This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
File: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (raw, json)
Hash identifier: Ov/oUkBCITXE/khvxlMnl5MLKRLhHr+CZ0pUORWzSk0=
Subject key identifier: 29:1B:4A:D2:B0:FC:FA:CC:E9:B7:42:C7:32:CB:48:C9:E6:27:79:D4
Certificate issuer: /CN=EF392B17BF32EC7B7C6276A01935A594E3D1E41F
Certificate serial: 0F0928A332992D594C10BA4015253007F39635EA
Authority key identifier: EF:39:2B:17:BF:32:EC:7B:7C:62:76:A0:19:35:A5:94:E3:D1:E4:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
Signing time: Tue 25 Nov 2025 13:10:27 +0000
ROA not before: Tue 25 Nov 2025 13:05:27 +0000
ROA not after: Tue 24 Nov 2026 13:10:27 +0000
asID: 11432
IP address blocks: 2804:138:a000::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.crl
rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:09:28:a3:32:99:2d:59:4c:10:ba:40:15:25:30:07:f3:96:35:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF392B17BF32EC7B7C6276A01935A594E3D1E41F
Validity
Not Before: Nov 25 13:05:27 2025 GMT
Not After : Nov 24 13:10:27 2026 GMT
Subject: CN=291B4AD2B0FCFACCE9B742C732CB48C9E62779D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:d7:77:c7:0b:76:ca:bb:b9:d6:7d:6a:f3:
68:2b:c0:d3:60:07:38:d0:1d:cb:98:72:31:16:e0:
b1:3e:e7:5d:af:06:fc:1e:5a:bb:4b:ac:0d:b1:0d:
9c:40:db:82:c4:fc:41:9c:0e:16:9c:86:ac:42:62:
3f:58:2d:f6:d4:f7:21:33:e4:05:8a:e5:13:32:37:
49:88:5e:d0:6e:15:cb:ac:40:92:75:e4:80:ed:df:
09:e8:71:1f:7b:c3:83:be:c4:37:a4:54:5f:e1:ed:
d2:26:1f:c0:c1:b7:b0:63:81:4c:0a:9a:ba:e8:f8:
9f:74:f8:77:7f:87:fd:ac:30:89:cf:4e:af:12:41:
41:f1:01:89:07:c6:ce:02:2b:4c:64:fa:ca:12:d8:
fb:37:e2:7f:b2:bf:aa:a1:cc:8f:bc:77:26:72:4d:
99:d2:3a:fc:47:fc:5a:fe:ea:bf:5c:6c:bc:16:6d:
e6:4f:9c:5c:69:ff:65:5d:76:9b:6a:5b:42:b3:84:
cd:5a:57:cc:a5:a3:40:98:b9:43:22:a4:85:ea:a8:
92:78:20:38:e1:7c:89:1f:db:3f:a3:57:23:f0:77:
03:cd:09:16:a2:1c:7a:24:9c:dd:8e:d8:c1:76:f6:
93:6f:c9:18:a1:e3:36:c9:df:ee:36:95:54:d2:2d:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:4A:D2:B0:FC:FA:CC:E9:B7:42:C7:32:CB:48:C9:E6:27:79:D4
X509v3 Authority Key Identifier:
keyid:EF:39:2B:17:BF:32:EC:7B:7C:62:76:A0:19:35:A5:94:E3:D1:E4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138:a000::/47
Signature Algorithm: sha256WithRSAEncryption
32:3f:f8:22:7f:41:04:b1:e4:bb:59:9e:a9:0a:c7:ce:27:03:
63:b9:f0:45:c6:77:fb:91:65:65:48:78:2c:55:de:f5:5e:fb:
ed:2d:61:a6:84:82:20:1e:31:2a:2f:75:c4:6b:2b:97:8a:4f:
b7:7a:55:9b:09:c9:49:6a:66:39:01:3f:75:7c:cb:34:b6:dc:
cf:2f:df:ea:42:0c:8c:60:68:62:d6:e1:f0:2b:5e:1a:84:f4:
c5:bc:08:27:6c:40:84:2c:2e:1e:9a:b0:a6:d5:16:7f:3e:ba:
0e:f3:7e:00:79:fa:c2:e1:d0:9d:ac:e2:93:5f:2b:85:51:6a:
f6:e9:28:8c:60:8a:e6:85:34:8c:a0:8f:9a:76:0b:95:d6:1a:
48:ac:1c:50:b4:64:4c:30:cc:96:f6:5d:e5:04:c9:4d:cb:81:
43:c6:f4:3c:0b:b8:db:7d:23:29:bf:1e:c3:15:82:b9:2b:ad:
69:6c:19:9a:85:54:8c:cb:0d:22:13:dd:13:2d:14:fc:4e:ff:
d6:a4:6d:a0:90:aa:ab:72:53:e9:98:89:85:9b:bd:09:e5:ee:
eb:02:f9:cb:6f:a4:1e:1a:fa:02:28:05:5c:2c:4d:11:b5:6d:
67:fc:cd:e2:fd:33:45:eb:d3:09:30:4c:26:68:c7:56:c0:f9:
ce:f2:1f:34
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUDwkoozKZLVlMELpAFSUwB/OWNeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzOTJCMTdCRjMyRUM3QjdDNjI3NkEwMTkzNUE1OTRF
M0QxRTQxRjAeFw0yNTExMjUxMzA1MjdaFw0yNjExMjQxMzEwMjdaMDMxMTAvBgNV
BAMTKDI5MUI0QUQyQjBGQ0ZBQ0NFOUI3NDJDNzMyQ0I0OEM5RTYyNzc5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrtd3xwt2yru51n1q82grwNNg
BzjQHcuYcjEW4LE+512vBvweWrtLrA2xDZxA24LE/EGcDhachqxCYj9YLfbU9yEz
5AWK5RMyN0mIXtBuFcusQJJ15IDt3wnocR97w4O+xDekVF/h7dImH8DBt7BjgUwK
mrro+J90+Hd/h/2sMInPTq8SQUHxAYkHxs4CK0xk+soS2Ps34n+yv6qhzI+8dyZy
TZnSOvxH/Fr+6r9cbLwWbeZPnFxp/2VddptqW0KzhM1aV8ylo0CYuUMipIXqqJJ4
IDjhfIkf2z+jVyPwdwPNCRaiHHoknN2O2MF29pNvyRih4zbJ3+42lVTSLQIhAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUKRtK0rD8+szpt0LHMstIyeYnedQwHwYDVR0j
BBgwFoAU7zkrF78y7Ht8YnagGTWllOPR5B8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC9FRjM5MkIxN0JGMzJFQzdCN0M2Mjc2QTAxOTM1QTU5NEUzRDFFNDFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMzkyQjE3QkYzMkVDN0I3
QzYyNzZBMDE5MzVBNTk0RTNEMUU0MUYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzODMwMzQzYTMxMzMzODNhNjEzMDMwMzAzYTNhMmYzNDM3MmQzNDM3MjAzZDNl
MjAzMTMxMzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAQBOKAAMA0GCSqGSIb3DQEBCwUAA4IB
AQAyP/gif0EEseS7WZ6pCsfOJwNjufBFxnf7kWVlSHgsVd71XvvtLWGmhIIgHjEq
L3XEayuXik+3elWbCclJamY5AT91fMs0ttzPL9/qQgyMYGhi1uHwK14ahPTFvAgn
bECELC4emrCm1RZ/ProO834AefrC4dCdrOKTXyuFUWr26SiMYIrmhTSMoI+adguV
1hpIrBxQtGRMMMyW9l3lBMlNy4FDxvQ8C7jbfSMpvx7DFYK5K61pbBmahVSMyw0i
E90TLRT8Tv/WpG2gkKqrclPpmImFm70J5e7rAvnLb6QeGvoCKAVcLE0RtW1n/M3i
/TNF69MJMEwmaMdWwPnO8h80
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:21 2025 by rpki-client