This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33322d313238203d3e20323733353232.roa
File: 323830343a386665633a3a2f33322d313238203d3e20323733353232.roa (raw, json)
Hash identifier: CH0c6KD5vS7JIe2oz9tLcd1EbDYa03o+9DuukSxwopY=
Subject key identifier: A2:57:15:CB:06:6B:F4:C6:28:3F:9A:3D:BC:64:DE:75:58:39:78:87
Certificate issuer: /CN=A533BF31ED7FE26A041EB2260858A0F3C9C427A9
Certificate serial: 6E723206B30D761640429EE6B02E86DD813CD16A
Authority key identifier: A5:33:BF:31:ED:7F:E2:6A:04:1E:B2:26:08:58:A0:F3:C9:C4:27:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33322d313238203d3e20323733353232.roa
Signing time: Mon 01 Dec 2025 23:22:00 +0000
ROA not before: Mon 01 Dec 2025 23:17:00 +0000
ROA not after: Mon 30 Nov 2026 23:22:00 +0000
asID: 273522
IP address blocks: 2804:8fec::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.crl
rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 10:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:72:32:06:b3:0d:76:16:40:42:9e:e6:b0:2e:86:dd:81:3c:d1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A533BF31ED7FE26A041EB2260858A0F3C9C427A9
Validity
Not Before: Dec 1 23:17:00 2025 GMT
Not After : Nov 30 23:22:00 2026 GMT
Subject: CN=A25715CB066BF4C6283F9A3DBC64DE7558397887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:fb:07:b3:4f:c6:6f:b7:35:b2:9d:bc:86:
23:8b:ec:e2:11:dd:5f:46:b0:96:f1:64:34:81:75:
28:1a:cd:fa:dc:a3:bb:48:55:86:f6:8e:81:2e:aa:
5c:42:70:d1:9c:61:99:cc:33:be:24:c7:13:c8:33:
ad:12:f0:63:02:66:b4:40:df:ca:5c:eb:43:fa:71:
d0:83:8b:2e:29:a9:85:81:eb:b1:43:f6:30:65:23:
eb:8c:6a:20:ba:26:e5:1d:2e:24:eb:9f:bf:25:11:
f6:dd:ac:bf:d2:bf:68:26:e2:82:c1:e2:e4:c0:da:
f1:16:45:28:d2:60:b4:a5:6e:f6:f4:b1:70:fc:f3:
9e:c3:47:27:7e:0a:86:1d:c5:ba:b5:b5:cc:82:d5:
1d:35:05:26:25:df:93:5d:fe:17:76:ce:ee:41:85:
21:70:f5:03:30:46:45:f5:3e:c7:25:91:01:fe:92:
2e:b0:53:e0:2a:b1:d2:48:a9:fd:99:97:8f:06:fc:
de:e6:2e:5b:c5:d4:85:fb:01:6f:e0:62:c0:99:e2:
12:6d:52:55:be:52:d0:53:5b:31:a2:ee:09:20:b4:
ac:bc:05:ca:aa:3e:25:43:9c:26:cb:42:59:08:a0:
e3:f3:b8:c1:e9:2b:27:35:c2:2c:8d:35:68:66:6b:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:57:15:CB:06:6B:F4:C6:28:3F:9A:3D:BC:64:DE:75:58:39:78:87
X509v3 Authority Key Identifier:
keyid:A5:33:BF:31:ED:7F:E2:6A:04:1E:B2:26:08:58:A0:F3:C9:C4:27:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33322d313238203d3e20323733353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8fec::/32
Signature Algorithm: sha256WithRSAEncryption
12:b4:38:dd:e0:21:23:cd:49:4c:af:e4:94:a5:da:af:ef:17:
48:19:9d:77:a0:a0:34:4f:b4:99:e4:4e:92:21:ee:df:75:79:
aa:c0:48:b2:10:d2:47:5d:19:2d:63:a4:a8:53:6d:f4:30:14:
7a:f7:7d:1c:e9:0a:a7:13:f3:c2:42:e8:0d:3a:55:1a:42:a1:
54:cb:41:cf:a5:45:e2:76:5a:40:3c:60:4b:02:3b:22:b6:da:
62:0b:de:f8:5d:3b:e6:50:6b:53:f0:02:8a:93:52:b5:61:2a:
b8:48:55:a2:13:1e:ae:02:a6:3b:69:af:5e:09:00:46:10:aa:
0e:c4:6c:c6:98:fe:ce:aa:f9:29:74:76:e2:00:f5:73:f2:a2:
aa:cf:53:94:4e:40:72:53:27:02:2c:0e:23:11:d7:01:cc:ad:
a8:f0:26:21:61:3a:66:69:df:be:fe:94:3a:fe:e5:eb:b4:ed:
9b:e1:dc:66:9c:ef:f3:a6:ab:ea:c1:7f:af:21:c5:4b:5b:b4:
b6:48:8a:3c:93:fb:8a:fa:03:e0:c0:1e:ae:6d:19:d6:1b:33:
1f:b8:46:df:f1:8e:d3:83:e7:8a:9d:00:ac:61:81:fb:62:bc:
3a:88:94:49:c2:ac:7f:18:62:4c:7c:a4:2f:8d:ad:d5:f9:4a:
c7:89:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:19 2025 by rpki-client