This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a376530303a3a2f34302d3430203d3e203130383735.roa
File: 323830343a303a376530303a3a2f34302d3430203d3e203130383735.roa (raw, json)
Hash identifier: uq4B//sJ/PVjsG5/BEdU38A6MHLSvY1W1YV58k1ORbE=
Subject key identifier: 47:99:42:ED:29:B7:9C:45:13:A6:84:DD:72:6A:77:87:B5:A7:D4:36
Certificate issuer: /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial: 46B863F35B33EFE77F477228B14835C6518F31BD
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a376530303a3a2f34302d3430203d3e203130383735.roa
Signing time: Tue 20 Jan 2026 13:47:25 +0000
ROA not before: Tue 20 Jan 2026 13:42:25 +0000
ROA not after: Tue 19 Jan 2027 13:47:25 +0000
asID: 10875
IP address blocks: 2804:0:7e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b8:63:f3:5b:33:ef:e7:7f:47:72:28:b1:48:35:c6:51:8f:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Validity
Not Before: Jan 20 13:42:25 2026 GMT
Not After : Jan 19 13:47:25 2027 GMT
Subject: CN=479942ED29B79C4513A684DD726A7787B5A7D436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:2f:f7:67:44:29:7f:cc:62:ca:eb:a4:0c:
60:c2:41:7d:a5:c3:71:91:69:1e:a5:77:9c:a0:30:
8d:83:99:5a:89:ee:31:48:67:a4:e1:ac:a0:d4:da:
5b:32:3a:dc:dc:a3:0c:1b:0b:83:5d:3d:1c:c4:09:
80:fc:46:76:70:d5:2e:1b:60:b0:b6:3d:df:d4:7d:
78:44:c1:e9:d5:da:05:c0:bb:8b:6b:b1:b7:be:7e:
2c:b5:1d:33:74:23:89:e7:17:31:3e:77:b0:cb:99:
e6:12:2f:69:d6:75:c9:c0:27:71:fe:a9:0c:5b:4c:
17:1a:e9:27:57:57:0d:43:8f:5d:35:f5:3b:55:6c:
35:1c:cb:40:39:11:dc:03:58:31:bb:6a:8f:1c:20:
9b:4a:0c:6f:6f:54:70:85:8b:4c:92:41:91:c7:ac:
f1:7f:c2:fb:26:53:f9:b1:34:c9:5d:51:08:e7:69:
22:79:41:a1:80:a6:cf:05:85:c2:78:de:1f:d3:26:
43:3c:d0:b6:87:dc:09:c6:05:2f:23:a1:ea:e9:80:
80:da:02:d0:28:65:f1:50:c5:c3:bf:a1:e8:77:04:
4d:bd:03:33:23:06:c2:10:00:52:e5:76:85:ef:a8:
9c:1d:3d:81:d8:88:16:2a:de:bd:2f:61:35:c6:98:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:99:42:ED:29:B7:9C:45:13:A6:84:DD:72:6A:77:87:B5:A7:D4:36
X509v3 Authority Key Identifier:
keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a376530303a3a2f34302d3430203d3e203130383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:0:7e00::/40
Signature Algorithm: sha256WithRSAEncryption
8a:90:15:1b:d2:6d:48:aa:04:c3:78:d8:71:67:41:7c:d2:65:
a7:40:eb:e7:0f:40:cf:d5:65:70:33:b1:c5:50:1b:41:73:b2:
12:6a:d0:95:bc:b6:07:e7:7e:58:0d:44:f0:3f:4b:1d:e8:44:
0a:04:82:29:a3:d8:6e:a7:b8:a1:32:d6:d6:1f:fe:96:6b:b7:
01:57:25:af:68:5e:b6:2c:00:8e:2e:04:e9:c2:68:5b:7b:18:
78:d3:06:de:de:21:de:ac:f6:96:25:2f:1d:5e:a6:ae:6c:a0:
f5:73:28:89:c8:62:4f:81:bb:ff:12:52:83:b1:13:8c:9c:6a:
72:30:a5:c0:7f:a0:ed:fc:5d:ce:74:0d:6f:72:82:9d:db:21:
31:99:66:a9:79:c2:4a:28:0d:b6:ff:5b:5e:de:bf:2c:7a:c0:
62:86:83:d9:3e:9f:43:34:2e:ed:5d:bf:9f:ed:73:1a:47:84:
97:0a:de:dc:98:af:62:15:c2:88:d2:0a:7f:91:5c:26:13:82:
42:81:8e:1e:dd:d0:2b:78:b5:69:7f:fa:24:6f:86:9b:ff:16:
e4:7f:8c:0f:9e:ba:7f:21:6c:aa:b4:c9:4c:4a:e4:07:23:1a:
e1:51:ce:b6:9c:d8:3e:d6:f0:4c:57:d8:25:b0:d8:fd:48:3f:
f9:48:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:51:31 2026 by rpki-client