This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d313238203d3e20323638373031.roa
File: 323830343a353936633a3a2f33322d313238203d3e20323638373031.roa (raw, json)
Hash identifier: b7CXIsbZNr28fAIIDRDKKYTvdSl4ceaJ4DVvhRxvTsI=
Subject key identifier: 87:52:50:BF:AC:10:3A:D4:07:AE:CB:7E:BD:12:A2:E3:7D:AB:74:4D
Certificate issuer: /CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Certificate serial: 1E9DE47F05E696F9310B32115E96F6EE78F129E6
Authority key identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d313238203d3e20323638373031.roa
Signing time: Thu 06 Nov 2025 17:54:14 +0000
ROA not before: Thu 06 Nov 2025 17:49:14 +0000
ROA not after: Thu 05 Nov 2026 17:54:14 +0000
asID: 268701
IP address blocks: 2804:596c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9d:e4:7f:05:e6:96:f9:31:0b:32:11:5e:96:f6:ee:78:f1:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Validity
Not Before: Nov 6 17:49:14 2025 GMT
Not After : Nov 5 17:54:14 2026 GMT
Subject: CN=875250BFAC103AD407AECB7EBD12A2E37DAB744D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:8c:70:b1:66:34:20:6b:d5:80:ab:ae:2e:
30:a4:ba:59:60:5c:12:cb:56:32:40:15:d2:cb:ce:
bd:1e:fe:7f:6e:5a:1b:3f:fd:7f:e7:4f:f2:b3:5e:
35:20:99:82:93:e6:68:b8:6b:cf:09:a4:2c:77:69:
88:56:f1:12:4d:5f:c6:1b:cb:53:c9:73:b7:49:b7:
31:eb:54:fc:3e:80:9a:ec:ab:a9:bf:43:bc:ed:e5:
30:9e:11:4a:53:73:30:33:15:df:fb:86:ab:bb:dd:
a5:2b:a1:f9:84:fe:47:af:41:7b:a4:69:ba:20:cc:
15:5a:76:e6:6b:fe:d5:b1:f8:10:cc:2d:c2:97:ec:
6b:26:c2:f5:e5:e8:f7:90:1e:15:97:ff:f2:3a:f7:
c1:25:67:f2:06:31:13:11:9f:5d:60:01:86:9d:d7:
87:2e:da:d9:05:92:65:15:ee:ad:13:fc:ba:48:7d:
5d:31:8f:bf:1b:f8:9d:af:64:95:f8:e3:a2:be:b2:
54:ed:af:6c:a0:69:17:55:97:c2:bc:6e:82:02:99:
ed:99:bd:71:97:c0:ec:14:cf:18:5e:45:33:d1:19:
b9:34:70:07:0c:8b:95:38:c3:95:28:7c:6f:81:57:
ac:cc:74:1b:f2:64:35:cb:6b:94:d2:16:8e:ce:4e:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:50:BF:AC:10:3A:D4:07:AE:CB:7E:BD:12:A2:E3:7D:AB:74:4D
X509v3 Authority Key Identifier:
keyid:CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d313238203d3e20323638373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:596c::/32
Signature Algorithm: sha256WithRSAEncryption
93:c8:e3:d4:df:db:3b:fb:aa:b7:b0:03:16:e5:55:72:bb:d3:
72:54:af:37:05:5a:0b:25:dc:fc:6f:8c:36:28:ad:14:e4:91:
16:f4:9a:16:13:c8:ba:7c:47:ca:33:a1:f5:9e:de:9b:69:8f:
25:3c:9f:ce:02:c7:55:6c:85:d2:17:4d:95:dc:17:0a:a2:b7:
a5:56:ec:66:71:47:1f:0c:0f:82:a7:10:f9:39:9b:4f:52:d7:
72:3e:21:c2:2d:f3:19:25:36:b0:b3:47:72:45:07:63:c8:1f:
1e:e4:b9:82:bf:e4:e6:fc:db:bf:ed:54:a6:09:19:15:1e:9d:
1c:1c:63:98:8a:9c:19:8b:30:86:b0:95:c5:54:3f:85:0d:0b:
bb:4b:08:ce:72:00:42:bb:df:23:7d:06:f7:f5:4e:f8:ff:db:
ce:ba:47:b5:9d:12:02:f3:82:17:8c:d7:38:d4:91:af:fd:bd:
b7:bd:f2:6f:cf:c4:fe:0d:bb:0c:46:08:6c:44:d0:ac:00:c6:
b3:16:9a:b2:ec:77:93:de:a9:0c:7c:1d:1d:e7:14:5a:4d:e2:
bd:b2:2f:83:43:0c:1f:02:ed:ad:bb:a0:66:35:43:92:09:32:
77:14:0c:a1:48:53:a3:b3:0a:a7:f2:73:7e:97:22:22:56:0f:
6d:d7:e4:5e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUHp3kfwXmlvkxCzIRXpb27njxKeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E0NkI0MkZCMEJCRjQyOEYzMzMwM0Q5NzA5NTQzNjBG
OTYwQUQyQjAeFw0yNTExMDYxNzQ5MTRaFw0yNjExMDUxNzU0MTRaMDMxMTAvBgNV
BAMTKDg3NTI1MEJGQUMxMDNBRDQwN0FFQ0I3RUJEMTJBMkUzN0RBQjc0NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/IxwsWY0IGvVgKuuLjCkullg
XBLLVjJAFdLLzr0e/n9uWhs//X/nT/KzXjUgmYKT5mi4a88JpCx3aYhW8RJNX8Yb
y1PJc7dJtzHrVPw+gJrsq6m/Q7zt5TCeEUpTczAzFd/7hqu73aUrofmE/kevQXuk
abogzBVaduZr/tWx+BDMLcKX7GsmwvXl6PeQHhWX//I698ElZ/IGMRMRn11gAYad
14cu2tkFkmUV7q0T/LpIfV0xj78b+J2vZJX446K+slTtr2ygaRdVl8K8boICme2Z
vXGXwOwUzxheRTPRGbk0cAcMi5U4w5UofG+BV6zMdBvyZDXLa5TSFo7OTvq3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUh1JQv6wQOtQHrst+vRKi432rdE0wHwYDVR0j
BBgwFoAUyka0L7C79CjzMwPZcJVDYPlgrSswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHB2YTR0UXpIMzZiTFFtYXVzYmd2dk1vVm5rS1FHc2R0QlB4dVBnVWFk
R0YvMC9DQTQ2QjQyRkIwQkJGNDI4RjMzMzAzRDk3MDk1NDM2MEY5NjBBRDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNDZCNDJGQjBCQkY0MjhG
MzMzMDNEOTcwOTU0MzYwRjk2MEFEMkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwdmE0dFF6SDM2YkxRbWF1c2JndnZNb1Zua0tRR3NkdEJQeHVQZ1VhZEdGLzAv
MzIzODMwMzQzYTM1MzkzNjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFlsMA0GCSqGSIb3DQEBCwUAA4IBAQCTyOPU
39s7+6q3sAMW5VVyu9NyVK83BVoLJdz8b4w2KK0U5JEW9JoWE8i6fEfKM6H1nt6b
aY8lPJ/OAsdVbIXSF02V3BcKorelVuxmcUcfDA+CpxD5OZtPUtdyPiHCLfMZJTaw
s0dyRQdjyB8e5LmCv+Tm/Nu/7VSmCRkVHp0cHGOYipwZizCGsJXFVD+FDQu7SwjO
cgBCu98jfQb39U74/9vOuke1nRIC84IXjNc41JGv/b23vfJvz8T+DbsMRghsRNCs
AMazFpqy7HeT3qkMfB0d5xRaTeK9si+DQwwfAu2tu6BmNUOSCTJ3FAyhSFOjswqn
8nN+lyIiVg9t1+Re
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:14 2025 by rpki-client