This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a383030303a3a2f33332d3333203d3e20323731353139.roa
File: 323830343a376363633a383030303a3a2f33332d3333203d3e20323731353139.roa (raw, json)
Hash identifier: yQhEfnazKEoMBsOt2FWJuxPi7MmxgkYJ2fMBtMGlVrM=
Subject key identifier: 0F:C7:B8:ED:72:B2:72:B3:63:2A:73:BA:BC:6D:82:2D:D8:DE:45:09
Certificate issuer: /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial: 535D02672AABAAFF06E07CC60F3D2B702565EBEC
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a383030303a3a2f33332d3333203d3e20323731353139.roa
Signing time: Fri 09 Jan 2026 20:00:20 +0000
ROA not before: Fri 09 Jan 2026 19:55:20 +0000
ROA not after: Fri 08 Jan 2027 20:00:20 +0000
asID: 271519
IP address blocks: 2804:7ccc:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:5d:02:67:2a:ab:aa:ff:06:e0:7c:c6:0f:3d:2b:70:25:65:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Validity
Not Before: Jan 9 19:55:20 2026 GMT
Not After : Jan 8 20:00:20 2027 GMT
Subject: CN=0FC7B8ED72B272B3632A73BABC6D822DD8DE4509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:44:02:9a:e0:c4:32:25:2a:74:bf:66:f5:
31:03:2f:07:16:d2:2e:0a:31:b1:73:7d:5b:10:5c:
df:6b:14:31:d0:fe:8f:49:44:d2:04:3b:94:87:fe:
d1:51:e0:e0:72:dc:ff:47:55:70:d7:5d:e1:af:8c:
cd:bc:e8:26:44:62:e0:c4:92:d3:90:a0:42:10:bf:
d0:d0:3a:4e:57:b4:23:8f:e5:f8:dc:bb:07:53:30:
99:27:10:83:26:ad:34:dd:06:7e:8f:11:45:c0:dc:
7b:50:eb:29:95:7e:11:46:9f:ac:46:e8:09:24:4c:
18:cb:52:64:5a:5b:fc:77:f0:d2:6f:6a:15:5b:ca:
67:83:02:d6:91:3e:04:0f:d2:e2:bb:fe:3d:d9:7d:
43:65:ab:16:4a:a1:c0:e6:74:d3:75:db:e6:42:8b:
81:f5:71:99:42:02:74:8a:43:9d:36:6c:2d:03:76:
c1:bb:f9:00:9e:ad:c3:66:fa:44:d8:38:28:e4:4f:
ea:79:45:96:50:1e:1b:0d:f9:ed:09:66:e1:7f:7c:
29:a0:48:9a:55:48:b2:00:21:b8:e8:9b:36:16:17:
d2:20:72:e7:b3:04:11:e0:66:b9:f8:d7:97:30:a5:
c6:7d:f7:bc:8b:8d:8f:d6:58:16:ec:be:a7:9b:0b:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:B8:ED:72:B2:72:B3:63:2A:73:BA:BC:6D:82:2D:D8:DE:45:09
X509v3 Authority Key Identifier:
keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a383030303a3a2f33332d3333203d3e20323731353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ccc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5f:8f:ef:cf:55:5e:5c:8c:31:a4:a3:6e:f7:3c:b9:cc:8c:49:
2d:49:95:57:53:55:39:fd:d4:cb:aa:92:12:07:1e:c0:24:5e:
73:48:2c:c3:cc:a1:af:6f:22:f4:6d:9a:8d:73:1b:8c:6a:ed:
3e:44:a4:b3:40:5f:fd:00:fb:9b:6c:a4:25:9b:7d:a7:39:b4:
3f:04:3e:2f:a6:f1:6e:17:ec:6b:16:b3:33:3a:e0:fa:cd:0a:
ea:c2:ac:e8:08:86:02:39:57:73:6b:cf:8f:4f:5f:3e:42:28:
97:a7:72:7e:23:45:d5:d4:8f:63:59:fd:78:8c:76:ab:39:fc:
eb:5d:e5:29:28:a9:c4:62:4a:e5:78:fa:10:5e:4d:ee:5d:6b:
09:b3:25:15:f4:88:f4:da:b4:27:24:87:4b:a1:8b:79:e4:8d:
92:6d:a9:13:1c:1d:cb:fb:60:f1:80:9f:a1:b4:71:9c:19:95:
27:75:1f:7b:f6:1d:61:45:8f:bc:e5:ef:6f:79:26:43:da:27:
25:26:c7:a6:7d:92:18:6b:4d:fa:84:01:b2:60:7f:5d:bf:3e:
97:1f:6d:56:91:98:63:c4:3b:60:e6:1f:90:d8:18:99:6d:ed:
14:05:6c:05:95:a6:dc:e4:2f:c4:e4:6b:86:e3:71:ef:b4:ac:
58:41:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:44 2026 by rpki-client