:99:3e:ac:37:ad:84:c9:74:7c:8f:5f:87:
33:ad:4c:2c:b3:67:41:c0:39:74:75:5e:70:29:66:
3a:32:c3:46:3f:9e:67:45:26:fc:a7:e5:f4:f2:c1:
84:fc:06:e3:1c:23:98:d9:b8:37:c7:78:a3:b5:e6:
27:67:38:84:66:85:81:5c:b5:81:c7:35:33:1b:12:
1c:54:7f:43:f0:5d:7e:d5:89:4e:41:53:fb:c6:1b:
6e:99:a6:e8:89:77:80:c1:79:83:08:b9:ba:43:a1:
d9:3b:ca:c3:51:ed:07:5c:6b:5f:eb:ed:ef:23:0f:
41:c2:a0:2e:ed:b6:66:ff:b1:c9:f0:56:5e:e3:ab:
ce:32:a8:ae:73:5d:52:aa:5c:60:da:2b:65:30:a8:
f6:4f:eb:61:b1:39:64:12:f2:d9:b4:d8:0e:82:de:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:AE:18:25:57:66:4F:39:2E:09:03:57:24:94:F0:40:03:17:D7
X509v3 Authority Key Identifier:
keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:dd0::/32
Signature Algorithm: sha256WithRSAEncryption
49:84:f8:55:03:47:22:be:29:01:93:36:ae:04:ec:2e:bd:5f:
0b:91:f0:ce:3f:cd:b2:78:c8:0a:dd:c2:c3:a3:f5:fb:07:fa:
5a:dc:de:fb:7d:e1:20:19:fc:40:03:5a:e2:7f:b8:4b:d3:1f:
13:8d:9e:02:ce:73:06:b5:d4:74:b7:0b:c8:dd:b3:2a:72:fc:
ff:45:28:5f:b7:9d:7d:51:74:ec:95:86:c4:9d:4c:d4:71:6b:
01:b1:a7:44:ab:cb:fa:3c:0f:e5:11:51:ba:7e:85:1f:c6:58:
ab:49:95:c6:db:67:b5:de:ea:c2:55:f1:2b:e8:81:d3:08:ee:
82:16:7e:24:ea:ec:0d:a0:f0:39:ec:86:44:20:6d:aa:6d:79:
af:b8:8f:7f:ac:15:5d:ae:95:4c:a4:a7:bf:b4:20:d2:62:8c:
fe:04:7b:b7:1d:39:ba:f9:da:f2:f5:98:e9:67:52:52:98:a7:
32:f1:d3:cc:2b:af:1f:90:53:93:91:c2:1f:a6:9e:79:df:68:
86:f9:d9:8d:2d:b3:2b:31:02:42:e5:df:5f:e3:36:1a:4c:d2:
f0:7f:26:04:10:1c:05:07:c6:9f:95:8a:62:bb:9a:cc:c4:e3:
78:16:82:32:e6:8d:2d:97:f0:e3:84:b3:04:d6:fb:92:b1:9c:
c7:dc:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:36 2025 by rpki-client