This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa
File: 323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier: MTExD/BJVhtwUW9HRapy/wJptR4BkQBR6k3vM1cRBV4=
Subject key identifier: 89:06:DC:7C:03:85:FC:9A:4B:0D:D4:49:AF:55:CF:C1:20:D1:83:9D
Certificate issuer: /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial: 0E0A0BB9039B2A98FB4A22E3B6C08BE4F938EAAB
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa
Signing time: Tue 20 Jan 2026 19:29:01 +0000
ROA not before: Tue 20 Jan 2026 19:24:01 +0000
ROA not after: Tue 19 Jan 2027 19:29:01 +0000
asID: 270285
IP address blocks: 2804:69b0:50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0a:0b:b9:03:9b:2a:98:fb:4a:22:e3:b6:c0:8b:e4:f9:38:ea:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Validity
Not Before: Jan 20 19:24:01 2026 GMT
Not After : Jan 19 19:29:01 2027 GMT
Subject: CN=8906DC7C0385FC9A4B0DD449AF55CFC120D1839D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:95:96:8c:50:9d:c5:09:85:75:27:c5:2d:
33:38:bc:38:fb:12:7f:e6:c4:fd:66:9c:66:73:0a:
b0:b8:64:17:11:cf:75:3b:94:17:60:88:90:94:d2:
db:19:87:c8:f2:7d:5b:71:70:e7:57:e0:1b:72:2d:
fd:51:63:64:45:34:8d:27:48:9f:df:5a:70:e5:e9:
44:c8:36:00:37:f8:f4:fb:23:c4:2f:bb:1d:2c:a8:
84:1c:c8:f8:93:14:d7:45:00:f6:03:75:67:98:5f:
d1:3e:c5:c3:d6:22:21:41:f4:77:f6:f5:0e:15:bd:
b8:57:10:c4:5a:c2:33:b3:c7:62:f9:8d:0a:d0:66:
e4:80:bb:c0:ac:07:ab:8c:25:45:c3:c3:3d:f6:a4:
12:22:dc:5e:3d:f0:52:84:e4:c0:c7:54:56:69:f4:
f1:f3:fa:f7:07:38:d5:e7:8e:2d:83:e9:e4:23:1c:
43:14:22:82:54:fd:59:18:ea:ef:a4:34:96:6e:1a:
79:da:b8:10:45:5b:0c:b6:7e:6b:06:49:9c:64:da:
a0:a0:47:46:ba:b3:35:01:fd:66:ed:63:7e:d0:4f:
3d:6f:7f:e6:fc:98:dd:e6:9e:da:cb:31:db:25:9b:
8e:26:f1:a4:76:1a:95:4c:82:60:6d:5f:90:76:22:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:DC:7C:03:85:FC:9A:4B:0D:D4:49:AF:55:CF:C1:20:D1:83:9D
X509v3 Authority Key Identifier:
keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:69b0:50::/44
Signature Algorithm: sha256WithRSAEncryption
2d:4a:9b:cf:04:63:5d:96:84:62:58:a1:1e:b5:87:7b:44:e5:
b3:6a:17:96:cd:dd:fe:29:f6:a8:05:41:60:b2:f2:9c:f2:b9:
87:93:1e:b9:e7:8a:2d:b0:f2:ad:4d:3d:09:0a:c7:eb:52:7f:
fc:66:b7:ab:20:88:40:3d:2f:e1:27:48:90:8b:7d:cd:79:87:
2c:80:84:83:2d:e6:26:47:7a:b6:27:30:81:a0:2c:15:c7:cb:
8c:93:90:54:bd:c5:db:3e:76:ca:16:43:34:8f:39:98:33:19:
6f:48:07:0f:e8:a4:dd:cf:06:a5:5d:3d:64:85:73:0e:0d:8d:
50:7a:c4:4a:02:61:6e:90:4b:79:af:96:a8:27:94:94:60:36:
cd:81:80:e2:77:1a:4e:28:3b:96:de:af:a7:bc:07:ea:21:b2:
3e:01:bc:6b:d5:92:d6:fe:0b:5a:e3:58:5e:72:56:38:5d:aa:
da:21:9e:43:e8:22:54:53:05:eb:97:66:bd:60:43:a3:ae:76:
bf:49:7b:23:c0:b0:d2:f5:dc:30:7c:de:ba:86:cc:47:a3:4c:
ef:99:06:7f:97:39:1a:2b:ee:61:6c:8a:1c:5c:92:18:1e:e2:
18:a1:b2:86:39:e1:e0:17:a9:85:0f:ef:ae:36:e8:6f:fe:3e:
37:d4:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:27 2026 by rpki-client