This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa
File: 323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa (raw, json)
Hash identifier: FEM3Y2qAIgnUdyutfotyl4TUtrcYRahGo2lgFSh4nYQ=
Subject key identifier: 19:14:29:44:8D:47:5D:AE:35:F9:88:9E:F9:32:CA:CA:B6:67:E7:4F
Certificate issuer: /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial: 3CBF40DB6AC52F571977FC79A0301E24999AC89D
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa
Signing time: Mon 17 Nov 2025 17:12:52 +0000
ROA not before: Mon 17 Nov 2025 17:07:52 +0000
ROA not after: Mon 16 Nov 2026 17:12:52 +0000
asID: 263290
IP address blocks: 2804:1688:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bf:40:db:6a:c5:2f:57:19:77:fc:79:a0:30:1e:24:99:9a:c8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Validity
Not Before: Nov 17 17:07:52 2025 GMT
Not After : Nov 16 17:12:52 2026 GMT
Subject: CN=191429448D475DAE35F9889EF932CACAB667E74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:24:51:a1:88:d8:c0:ae:38:68:b7:ee:89:
e0:e6:b5:77:da:4d:22:00:71:86:e4:4b:a6:15:cf:
6b:34:ba:49:f6:ee:9d:0a:9f:81:44:1d:4c:40:c2:
e8:de:da:18:2f:c4:30:2d:a8:ec:47:bd:69:86:03:
9a:be:38:10:06:6e:b2:31:89:94:ee:c1:c0:89:7d:
15:d0:2a:61:67:0a:bb:ff:1e:b7:d8:11:dc:27:6d:
36:93:b0:9d:fc:ac:e4:e0:b2:8d:b9:0d:a9:38:2c:
b7:63:48:56:88:8c:10:bf:f4:48:af:92:42:25:d9:
13:65:c0:cf:74:c4:fd:2b:b6:b7:0a:3a:27:d5:f5:
62:14:ac:d2:c7:d1:cc:28:44:a2:9a:a9:8b:bc:5c:
06:df:c8:fc:f2:7b:a2:5f:d6:52:52:84:f4:60:f1:
73:4c:6f:df:98:96:65:bd:1e:4b:d1:3b:3d:f3:c4:
6e:54:b9:60:f5:79:97:5d:b9:89:d1:be:62:48:a5:
06:8f:99:f4:e8:a2:3a:7b:6d:1c:e0:13:57:0b:f1:
72:e3:93:23:1e:da:d6:d4:50:c6:93:dc:c6:8f:a4:
17:01:b2:a1:05:b6:77:3d:8c:3b:9c:41:d0:62:1c:
6a:d4:0f:fe:8d:f8:f7:fd:93:62:e0:73:87:cf:2d:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:29:44:8D:47:5D:AE:35:F9:88:9E:F9:32:CA:CA:B6:67:E7:4F
X509v3 Authority Key Identifier:
keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1688:a000::/35
Signature Algorithm: sha256WithRSAEncryption
86:93:8b:9e:f3:39:a1:d7:7d:0d:f5:bb:9e:63:3e:0a:22:53:
21:64:92:53:64:ec:77:ae:a8:ed:8e:51:11:d6:8b:3b:f6:8b:
61:a3:2c:79:47:9f:79:dc:03:06:aa:02:ab:fa:c6:b7:76:d9:
10:f6:2b:e7:6b:d4:55:31:be:e2:6d:de:86:01:9d:d7:c2:3c:
07:1e:13:cc:ff:cf:8d:23:5e:ae:4f:c0:b1:60:67:87:b2:66:
e7:53:24:60:47:eb:a8:af:b7:7f:25:35:20:98:de:49:79:6d:
e8:58:2c:49:b7:02:0d:12:04:5a:3c:74:5e:92:0f:a3:ab:b9:
67:aa:c4:4e:e6:80:d3:f5:d0:53:42:8c:27:19:6d:a1:da:9d:
2b:30:99:f0:f9:52:32:5f:22:98:22:21:e5:5a:c7:c3:f8:a5:
2e:54:62:da:b9:84:60:25:64:29:4b:96:eb:b5:39:53:27:f3:
14:29:96:52:d0:d4:b8:0f:9f:7e:12:69:a2:12:1a:d8:e1:d8:
ef:0b:2e:8a:dc:bf:50:2c:9c:a7:d0:9a:7c:ff:03:95:9d:4b:
50:55:dc:ef:37:2d:fc:fe:0f:2e:11:58:db:88:6e:89:06:ef:
5a:92:60:72:fb:35:b1:12:a3:06:65:0c:74:5c:48:f2:94:f1:
60:b7:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:22 2025 by rpki-client