This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a3a2f33322d3438203d3e20323634313639.roa
File: 323830343a323338633a3a2f33322d3438203d3e20323634313639.roa (raw, json)
Hash identifier: zK8QpmnF9XjigxGX6mlomJ+xQ+8xIyF3RS3NnMh9vew=
Subject key identifier: C0:E0:5B:7F:F2:13:47:59:71:C4:30:E2:5D:E0:A4:51:3D:23:2A:CF
Certificate issuer: /CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240
Certificate serial: 0B96A4F37CC2CDFD8ADBC46CE7E681E0196189DE
Authority key identifier: C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a3a2f33322d3438203d3e20323634313639.roa
Signing time: Mon 12 Jan 2026 18:01:17 +0000
ROA not before: Mon 12 Jan 2026 17:56:17 +0000
ROA not after: Mon 11 Jan 2027 18:01:17 +0000
asID: 264169
IP address blocks: 2804:238c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl
rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 15:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:96:a4:f3:7c:c2:cd:fd:8a:db:c4:6c:e7:e6:81:e0:19:61:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240
Validity
Not Before: Jan 12 17:56:17 2026 GMT
Not After : Jan 11 18:01:17 2027 GMT
Subject: CN=C0E05B7FF213475971C430E25DE0A4513D232ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:f2:a3:3c:e8:ac:cb:4a:58:65:d3:fb:66:
ac:31:e6:dd:01:37:c3:1d:ce:18:6b:6e:dc:e5:95:
53:1c:e4:71:ac:2c:c1:7d:ae:0e:a3:f8:b1:d6:84:
a8:bc:b5:6d:ce:05:be:b6:71:39:cb:24:20:ca:11:
dd:68:66:e1:7f:8a:91:75:73:ad:93:b0:39:2f:1c:
67:91:26:bf:e1:a5:c5:e8:39:e4:30:5b:ca:7c:92:
32:ea:e9:29:26:f6:06:de:5c:3c:47:08:01:c0:86:
e2:9d:ac:8b:74:91:de:bd:17:ea:96:12:6d:f8:d8:
40:72:2a:80:65:ee:eb:50:d2:97:19:5f:c8:68:48:
e4:2c:bb:d8:dc:9c:e6:55:7f:49:a7:a1:0b:b8:31:
c7:e0:51:c6:4a:e9:c1:cf:a2:37:b3:7c:16:d9:be:
bd:a9:ed:77:ed:86:c9:01:cd:18:2d:c2:a4:a8:c6:
33:ca:71:73:8a:d2:22:26:e2:ce:69:91:fb:bb:46:
10:bb:5b:be:af:e4:1e:28:e1:6f:96:d5:ab:38:5a:
ab:7e:bc:e8:26:e7:32:e3:91:b9:a0:38:89:2e:e3:
64:8f:0b:8b:44:f9:7d:85:b4:74:08:66:13:73:01:
e4:3c:e2:76:a5:f2:0a:5c:69:da:58:76:51:05:b1:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:5B:7F:F2:13:47:59:71:C4:30:E2:5D:E0:A4:51:3D:23:2A:CF
X509v3 Authority Key Identifier:
keyid:C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a3a2f33322d3438203d3e20323634313639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:238c::/32
Signature Algorithm: sha256WithRSAEncryption
a7:e1:22:be:ff:71:93:5d:bd:8f:60:0d:b4:a5:63:27:e3:40:
ad:5e:15:7d:1d:4d:8c:96:06:fa:c3:50:96:37:bc:e6:c4:6f:
5d:73:18:51:cf:14:9f:e0:4c:1f:f2:93:37:37:55:50:99:54:
a4:9d:4d:b9:50:0b:08:d9:16:20:80:1d:4b:c4:c0:f0:53:5c:
b7:77:0d:b5:37:b2:be:84:69:f4:97:4d:65:83:e0:9d:6e:60:
20:be:0c:15:5b:b4:a2:e9:b5:63:52:36:cb:fe:71:43:26:ce:
e2:69:70:68:42:83:3b:0d:1c:5f:42:07:a4:9e:b1:f5:d4:c8:
38:8d:42:a7:00:f9:8f:c0:21:50:19:81:a0:a0:b8:ef:d2:df:
c3:1e:a6:88:ef:1b:ac:a6:c6:8a:fe:e1:01:dd:68:69:94:c4:
4e:26:0a:cb:6a:f5:4c:27:3f:7b:69:1c:41:ad:2c:69:55:b0:
c3:19:86:ae:2a:5e:4d:48:24:29:ca:b6:01:5e:14:f6:da:1c:
78:ad:b4:52:ee:56:bf:ee:6e:2f:45:04:bd:17:48:27:da:29:
44:76:cb:28:ad:93:8d:37:d2:32:e5:f5:66:a7:15:ac:a9:aa:
45:86:de:d4:c5:23:d8:9b:76:69:27:c1:cc:5d:40:a6:95:0b:
75:27:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:45:04 2026 by rpki-client