This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
File: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (raw, json)
Hash identifier: qHilJkR/mRoxRFLrG5X7mYr1LiQh/kX8KgFrgoJYIx4=
Subject key identifier: C4:06:00:D1:A0:11:D3:54:DA:17:80:56:22:B6:05:07:28:12:FE:B3
Certificate issuer: /CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Certificate serial: 3375CFD01D0D88B6C50EDFB2BC224343FC74E63D
Authority key identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
Signing time: Thu 06 Nov 2025 12:51:22 +0000
ROA not before: Thu 06 Nov 2025 12:46:22 +0000
ROA not after: Thu 05 Nov 2026 12:51:22 +0000
asID: 271428
IP address blocks: 2804:7b60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 05:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:75:cf:d0:1d:0d:88:b6:c5:0e:df:b2:bc:22:43:43:fc:74:e6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Validity
Not Before: Nov 6 12:46:22 2025 GMT
Not After : Nov 5 12:51:22 2026 GMT
Subject: CN=C40600D1A011D354DA17805622B605072812FEB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:e2:ef:82:b5:32:59:8d:1a:2d:ea:02:b0:
e9:38:18:3a:5c:1c:82:f7:70:cf:88:42:b6:47:de:
87:17:ef:68:b9:7a:31:d4:71:e0:a9:49:74:d7:0e:
f3:f9:ce:eb:00:84:cf:e2:3d:dc:12:f8:63:43:9e:
22:0d:62:0c:9b:7e:ea:58:33:79:43:34:93:82:c7:
39:f2:e5:59:b5:79:0d:1d:56:db:81:3d:2c:dd:3c:
1e:c8:7b:18:4e:eb:71:f4:43:e0:96:26:20:db:c7:
2e:f8:8f:89:9f:01:45:16:b2:6c:49:58:d5:ad:65:
ab:11:29:9f:3f:85:7c:b3:91:59:c7:96:85:36:2d:
81:8d:a6:91:74:1a:b4:4f:a9:f8:91:78:a9:17:ec:
e7:ff:30:ac:aa:bf:99:d5:56:e2:0d:59:c3:14:7d:
fd:89:26:b2:46:cd:6f:48:05:65:c7:16:2d:13:f3:
1c:48:1c:76:35:67:32:bc:f0:ee:bf:84:bd:d4:8e:
2d:96:f1:2d:26:ba:36:1b:5f:f6:9c:e5:bd:09:36:
5f:98:35:cc:c2:44:73:0d:3b:4a:43:a6:8e:2e:1b:
54:5d:d6:3b:80:af:2b:b9:28:90:22:26:8d:54:36:
93:a0:b2:ae:ce:e0:2c:5a:aa:2f:09:23:61:1d:d7:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:00:D1:A0:11:D3:54:DA:17:80:56:22:B6:05:07:28:12:FE:B3
X509v3 Authority Key Identifier:
keyid:D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7b60::/32
Signature Algorithm: sha256WithRSAEncryption
0b:9f:2e:d7:d5:0d:6b:83:41:03:78:6e:02:24:93:21:8f:2c:
d1:57:e0:87:29:75:31:3b:0b:eb:1d:55:ee:30:46:c0:dd:fd:
30:14:97:77:a2:61:48:2e:41:2e:eb:16:f1:5e:82:bd:7b:91:
b2:1e:9f:b9:e0:5f:71:c7:cb:ce:e7:da:f4:f3:6b:fc:5c:b1:
0e:dc:4f:99:22:1f:44:d1:7b:09:e7:34:94:e2:cf:c7:8a:2a:
dc:76:73:d5:ab:90:29:12:0d:1a:f5:9e:e4:69:41:c9:75:4e:
c6:ad:ae:1d:ee:df:fb:67:10:89:fe:3d:a1:38:13:1c:b8:44:
44:75:7c:52:1f:a3:ce:ee:7e:af:89:27:a9:2e:08:c3:9c:b4:
f5:d2:3e:52:0b:f9:60:64:0f:34:1c:da:ec:f0:c1:cf:ec:84:
1b:e1:e1:3e:a6:1d:db:d6:1b:70:08:d4:88:68:7c:b7:07:41:
6b:81:ed:7b:60:a0:8d:d3:50:0a:c9:b6:cc:02:53:eb:c1:5e:
75:bf:1f:a6:f9:c1:b5:b1:b5:fc:04:2e:9c:ca:5f:cd:45:7c:
1b:08:db:e3:e8:b4:16:d1:c2:f8:81:c9:77:4a:d1:5c:7c:01:
a1:87:e3:a5:8a:46:6a:b7:80:c8:69:1b:34:00:f1:42:b2:91:
f6:99:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:55:21 2025 by rpki-client