This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa
File: 323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa (raw, json)
Hash identifier: bH1N4ymf++FJrZvh9xnvOgWJfe41p9iITBbax1VbUno=
Subject key identifier: 8C:FD:F0:00:CD:DA:DE:95:73:F5:89:38:F2:9A:5D:9D:4C:45:E9:48
Certificate issuer: /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial: 5ED3B0C9BA8BF1AAA0AA6A9611017B46366DDDBA
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa
Signing time: Fri 09 Jan 2026 20:00:21 +0000
ROA not before: Fri 09 Jan 2026 19:55:21 +0000
ROA not after: Fri 08 Jan 2027 20:00:21 +0000
asID: 271519
IP address blocks: 2804:7ccc:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d3:b0:c9:ba:8b:f1:aa:a0:aa:6a:96:11:01:7b:46:36:6d:dd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Validity
Not Before: Jan 9 19:55:21 2026 GMT
Not After : Jan 8 20:00:21 2027 GMT
Subject: CN=8CFDF000CDDADE9573F58938F29A5D9D4C45E948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:78:76:b5:2d:0b:b5:c2:56:2d:5f:a4:11:
c8:29:42:e1:df:31:3c:4e:49:7e:09:05:03:4d:e3:
56:26:73:f2:7a:df:61:b3:3e:8e:d6:ed:d9:21:5e:
65:e1:fa:e3:9e:99:6e:7f:55:46:73:c2:35:1c:6e:
1c:78:94:db:18:dd:11:cf:dc:f9:60:75:4d:9b:12:
0d:ce:0e:ea:17:a3:55:c6:55:f1:e5:32:5c:8d:d5:
bf:f5:47:50:39:af:e3:a6:da:9e:05:dc:3a:f7:9a:
88:d2:36:be:8b:00:83:40:82:5f:db:fb:dd:ba:42:
43:58:8d:d3:65:04:74:ec:f6:ef:4b:25:40:fe:38:
ca:07:d2:a7:ff:65:46:f8:ed:59:a5:f0:3a:1f:90:
24:7d:31:4d:24:d0:9e:76:69:06:9b:9c:03:b5:a6:
fd:30:74:42:88:af:4a:e6:cd:23:76:eb:14:a9:8c:
58:92:0c:83:14:59:45:7a:35:62:47:da:80:ed:d7:
1b:55:1e:f1:12:bf:b1:b5:22:96:a7:9e:fb:b6:49:
fe:6c:e4:48:ce:7d:e2:e0:45:e7:63:e8:fb:5a:99:
79:8d:a6:70:22:b4:67:58:2c:de:07:b9:f7:52:1b:
49:c2:13:47:16:da:1a:6f:ca:1b:b7:21:23:18:ae:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:F0:00:CD:DA:DE:95:73:F5:89:38:F2:9A:5D:9D:4C:45:E9:48
X509v3 Authority Key Identifier:
keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ccc:c000::/34
Signature Algorithm: sha256WithRSAEncryption
71:85:5c:83:c9:3b:41:ac:98:2e:4e:ec:a2:68:cc:e3:91:4b:
5d:9a:37:31:d9:a3:18:b0:83:35:69:54:96:06:4c:c1:55:f4:
ff:33:b7:10:1b:29:24:fb:52:05:fc:8a:e6:89:d3:68:2e:bb:
5c:e6:ab:ec:c5:4b:65:2f:05:5a:6d:54:d3:99:28:46:d3:94:
fb:5f:0e:e6:ce:d7:c8:a2:6a:ee:03:49:36:5e:fe:ec:9c:d6:
43:19:ac:e7:d6:c2:24:d8:89:0b:6e:d9:44:01:8c:61:79:48:
75:6d:4c:30:c3:4e:c5:93:27:d4:09:da:76:c8:a3:5a:e5:c0:
48:d8:53:b4:bb:0b:f6:55:e5:49:67:85:8f:6b:74:58:39:49:
e5:fc:a7:cb:19:45:a1:b7:34:22:a3:d6:74:6c:12:fb:d7:54:
9e:07:3e:3a:fc:ca:74:03:31:9e:12:e9:fc:6c:3f:dc:63:a3:
c9:bc:88:38:7b:1e:eb:08:c2:9c:14:a7:56:0c:98:3d:b5:b8:
27:c7:0a:b5:9e:55:4b:ea:d4:0f:43:8b:ea:72:53:94:90:04:
b7:72:92:7b:43:2f:08:ac:27:a8:10:42:cb:ff:8c:bb:7c:f9:
be:e6:bb:61:93:0e:60:48:85:b4:59:a9:e5:85:d8:32:bf:3d:
44:1a:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:52 2026 by rpki-client