This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a36303a3a2f34342d3434203d3e20323730323835.roa
File: 323830343a363962303a36303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier: 92KzoM/WevhRJZeT9qr/O24XmKboObi+ThOResoNsM8=
Subject key identifier: E8:1D:5C:9A:31:CB:14:6E:95:0F:24:C1:B8:FD:80:C6:CC:8A:45:22
Certificate issuer: /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial: 57665FC14AD111579B5E9F0290E1FF4F57A50B9E
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a36303a3a2f34342d3434203d3e20323730323835.roa
Signing time: Tue 20 Jan 2026 19:29:03 +0000
ROA not before: Tue 20 Jan 2026 19:24:03 +0000
ROA not after: Tue 19 Jan 2027 19:29:03 +0000
asID: 270285
IP address blocks: 2804:69b0:60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:66:5f:c1:4a:d1:11:57:9b:5e:9f:02:90:e1:ff:4f:57:a5:0b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Validity
Not Before: Jan 20 19:24:03 2026 GMT
Not After : Jan 19 19:29:03 2027 GMT
Subject: CN=E81D5C9A31CB146E950F24C1B8FD80C6CC8A4522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:f7:6f:e7:14:72:08:30:1a:13:ff:d0:c7:
54:b1:5d:d8:05:92:04:eb:9b:47:d7:1a:11:ff:c0:
51:67:b0:f0:3e:4e:f4:f0:2c:a4:a8:5f:a4:a3:d4:
e9:b9:d9:bb:59:ee:3b:72:62:f6:b6:3d:87:75:2f:
9a:2a:cf:9c:8c:cd:de:cb:9f:c5:cf:56:ca:46:84:
7e:38:2e:05:d2:96:5e:20:9b:4d:7e:2e:e0:43:3d:
0f:a9:c3:1d:61:81:1c:09:31:7b:dc:db:eb:89:89:
c7:52:b1:4c:b8:57:46:96:3e:fe:79:22:99:89:54:
f5:bd:60:2b:da:b7:2e:cd:9e:9d:35:2c:64:f6:76:
2e:ba:84:a1:c9:81:23:a9:fa:2e:09:57:33:b7:99:
27:ea:ea:44:f5:03:63:6f:dd:7b:84:d6:a1:9b:f2:
af:b3:9a:5e:d7:b7:88:35:6e:50:6b:03:fa:cd:0e:
88:4b:d9:4c:1a:e6:96:11:91:2e:ab:cc:e4:43:1c:
fb:5c:aa:5d:87:26:29:31:9a:5c:2c:bd:2c:99:c2:
3b:84:22:aa:64:ff:8f:65:e5:fe:35:7f:e2:f4:ca:
66:22:5b:33:c0:70:ac:a3:a3:f9:13:49:c2:48:94:
47:38:b9:b3:9d:9e:9e:16:f8:5f:f5:ce:d5:e5:8b:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:5C:9A:31:CB:14:6E:95:0F:24:C1:B8:FD:80:C6:CC:8A:45:22
X509v3 Authority Key Identifier:
keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a36303a3a2f34342d3434203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:69b0:60::/44
Signature Algorithm: sha256WithRSAEncryption
d8:33:90:f5:c2:7a:2c:a0:26:bb:30:29:70:6b:30:99:c9:f7:
5b:34:ea:62:e9:f6:6f:05:68:df:e8:36:b6:aa:ce:11:1c:ff:
bf:a8:e5:ae:53:30:63:ee:ab:63:c5:88:93:4b:73:b6:95:07:
df:b2:e3:fa:36:46:d6:2d:6f:a3:02:ce:89:ae:37:53:c2:66:
f5:c2:b7:1d:e0:6b:65:09:8d:12:72:c2:f6:01:50:32:15:10:
cd:63:3e:48:30:5c:95:25:a4:81:c3:19:20:fb:3a:93:71:cf:
10:a0:78:ed:94:6e:0b:cf:d9:75:b5:4a:79:c3:35:99:75:37:
97:d1:d4:26:f7:10:c0:f7:18:96:d4:2b:4d:65:44:7d:f5:10:
34:8d:fd:8b:4e:26:92:de:f1:00:a7:17:71:5d:f0:bd:67:2d:
4a:5b:bc:c4:a9:a3:49:b0:96:50:d5:ed:3d:13:9e:5b:81:5f:
d5:41:38:10:45:51:38:88:f4:2f:9e:6d:42:79:1d:0e:0c:0c:
89:04:24:92:1a:1b:fb:78:bf:30:81:86:37:94:08:e5:86:c1:
a8:06:96:24:69:6d:4e:8e:dc:15:71:c3:2c:44:eb:d8:7b:b9:
db:98:8a:1e:a1:a4:b9:a4:bf:12:4c:a9:83:48:18:80:20:71:
38:56:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:26 2026 by rpki-client