This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
File: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (raw, json)
Hash identifier: L6uI3RIoYI2diRklfjIXu8xI4AnfbhjIKVV+2GMynCc=
Subject key identifier: B7:D8:E8:4D:48:9D:27:59:46:9E:85:3A:D7:E9:B7:FE:5C:9D:ED:4E
Certificate issuer: /CN=3E6ECD57587D43046584479FCE47433E7399436F
Certificate serial: 3FCFE22A817CBB525AE76CBAA9A23AC867B2001E
Authority key identifier: 3E:6E:CD:57:58:7D:43:04:65:84:47:9F:CE:47:43:3E:73:99:43:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E6ECD57587D43046584479FCE47433E7399436F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
Signing time: Thu 22 Jan 2026 16:40:24 +0000
ROA not before: Thu 22 Jan 2026 16:35:24 +0000
ROA not after: Thu 21 Jan 2027 16:40:24 +0000
asID: 268878
IP address blocks: 2804:5bf0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/3E6ECD57587D43046584479FCE47433E7399436F.crl
rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/3E6ECD57587D43046584479FCE47433E7399436F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E6ECD57587D43046584479FCE47433E7399436F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cf:e2:2a:81:7c:bb:52:5a:e7:6c:ba:a9:a2:3a:c8:67:b2:00:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6ECD57587D43046584479FCE47433E7399436F
Validity
Not Before: Jan 22 16:35:24 2026 GMT
Not After : Jan 21 16:40:24 2027 GMT
Subject: CN=B7D8E84D489D2759469E853AD7E9B7FE5C9DED4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:29:d1:f5:28:8b:88:65:6d:dc:bf:5f:15:56:
6b:68:9a:72:fb:5b:c1:2f:33:de:4d:cf:9f:ab:c4:
c9:a8:60:42:b0:43:c0:8c:35:46:94:37:5e:43:cc:
38:0b:b2:de:d6:8b:d0:cb:6e:17:54:44:e1:af:f8:
77:1c:c2:c3:02:24:b1:ed:95:5c:78:cd:dc:99:f8:
47:3c:e7:b4:fd:7d:ca:3d:0c:66:bf:cc:e8:d7:a8:
48:f6:1a:9c:62:ed:c5:89:df:6e:07:e4:00:2b:fb:
1f:ce:a5:5e:21:ff:25:5a:c8:bd:ee:17:bd:83:90:
9f:f5:5c:45:a4:ab:8d:6c:c0:7c:ec:e3:c6:60:5f:
44:dc:75:05:27:12:db:d6:79:45:31:52:24:5f:12:
27:4c:34:ba:59:3b:12:b4:93:53:b9:c8:fd:04:f5:
6c:50:00:0a:c1:8c:b8:c1:37:95:b1:35:20:5a:fe:
b3:f3:50:69:37:0d:7e:e6:77:db:cb:47:29:d5:52:
c0:ae:6c:1c:53:99:4c:62:cb:b7:02:f8:d2:4b:79:
b2:d2:10:66:3f:ad:c6:73:cf:08:02:9b:0c:95:db:
c2:4e:12:83:81:b5:01:2c:58:93:21:30:fd:8e:a0:
b5:dd:93:13:4c:41:ea:2c:48:3f:e7:f1:6d:aa:8e:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:E8:4D:48:9D:27:59:46:9E:85:3A:D7:E9:B7:FE:5C:9D:ED:4E
X509v3 Authority Key Identifier:
keyid:3E:6E:CD:57:58:7D:43:04:65:84:47:9F:CE:47:43:3E:73:99:43:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/3E6ECD57587D43046584479FCE47433E7399436F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E6ECD57587D43046584479FCE47433E7399436F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5bf0::/32
Signature Algorithm: sha256WithRSAEncryption
99:df:12:96:66:ac:4d:74:4e:a8:19:e2:cd:52:6a:03:f9:aa:
dd:ba:48:d2:66:29:23:c4:59:58:1c:fa:30:70:30:dc:91:23:
e7:1f:58:bf:e7:21:c9:8e:bc:73:09:a7:7d:48:14:8b:4b:86:
0d:c6:1c:18:00:d6:03:36:9d:49:21:89:f0:d6:07:7d:05:f0:
20:5d:34:73:bc:75:6d:a2:5f:68:0a:4b:12:d3:fe:5c:c5:39:
f0:86:d2:78:73:a7:8d:dd:81:ea:e5:fb:35:56:a6:2e:6e:1e:
2e:2d:b5:ca:74:61:7f:ba:c2:fe:05:75:e5:14:99:42:ac:9d:
9f:b2:87:45:88:e5:31:68:1c:47:b0:17:a7:84:75:6c:57:be:
f5:2d:95:ba:04:24:b4:04:15:ce:1f:bd:31:69:c4:17:65:ac:
c2:6e:96:b2:0a:78:42:b0:20:1c:e9:7e:e7:7e:63:a4:c1:b8:
fb:0c:c2:30:ad:4b:fc:57:c0:1a:d0:6b:c6:bc:39:c4:4d:27:
06:0d:05:f1:23:b8:85:24:93:5d:12:96:11:f3:59:15:e9:5a:
7c:a8:84:13:03:91:01:c8:84:b0:4a:a8:7f:a6:9f:14:87:73:
86:c7:11:b5:1b:1c:20:0a:f8:a8:9d:c0:56:84:23:57:9a:f9:
19:a3:ea:57
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUP8/iKoF8u1Ja52y6qaI6yGeyAB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U2RUNENTc1ODdENDMwNDY1ODQ0NzlGQ0U0NzQzM0U3
Mzk5NDM2RjAeFw0yNjAxMjIxNjM1MjRaFw0yNzAxMjExNjQwMjRaMDMxMTAvBgNV
BAMTKEI3RDhFODRENDg5RDI3NTk0NjlFODUzQUQ3RTlCN0ZFNUM5REVENEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3KdH1KIuIZW3cv18VVmtomnL7
W8EvM95Nz5+rxMmoYEKwQ8CMNUaUN15DzDgLst7Wi9DLbhdUROGv+HccwsMCJLHt
lVx4zdyZ+Ec857T9fco9DGa/zOjXqEj2Gpxi7cWJ324H5AAr+x/OpV4h/yVayL3u
F72DkJ/1XEWkq41swHzs48ZgX0TcdQUnEtvWeUUxUiRfEidMNLpZOxK0k1O5yP0E
9WxQAArBjLjBN5WxNSBa/rPzUGk3DX7md9vLRynVUsCubBxTmUxiy7cC+NJLebLS
EGY/rcZzzwgCmwyV28JOEoOBtQEsWJMhMP2OoLXdkxNMQeosSD/n8W2qjvOlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUt9joTUidJ1lGnoU61+m3/lyd7U4wHwYDVR0j
BBgwFoAUPm7NV1h9QwRlhEefzkdDPnOZQ28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC8zRTZFQ0Q1NzU4N0Q0MzA0NjU4NDQ3OUZDRTQ3NDMzRTczOTk0MzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFNkVDRDU3NTg3RDQzMDQ2
NTg0NDc5RkNFNDc0MzNFNzM5OTQzNkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzIzODMwMzQzYTM1NjI2NjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFvwMA0GCSqGSIb3DQEBCwUAA4IBAQCZ3xKW
ZqxNdE6oGeLNUmoD+ardukjSZikjxFlYHPowcDDckSPnH1i/5yHJjrxzCad9SBSL
S4YNxhwYANYDNp1JIYnw1gd9BfAgXTRzvHVtol9oCksS0/5cxTnwhtJ4c6eN3YHq
5fs1VqYubh4uLbXKdGF/usL+BXXlFJlCrJ2fsodFiOUxaBxHsBenhHVsV771LZW6
BCS0BBXOH70xacQXZazCbpayCnhCsCAc6X7nfmOkwbj7DMIwrUv8V8Aa0GvGvDnE
TScGDQXxI7iFJJNdEpYR81kV6Vp8qIQTA5EByISwSqh/pp8Uh3OGxxG1GxwgCvio
ncBWhCNXmvkZo+pX
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:27:39 2026 by rpki-client