This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a383030303a3a2f33342d3334203d3e20323731353139.roa
File: 323830343a376363633a383030303a3a2f33342d3334203d3e20323731353139.roa (raw, json)
Hash identifier: 9nmPGF6oBJdNmT9ZJJJc2RnfHP0bUJsGlYJE2BceREg=
Subject key identifier: 76:EB:60:CD:0A:51:94:C5:8F:6B:92:8F:28:B9:EA:80:B7:D9:8F:2D
Certificate issuer: /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial: 31D48060252173CAD4D3E1A99010E8163DC6D4D4
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a383030303a3a2f33342d3334203d3e20323731353139.roa
Signing time: Fri 09 Jan 2026 20:00:20 +0000
ROA not before: Fri 09 Jan 2026 19:55:20 +0000
ROA not after: Fri 08 Jan 2027 20:00:20 +0000
asID: 271519
IP address blocks: 2804:7ccc:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d4:80:60:25:21:73:ca:d4:d3:e1:a9:90:10:e8:16:3d:c6:d4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Validity
Not Before: Jan 9 19:55:20 2026 GMT
Not After : Jan 8 20:00:20 2027 GMT
Subject: CN=76EB60CD0A5194C58F6B928F28B9EA80B7D98F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:c5:32:73:c1:aa:99:2a:81:05:74:7d:7c:
04:b5:4d:65:f2:85:1d:0b:e3:a7:c5:fb:a0:c4:10:
39:8c:a3:36:62:40:00:e7:f6:44:f8:6f:d7:b5:9c:
20:00:c7:14:7e:ec:9d:8d:e8:56:c0:81:01:6e:ac:
05:27:99:f2:04:b7:c8:0d:e6:a3:4e:ad:68:04:8c:
2b:a4:94:f0:de:26:d2:54:f4:6d:37:f7:cb:37:fe:
ca:e0:e9:95:7a:68:6f:54:55:a8:4d:ee:f3:2b:60:
6e:c8:b2:38:cd:bb:c3:01:b7:fd:81:4a:70:8e:ea:
69:8c:dc:4a:27:4c:2a:46:52:05:ea:f1:85:b7:ea:
af:eb:54:ef:60:cc:c7:f1:8b:49:e4:88:99:7e:db:
e1:bf:4d:4e:5e:ff:66:ee:f2:1e:0a:b6:48:e5:ba:
e4:c5:2c:e0:bc:0b:6e:e5:1e:6e:5f:b5:d8:50:9b:
87:00:cc:cf:f8:bb:85:8b:18:3c:74:64:9a:23:7e:
28:ce:6b:a1:0b:bd:58:66:5d:fe:0d:95:22:fe:78:
12:6b:66:0f:ac:87:4e:32:67:fa:7d:74:dd:b6:24:
b2:4c:3d:db:cd:6a:7e:57:a6:b1:95:fc:03:a0:45:
e4:c7:58:1b:bf:5e:7d:87:b3:41:63:74:85:f3:41:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:60:CD:0A:51:94:C5:8F:6B:92:8F:28:B9:EA:80:B7:D9:8F:2D
X509v3 Authority Key Identifier:
keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a383030303a3a2f33342d3334203d3e20323731353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ccc:8000::/34
Signature Algorithm: sha256WithRSAEncryption
1f:78:b0:b6:0c:6b:e0:87:b2:5b:67:c8:69:cb:68:0c:57:1a:
55:e9:b6:7c:64:93:8c:84:89:bd:80:9a:6d:2c:e0:86:a4:14:
b3:6d:8e:3a:93:d2:c9:52:7d:a7:d8:5a:b8:36:05:bd:7c:64:
57:6c:de:d1:55:23:37:42:bd:78:f8:26:29:d7:65:7b:8d:a2:
de:e3:a5:5f:5b:a3:0c:1a:98:ce:d0:35:4d:4a:ed:48:15:d5:
38:8e:8f:91:e7:ab:eb:05:85:49:c1:1b:0b:7d:d2:a4:57:b9:
73:a9:ac:12:ab:9f:3a:b7:90:29:4a:c2:d0:b1:2f:13:5a:5e:
fb:d3:44:d5:59:f9:5c:ef:43:bc:25:f5:0a:7a:88:26:56:04:
36:9b:19:49:2f:9c:7c:bb:e1:84:64:56:24:a9:0c:0d:e3:c6:
a6:ea:d9:50:6a:a1:a4:70:b4:84:a2:20:00:38:7a:77:9d:31:
37:d3:68:6f:e4:e5:d2:8e:5b:ef:21:21:94:76:05:13:0a:82:
45:e1:3e:b3:cc:4c:28:19:a7:2b:92:f3:c7:95:66:c9:8a:ee:
3a:6d:04:91:35:ec:21:d1:d2:8c:d2:7f:9f:29:6f:ea:11:41:
27:07:19:77:08:e9:b8:98:1d:33:90:d3:2a:23:4c:e6:04:1f:
c8:46:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:49 2026 by rpki-client