This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier: NvQIBt8sJBxCnsCSc0cAzD1JRwABLJpN6aitpb7RwUs=
Subject key identifier: 1C:A9:CA:6D:72:F9:CF:34:66:47:FC:4D:03:7D:00:3A:25:FD:BF:0F
Certificate issuer: /CN=EF392B17BF32EC7B7C6276A01935A594E3D1E41F
Certificate serial: 3D1F78DEDA15E268B30BD78D71EFF731AD35D6B5
Authority key identifier: EF:39:2B:17:BF:32:EC:7B:7C:62:76:A0:19:35:A5:94:E3:D1:E4:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time: Mon 24 Nov 2025 18:05:21 +0000
ROA not before: Mon 24 Nov 2025 18:00:21 +0000
ROA not after: Mon 23 Nov 2026 18:05:21 +0000
asID: 11432
IP address blocks: 2804:138::/32 maxlen: 37
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.crl
rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1f:78:de:da:15:e2:68:b3:0b:d7:8d:71:ef:f7:31:ad:35:d6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF392B17BF32EC7B7C6276A01935A594E3D1E41F
Validity
Not Before: Nov 24 18:00:21 2025 GMT
Not After : Nov 23 18:05:21 2026 GMT
Subject: CN=1CA9CA6D72F9CF346647FC4D037D003A25FDBF0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:91:dd:d3:81:00:bf:dc:49:91:6e:ba:50:
12:d8:c5:9c:27:21:9a:90:ef:cc:e9:0a:15:53:4d:
be:a5:9f:47:c1:d3:eb:d0:1d:69:20:bc:02:11:d6:
02:61:9c:71:43:58:d9:a7:a6:37:18:02:2c:4d:7a:
75:fe:5c:09:52:02:d0:dc:25:5f:28:b9:e4:c7:42:
d4:c6:b3:06:08:41:f0:c3:e7:4b:13:c9:4f:aa:ee:
b2:23:e7:e0:cb:36:03:1c:09:4f:b4:59:7b:4f:b4:
a9:e6:91:a8:74:3c:57:ca:e4:ff:44:ba:2d:8b:16:
76:86:d0:87:b9:b2:34:d8:46:15:ba:d5:c4:42:bc:
5e:21:92:1d:1a:b1:f5:a7:72:1a:4c:fb:96:56:1b:
31:cc:d5:1c:1d:6e:83:8c:2b:5c:d4:38:e6:2b:41:
6f:16:f0:a0:f4:af:7b:00:26:87:71:1e:0c:a9:c4:
2b:3a:14:9b:66:39:0b:bb:79:31:31:e8:eb:5b:b8:
ec:35:c0:cc:1c:e5:f4:14:de:1d:e8:da:28:c0:f1:
80:e7:9d:78:87:7d:eb:03:d9:51:a4:25:42:e5:6f:
f5:3b:99:ea:c8:fc:db:ba:e6:9c:d7:15:6e:f1:18:
10:da:c5:e6:72:50:21:b3:b7:4c:30:b2:01:83:8b:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:CA:6D:72:F9:CF:34:66:47:FC:4D:03:7D:00:3A:25:FD:BF:0F
X509v3 Authority Key Identifier:
keyid:EF:39:2B:17:BF:32:EC:7B:7C:62:76:A0:19:35:A5:94:E3:D1:E4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138::/32
Signature Algorithm: sha256WithRSAEncryption
07:34:bf:ec:0d:30:ab:1d:2d:16:6b:b9:de:ea:3a:9a:06:b5:
bf:21:e1:f2:59:d9:7f:d9:7c:55:11:be:4b:db:6a:aa:41:00:
03:39:c8:83:f3:7f:3d:a6:cf:3c:6f:af:7a:44:5b:53:ff:a5:
a0:0b:58:3a:76:9b:2c:8f:96:be:7a:23:24:6d:7c:76:f9:32:
e9:39:5b:47:03:05:e7:77:46:e2:20:60:ec:94:7d:5c:3d:d0:
bd:e8:15:e1:5f:c0:2c:fe:81:a8:98:e8:cc:46:8b:0f:2f:65:
f0:82:de:cd:e2:d9:5e:7d:06:f9:6e:bf:18:9e:f9:5f:e5:af:
36:2b:e8:48:87:77:0c:a3:c6:ab:89:cf:e2:dc:e0:41:73:f5:
4d:23:23:0c:3b:3d:9c:e3:73:07:6d:d8:3d:75:68:10:ad:20:
15:b3:dd:82:4b:28:ee:35:61:a1:9d:61:eb:7e:56:bf:36:f2:
cf:c4:95:f8:fc:ae:d4:24:e5:e2:4d:18:0b:07:7f:81:27:28:
9c:8d:49:e6:eb:c3:68:0e:d7:5c:f5:8c:e6:67:05:77:d1:79:
75:7a:49:13:dc:a2:37:3d:89:0e:07:33:ca:90:b3:60:9e:af:
1d:90:34:a0:ee:b8:17:ef:fc:2a:88:e9:05:de:d6:b9:22:b3:
cc:1a:64:a6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUPR943toV4mizC9eNce/3Ma011rUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzOTJCMTdCRjMyRUM3QjdDNjI3NkEwMTkzNUE1OTRF
M0QxRTQxRjAeFw0yNTExMjQxODAwMjFaFw0yNjExMjMxODA1MjFaMDMxMTAvBgNV
BAMTKDFDQTlDQTZENzJGOUNGMzQ2NjQ3RkM0RDAzN0QwMDNBMjVGREJGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z5Hd04EAv9xJkW66UBLYxZwn
IZqQ78zpChVTTb6ln0fB0+vQHWkgvAIR1gJhnHFDWNmnpjcYAixNenX+XAlSAtDc
JV8oueTHQtTGswYIQfDD50sTyU+q7rIj5+DLNgMcCU+0WXtPtKnmkah0PFfK5P9E
ui2LFnaG0Ie5sjTYRhW61cRCvF4hkh0asfWnchpM+5ZWGzHM1RwdboOMK1zUOOYr
QW8W8KD0r3sAJodxHgypxCs6FJtmOQu7eTEx6OtbuOw1wMwc5fQU3h3o2ijA8YDn
nXiHfesD2VGkJULlb/U7merI/Nu65pzXFW7xGBDaxeZyUCGzt0wwsgGDi8QDAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUHKnKbXL5zzRmR/xNA30AOiX9vw8wHwYDVR0j
BBgwFoAU7zkrF78y7Ht8YnagGTWllOPR5B8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC9FRjM5MkIxN0JGMzJFQzdCN0M2Mjc2QTAxOTM1QTU5NEUzRDFFNDFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMzkyQjE3QkYzMkVDN0I3
QzYyNzZBMDE5MzVBNTk0RTNEMUU0MUYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzODMwMzQzYTMxMzMzODNhM2EyZjMzMzIyZDMzMzcyMDNkM2UyMDMxMzEzNDMz
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAE4MA0GCSqGSIb3DQEBCwUAA4IBAQAHNL/sDTCrHS0W
a7ne6jqaBrW/IeHyWdl/2XxVEb5L22qqQQADOciD8389ps88b696RFtT/6WgC1g6
dpssj5a+eiMkbXx2+TLpOVtHAwXnd0biIGDslH1cPdC96BXhX8As/oGomOjMRosP
L2Xwgt7N4tlefQb5br8Ynvlf5a82K+hIh3cMo8aric/i3OBBc/VNIyMMOz2c43MH
bdg9dWgQrSAVs92CSyjuNWGhnWHrfla/NvLPxJX4/K7UJOXiTRgLB3+BJyicjUnm
68NoDtdc9YzmZwV30Xl1ekkT3KI3PYkOBzPKkLNgnq8dkDSg7rgX7/wqiOkF3ta5
IrPMGmSm
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:22:41 2025 by rpki-client