This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa
File: 323830343a333964633a3a2f33322d3438203d3e20323636303535.roa (raw, json)
Hash identifier: 4dvfmTkc7ov6mnCdXPO0waoZQ9/wpf26FI+tsEHj1RM=
Subject key identifier: 74:58:4B:1F:76:07:E7:1E:B1:19:53:CE:1C:C2:9E:2D:32:42:1C:28
Certificate issuer: /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Certificate serial: 3AD971D53DBF7B1772AC981B23E7A55006A119A7
Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa
Signing time: Sat 22 Nov 2025 16:21:00 +0000
ROA not before: Sat 22 Nov 2025 16:16:00 +0000
ROA not after: Sat 21 Nov 2026 16:21:00 +0000
asID: 266055
IP address blocks: 2804:39dc::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl
rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 18:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d9:71:d5:3d:bf:7b:17:72:ac:98:1b:23:e7:a5:50:06:a1:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Validity
Not Before: Nov 22 16:16:00 2025 GMT
Not After : Nov 21 16:21:00 2026 GMT
Subject: CN=74584B1F7607E71EB11953CE1CC29E2D32421C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:82:ef:37:d8:69:8c:11:23:fa:03:7a:f8:
f2:fe:28:15:1e:11:5c:cc:07:61:4d:8c:b7:d8:09:
66:3c:65:49:52:9e:9a:e9:c5:94:c8:ae:85:d3:df:
19:04:7b:3a:11:6a:e9:1a:be:1f:ff:41:00:42:d7:
c0:13:0d:91:bc:a6:1d:d1:1e:d5:b3:5a:6f:2f:ab:
41:8f:28:80:ef:9e:0d:86:76:b7:0e:8e:58:a0:ca:
5b:52:92:3a:dc:a3:e2:84:bf:0e:3b:c0:7e:37:89:
24:ad:e7:ba:80:5e:95:56:03:44:b7:c8:d4:84:0a:
6c:ce:05:82:d2:d7:a1:16:a9:43:f3:73:e2:c5:32:
68:80:6d:7b:0c:42:88:c2:eb:c8:53:fb:81:d7:67:
9e:a9:eb:a3:e1:00:b1:8f:f5:93:4c:2b:4a:f0:06:
1d:da:b7:d7:22:ce:a9:d0:df:17:98:21:90:22:cb:
c3:0a:e0:af:73:c2:64:f3:ab:69:be:b4:63:78:f4:
a6:f0:47:96:32:64:ad:2b:8c:1e:ee:47:3a:0b:66:
10:0c:da:3e:27:ec:4f:7d:e3:f0:ff:82:76:be:a1:
78:97:14:76:7a:04:3e:26:03:ea:2e:8d:67:8f:90:
be:c6:4b:27:77:4e:92:28:45:2b:4c:2d:fd:8e:6d:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:4B:1F:76:07:E7:1E:B1:19:53:CE:1C:C2:9E:2D:32:42:1C:28
X509v3 Authority Key Identifier:
keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:39dc::/32
Signature Algorithm: sha256WithRSAEncryption
81:e3:c7:67:ac:1a:af:88:75:d4:29:93:be:56:7a:1d:d4:d7:
4b:5c:7a:db:2c:5c:8a:86:c4:8a:ee:ba:8d:97:f0:f4:8e:e0:
70:4e:5d:01:92:57:01:17:10:90:39:62:c8:a1:ce:b1:e4:32:
51:48:a4:54:b9:82:00:fc:69:4d:24:61:89:3b:4c:e4:aa:3c:
97:f3:02:6e:53:6b:27:62:95:a4:02:73:c7:de:4c:a8:a5:37:
4b:84:48:8d:12:18:a3:d0:0b:3e:e8:9e:d4:7f:fc:1b:72:72:
bf:c4:9f:fe:23:eb:fa:e5:76:14:02:b4:29:bd:db:cf:04:a6:
75:53:f1:60:fe:94:59:10:20:88:68:a1:71:6b:8e:8f:ef:b0:
aa:1a:da:27:e9:a5:92:3b:de:3d:ef:f6:35:b0:97:d2:c4:9d:
23:bf:f6:c1:0f:41:09:bc:3f:dc:65:64:30:80:f5:c7:d7:6b:
b6:8d:a4:5c:7d:0e:6f:f3:26:38:70:9e:a8:b0:60:8a:cc:a1:
64:68:19:e7:69:53:da:1e:ab:e1:a9:1e:6a:91:4f:49:1d:1f:
04:14:16:4a:c0:b1:29:a1:de:24:d8:a8:3a:7a:5d:5b:7b:fe:
10:8b:a4:9c:60:5c:bc:01:2a:f7:92:78:f4:0f:a3:d8:52:12:
1d:d1:25:c2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOtlx1T2/exdyrJgbI+elUAahGacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2NEQxN0ExREU2NThGMjVGQTBFQjc3NzNEQTdGNkI0
MUU1MkZEMDAeFw0yNTExMjIxNjE2MDBaFw0yNjExMjExNjIxMDBaMDMxMTAvBgNV
BAMTKDc0NTg0QjFGNzYwN0U3MUVCMTE5NTNDRTFDQzI5RTJEMzI0MjFDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftILvN9hpjBEj+gN6+PL+KBUe
EVzMB2FNjLfYCWY8ZUlSnprpxZTIroXT3xkEezoRaukavh//QQBC18ATDZG8ph3R
HtWzWm8vq0GPKIDvng2GdrcOjligyltSkjrco+KEvw47wH43iSSt57qAXpVWA0S3
yNSECmzOBYLS16EWqUPzc+LFMmiAbXsMQojC68hT+4HXZ56p66PhALGP9ZNMK0rw
Bh3at9cizqnQ3xeYIZAiy8MK4K9zwmTzq2m+tGN49KbwR5YyZK0rjB7uRzoLZhAM
2j4n7E994/D/gna+oXiXFHZ6BD4mA+oujWePkL7GSyd3TpIoRStMLf2ObYnrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdFhLH3YH5x6xGVPOHMKeLTJCHCgwHwYDVR0j
BBgwFoAUImTReh3mWPJfoOt3c9p/a0HlL9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFB3MjQ5M1pHM2ExN1BtZFdXYVNDdTFHNjJ3SjM2TGZ6VnpZS3haVVJi
dEovMC8yMjY0RDE3QTFERTY1OEYyNUZBMEVCNzc3M0RBN0Y2QjQxRTUyRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNjREMTdBMURFNjU4RjI1
RkEwRUI3NzczREE3RjZCNDFFNTJGRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhQdzI0OTNaRzNhMTdQbWRXV2FTQ3UxRzYyd0ozNkxmelZ6WUt4WlVSYnRKLzAv
MzIzODMwMzQzYTMzMzk2NDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ53DANBgkqhkiG9w0BAQsFAAOCAQEAgePHZ6wa
r4h11CmTvlZ6HdTXS1x62yxciobEiu66jZfw9I7gcE5dAZJXARcQkDliyKHOseQy
UUikVLmCAPxpTSRhiTtM5Ko8l/MCblNrJ2KVpAJzx95MqKU3S4RIjRIYo9ALPuie
1H/8G3Jyv8Sf/iPr+uV2FAK0Kb3bzwSmdVPxYP6UWRAgiGihcWuOj++wqhraJ+ml
kjvePe/2NbCX0sSdI7/2wQ9BCbw/3GVkMID1x9drto2kXH0Ob/MmOHCeqLBgisyh
ZGgZ52lT2h6r4akeapFPSR0fBBQWSsCxKaHeJNioOnpdW3v+EIuknGBcvAEq95J4
9A+j2FISHdElwg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:32 2025 by rpki-client