This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa
File: 323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa (raw, json)
Hash identifier: M6mzwrjz9nq35wkWZV/QnNVuiGRjCv7LSdNS6FLVRCc=
Subject key identifier: EB:FD:7C:22:2D:D7:57:6C:31:A5:67:94:76:C6:5A:25:17:8E:E5:30
Certificate issuer: /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial: 3BE34FC31996BCA3ECF6CF7F65D80C0E983CEE3D
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa
Signing time: Mon 17 Nov 2025 17:12:54 +0000
ROA not before: Mon 17 Nov 2025 17:07:54 +0000
ROA not after: Mon 16 Nov 2026 17:12:54 +0000
asID: 263290
IP address blocks: 2804:1688:e400::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e3:4f:c3:19:96:bc:a3:ec:f6:cf:7f:65:d8:0c:0e:98:3c:ee:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Validity
Not Before: Nov 17 17:07:54 2025 GMT
Not After : Nov 16 17:12:54 2026 GMT
Subject: CN=EBFD7C222DD7576C31A5679476C65A25178EE530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:e7:bc:68:86:fb:35:b1:63:95:23:dd:fe:
60:d1:2d:b5:1b:0c:48:80:f5:77:5d:ff:48:f3:75:
a1:b1:99:0a:d8:06:e6:61:a6:c1:60:9d:0a:97:45:
22:51:02:54:79:46:30:1c:fa:e3:ee:a4:6e:af:ae:
36:8d:61:41:be:98:f6:4a:41:7d:88:f4:88:89:88:
c5:4c:19:65:33:cb:14:e4:d0:25:f6:84:c6:87:00:
13:7c:e4:4a:ef:5b:f6:7d:b6:68:51:bb:5a:62:1e:
67:f3:99:62:b5:70:13:19:3f:c7:6b:d4:d0:df:e8:
3b:b3:6c:54:69:58:46:94:f8:01:93:3d:5b:9e:e8:
4b:ef:97:80:06:ad:4e:32:4b:0c:ce:17:99:05:78:
68:49:4b:da:8d:10:df:3c:f1:27:3a:93:a2:3f:03:
36:55:87:85:bf:77:f9:96:3b:6c:5f:e3:bd:01:b1:
7c:19:3e:f0:df:fb:27:68:97:12:7a:94:c8:10:11:
e7:ce:f7:b2:85:53:3c:3c:1b:a5:0e:87:2f:f5:74:
d5:1d:4b:de:32:90:3f:45:ed:13:56:97:01:35:40:
69:5f:93:c8:9c:08:40:e3:47:7a:6b:d4:52:ed:a5:
47:da:be:23:40:ec:d8:70:75:76:ae:4a:11:4e:fe:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FD:7C:22:2D:D7:57:6C:31:A5:67:94:76:C6:5A:25:17:8E:E5:30
X509v3 Authority Key Identifier:
keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1688:e400::/39
Signature Algorithm: sha256WithRSAEncryption
7b:72:a4:0e:f5:a5:b1:cb:22:0d:7c:9d:e6:49:4f:54:83:a8:
68:11:74:05:0f:f9:32:3c:b3:11:e9:d2:67:31:f7:7c:38:12:
c3:e1:ba:e0:2c:c4:e6:c3:bd:27:5b:f7:1c:cb:d2:14:33:ad:
64:f6:c7:e8:17:da:e2:38:1d:40:c0:ab:d7:d5:56:38:fe:17:
29:d0:29:64:e1:6a:c6:57:d3:ad:a8:a6:14:73:e3:55:23:aa:
b9:af:3e:73:84:6d:4c:3a:8f:04:71:5a:6e:80:64:6c:7d:d5:
5d:5e:d3:c2:1b:06:ce:76:6c:2a:a0:19:0e:d0:03:ff:b7:36:
3d:98:e6:73:bf:24:0e:55:cd:ad:bc:ae:f5:08:33:5c:54:bd:
15:56:2b:06:c9:71:47:e8:95:ca:a7:4a:54:ce:c6:95:6a:9f:
53:f6:33:5e:90:d0:43:34:f1:bc:10:42:65:ef:bf:5b:98:f1:
f5:5d:fc:8b:b5:f5:99:a7:f8:bd:d7:8d:d1:cc:d5:06:ec:c6:
2a:9d:67:eb:3e:23:db:ba:2e:ab:d9:fb:db:04:dd:d0:72:b1:
ab:ce:8a:80:c4:61:bd:4f:fa:0e:eb:d9:83:46:00:29:96:24:
1b:2d:ee:a2:0a:99:a2:c6:05:1b:56:31:a8:bd:61:1b:96:9c:
da:73:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:40 2025 by rpki-client