This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/323830343a376564383a3a2f33322d3438203d3e203238323332.roa
File: 323830343a376564383a3a2f33322d3438203d3e203238323332.roa (raw, json)
Hash identifier: PhO68uVnCgFScnDEM039IdG1hpyK/D+rO+AQU/xYeQ4=
Subject key identifier: F8:0D:A6:1C:2E:80:82:99:C5:EA:18:D2:D7:42:47:06:4D:93:AD:99
Certificate issuer: /CN=99C2A53A53B7161516985068CD39F465FE646938
Certificate serial: 42F8276261F53E1C2A8CC3DA33E00AD041AC9396
Authority key identifier: 99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/323830343a376564383a3a2f33322d3438203d3e203238323332.roa
Signing time: Mon 24 Nov 2025 17:21:08 +0000
ROA not before: Mon 24 Nov 2025 17:16:08 +0000
ROA not after: Mon 23 Nov 2026 17:21:08 +0000
asID: 28232
IP address blocks: 2804:7ed8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl
rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 15:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f8:27:62:61:f5:3e:1c:2a:8c:c3:da:33:e0:0a:d0:41:ac:93:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99C2A53A53B7161516985068CD39F465FE646938
Validity
Not Before: Nov 24 17:16:08 2025 GMT
Not After : Nov 23 17:21:08 2026 GMT
Subject: CN=F80DA61C2E808299C5EA18D2D74247064D93AD99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:15:4f:15:8e:3b:f4:27:c9:fb:fc:69:f5:
be:40:cb:17:89:46:4c:d3:b1:b0:d7:8e:20:13:d8:
76:ba:8b:d7:1a:c8:30:c8:fa:1a:b9:05:d9:b7:c2:
be:e7:f6:51:e1:5e:fc:a6:09:c5:c2:85:97:5c:cd:
8a:6a:8e:00:b2:25:b8:e6:78:99:6a:ce:68:fb:7c:
fa:10:39:6d:86:2d:7e:61:c5:11:d1:1d:73:15:e8:
49:7f:97:d5:32:1a:7d:d7:71:4e:a3:83:ec:6b:6a:
a3:1a:9c:f1:20:3d:57:88:80:0d:29:ef:24:19:aa:
b4:74:0d:3c:7c:51:4c:d6:70:01:0c:20:0b:86:2f:
52:b5:69:35:e1:0a:b4:18:06:fc:7c:2d:af:41:9c:
e1:b4:9e:6b:7c:9f:9e:cd:7d:2a:e2:d0:ea:3a:44:
a8:28:e6:8c:4f:87:b0:8e:9b:33:b9:82:60:e0:ab:
5f:58:bc:ba:35:28:42:fd:d0:6f:78:87:63:c6:6b:
7d:e4:52:07:1d:63:f8:85:f5:43:0e:bd:75:59:d1:
26:2f:a8:fc:e3:63:e2:c7:1c:fa:a3:6e:af:f2:93:
64:1e:ec:26:cd:38:85:7d:50:cc:5b:b9:30:59:42:
b0:c4:13:36:8f:2d:10:ac:4b:d8:86:8a:83:d9:ad:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0D:A6:1C:2E:80:82:99:C5:EA:18:D2:D7:42:47:06:4D:93:AD:99
X509v3 Authority Key Identifier:
keyid:99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/323830343a376564383a3a2f33322d3438203d3e203238323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ed8::/32
Signature Algorithm: sha256WithRSAEncryption
cc:1a:96:b8:11:68:28:6b:ff:fc:19:d7:7c:a7:9d:f2:7f:e7:
a5:70:82:d8:91:28:3b:b8:72:37:cf:23:64:ac:64:71:11:6a:
b7:8c:cc:ea:8b:55:8f:48:95:e2:a1:85:c4:b7:62:6d:dd:d3:
13:9e:00:43:49:aa:50:3a:b6:73:0f:8e:a6:27:88:db:2e:01:
f6:a2:e2:6e:47:8c:8c:4f:dc:14:ac:8e:aa:7e:14:d4:9f:53:
1c:be:ce:78:36:ad:15:14:c8:4b:52:ca:b3:d4:75:c0:4e:fd:
51:04:b7:4a:72:bd:44:42:dc:b0:84:37:01:ef:2d:57:37:ee:
e3:11:a6:37:4a:4b:1c:47:1f:db:d9:13:4e:27:a5:93:00:28:
c0:6d:86:06:5a:33:fe:1f:d5:c3:84:fb:23:36:2d:05:aa:2c:
49:00:d9:b7:c7:14:87:26:2a:0b:9b:63:25:7f:6b:d3:75:9e:
6e:be:09:f1:74:d6:f0:66:45:3a:ad:30:84:70:25:46:27:39:
28:44:55:80:fa:6b:f6:f0:3a:1b:bf:f8:16:34:50:24:1f:53:
47:2d:65:bb:69:9c:14:7e:02:c2:f1:be:0d:85:ad:15:2f:1d:
27:6e:35:ce:0c:20:0f:06:0a:82:1b:68:57:94:64:3e:02:cb:
ae:5a:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:09:39 2025 by rpki-client