This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa
File: 323830343a6431303a3a2f33322d3438203d3e203532353933.roa (raw, json)
Hash identifier: AJVGT2AHk+BWlBh3TWWbSiN2ghlgOHkKS9212HybSw0=
Subject key identifier: B1:89:47:30:AB:95:70:25:E3:91:BD:D9:E6:72:75:68:9F:26:C0:A5
Certificate issuer: /CN=5429A630D95311C5AADAF5AC62BF18BF86863194
Certificate serial: 1F1CBFB5B545D85B725F6E1AF673738BB979C8B2
Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa
Signing time: Thu 20 Nov 2025 20:20:48 +0000
ROA not before: Thu 20 Nov 2025 20:15:48 +0000
ROA not after: Thu 19 Nov 2026 20:20:48 +0000
asID: 52593
IP address blocks: 2804:d10::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl
rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 20:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1c:bf:b5:b5:45:d8:5b:72:5f:6e:1a:f6:73:73:8b:b9:79:c8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194
Validity
Not Before: Nov 20 20:15:48 2025 GMT
Not After : Nov 19 20:20:48 2026 GMT
Subject: CN=B1894730AB957025E391BDD9E67275689F26C0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:e9:17:68:64:66:51:9b:4c:af:70:af:71:
32:a0:a1:22:ab:1c:39:d9:61:36:d1:06:e9:04:dd:
c8:26:1d:21:4e:17:7c:57:85:b9:a9:2a:e4:bd:00:
1b:db:dc:99:e9:10:e7:f4:37:b6:05:73:a8:81:b4:
f8:a3:38:cf:84:88:f8:38:cb:47:b6:a5:f1:ce:ab:
18:1b:4b:51:c1:46:6d:7e:44:2a:c8:9e:2c:f2:eb:
0c:3c:16:e3:0a:bf:99:57:1d:c0:b0:d8:d9:c0:a8:
b9:eb:66:b0:cd:8b:31:85:ab:75:17:fc:94:61:3b:
ba:c5:01:61:fe:b5:52:7d:be:bd:bc:c1:a0:a9:e1:
0a:d1:7b:91:f3:74:69:ac:45:78:6f:28:65:ce:26:
a2:5d:ee:4d:8f:4a:6f:84:b8:98:92:d5:f2:14:d5:
44:3c:69:86:d9:c1:57:0d:e7:49:0e:dc:4b:ca:07:
3c:e1:9c:17:96:08:11:b1:08:6e:ac:7d:1f:17:60:
be:9e:39:bf:dc:52:55:05:49:31:53:4b:84:cd:2c:
57:47:fe:88:13:37:9c:c1:f9:93:58:8e:86:e0:fd:
6a:5f:4a:33:b2:80:5e:17:4c:c0:e7:db:e4:25:ec:
6b:f9:b1:53:15:28:3f:b3:93:ff:b6:27:ff:83:2b:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:47:30:AB:95:70:25:E3:91:BD:D9:E6:72:75:68:9F:26:C0:A5
X509v3 Authority Key Identifier:
keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d10::/32
Signature Algorithm: sha256WithRSAEncryption
91:b1:c4:73:39:f8:23:01:c4:38:fb:7e:26:2a:72:6b:5f:79:
bc:39:d7:0c:9b:2f:3e:4a:47:90:a4:d4:c9:7a:fc:fe:25:39:
de:25:e3:5a:af:a4:e4:60:8d:82:ba:a5:ff:ac:59:e0:49:aa:
34:84:26:ce:25:87:3f:e0:44:65:fc:53:7c:7e:b3:e2:58:61:
87:6e:8e:98:98:06:5e:cc:47:a5:4b:e5:b3:1c:5b:44:4f:39:
88:e6:38:ae:9a:e0:66:a7:80:24:94:cd:4f:4b:94:ab:80:a6:
c1:cb:8c:d0:af:28:e1:b2:dd:83:f1:a9:06:64:21:e9:d8:c7:
4a:af:3d:f8:01:f5:ce:a7:d9:9a:7e:49:ab:c2:15:12:66:14:
41:6f:cd:99:49:68:2f:71:77:4e:0b:15:4b:12:0e:40:09:9b:
af:c4:a4:cb:e5:bf:8a:bb:52:29:bd:01:13:fb:ea:f8:23:17:
21:37:7e:09:78:ea:98:3a:d6:aa:d7:c5:a3:ea:ad:56:04:c5:
a1:71:f9:fa:8e:5f:58:2a:36:de:a5:f6:1f:c1:6a:83:24:36:
88:c1:f7:96:a2:69:c0:3d:a7:a6:bd:51:46:be:30:9f:d9:68:
6f:96:18:95:01:9e:c4:07:41:ba:3d:41:a7:bc:1d:c2:10:55:
48:9d:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:45 2025 by rpki-client