This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
File: 323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier: hGNofAUX0GS2a+RZqDeQNmF/OrHWb27oTgu9mUX2C/M=
Subject key identifier: 1A:DA:27:A7:2C:99:26:FD:8C:93:F0:15:D6:0D:F6:E3:E1:EB:49:7E
Certificate issuer: /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial: 27D88994067EBF3AADCA0C463063936132A798F6
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
Signing time: Tue 20 Jan 2026 19:29:00 +0000
ROA not before: Tue 20 Jan 2026 19:24:00 +0000
ROA not after: Tue 19 Jan 2027 19:29:00 +0000
asID: 270285
IP address blocks: 2804:69b0:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d8:89:94:06:7e:bf:3a:ad:ca:0c:46:30:63:93:61:32:a7:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Validity
Not Before: Jan 20 19:24:00 2026 GMT
Not After : Jan 19 19:29:00 2027 GMT
Subject: CN=1ADA27A72C9926FD8C93F015D60DF6E3E1EB497E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:ac:a3:d8:f8:8e:2f:8f:93:9c:8e:0c:8e:
e6:cb:ef:80:a8:d0:1e:54:f2:14:21:be:5c:aa:a1:
67:66:d3:3d:a3:a1:f2:85:ef:f9:f9:21:50:f8:27:
c6:b7:ed:82:97:46:5f:31:10:42:b8:06:16:11:19:
5b:74:6c:e5:40:e9:bc:8a:e4:7b:20:de:c0:5c:1f:
67:4c:1d:48:5d:df:00:c0:ac:d1:26:66:b4:a9:7f:
a2:39:84:30:1e:a3:26:47:16:2f:9c:76:f2:72:7b:
a4:97:39:7e:e9:a8:2e:88:34:a1:31:1d:ac:ca:b6:
a3:9e:86:30:ea:97:02:a6:b5:c2:d0:c2:13:12:15:
a4:c2:4b:e0:b1:9a:7f:55:78:7b:b2:bb:ef:88:e4:
63:09:ef:78:6c:80:2b:6f:26:4a:e1:63:7a:c4:88:
9d:ab:e4:e3:c8:a7:23:fd:27:68:9f:9f:7d:00:1d:
ff:c5:2c:c3:9d:91:99:9d:39:a2:0d:27:cd:e9:a5:
db:9b:c9:74:64:14:c8:34:75:12:9d:c5:4d:33:b9:
34:d0:a2:8e:ff:84:70:f0:af:13:9d:bd:0e:0c:43:
fb:cd:15:b8:5c:0c:c6:5b:f3:1d:5b:65:e5:b6:10:
76:67:85:a8:57:11:a0:fa:ed:69:8d:e9:4a:2a:d0:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:27:A7:2C:99:26:FD:8C:93:F0:15:D6:0D:F6:E3:E1:EB:49:7E
X509v3 Authority Key Identifier:
keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:69b0:40::/44
Signature Algorithm: sha256WithRSAEncryption
c9:df:4c:9c:99:1e:1f:fd:36:c3:fc:03:94:68:79:73:1e:6a:
0b:4c:f3:1e:da:a0:83:01:03:23:df:e4:e1:48:10:e1:f9:35:
12:45:2c:c6:7d:97:9c:55:11:f3:ae:9b:ea:f7:eb:d0:45:7a:
b1:4b:fe:f6:3f:47:e1:39:16:c9:a1:b4:5c:64:ff:55:27:3c:
a8:10:fa:58:3a:73:94:12:b2:83:e2:c8:96:d2:92:0b:4d:2d:
ad:60:a1:20:cd:21:b8:f0:3d:b5:fd:00:68:b7:81:b0:26:43:
98:62:e3:52:fc:4e:d9:6d:c6:cb:e5:1a:60:66:58:60:48:67:
7b:3b:d7:64:5a:a3:56:de:66:fd:41:5a:71:2c:37:3b:68:fc:
8a:6f:ce:f5:eb:8b:b3:ce:6a:c6:0b:c5:3d:f8:94:eb:93:55:
cf:b3:dc:a0:2a:f5:a4:e7:5e:75:77:18:b4:fb:ad:fa:49:23:
18:cc:aa:fe:51:55:87:c8:bd:96:fe:fe:9c:2f:7e:ba:92:c7:
eb:02:89:a6:6d:f5:90:8d:68:d3:6e:33:f8:22:34:62:1a:9b:
b8:c0:40:6f:b1:bd:e6:a6:6d:40:d8:bf:a9:50:c5:f7:db:5f:
6e:30:d7:50:a7:ec:1c:d2:67:cd:8c:e7:89:6e:14:50:32:eb:
59:2c:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:25 2026 by rpki-client