This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
File: 323830343a333439633a3a2f33322d3332203d3e20323635343638.roa (raw, json)
Hash identifier: 4avCkpihNBJAjwQqA5sZmlbgtysyy6ARx5gW4lUsl+U=
Subject key identifier: F7:E1:8B:B9:21:22:97:63:9A:FC:3A:8A:1F:CD:A6:43:AF:61:D6:6C
Certificate issuer: /CN=29714F97A53F69A40841F2805D919FCAC517F546
Certificate serial: 5C2964B0252557F28D58A97EAC5CB193E99788C1
Authority key identifier: 29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
Signing time: Thu 13 Nov 2025 19:17:59 +0000
ROA not before: Thu 13 Nov 2025 19:12:59 +0000
ROA not after: Thu 12 Nov 2026 19:17:59 +0000
asID: 265468
IP address blocks: 2804:349c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl
rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:29:64:b0:25:25:57:f2:8d:58:a9:7e:ac:5c:b1:93:e9:97:88:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29714F97A53F69A40841F2805D919FCAC517F546
Validity
Not Before: Nov 13 19:12:59 2025 GMT
Not After : Nov 12 19:17:59 2026 GMT
Subject: CN=F7E18BB9212297639AFC3A8A1FCDA643AF61D66C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:a5:38:e9:24:2f:6b:20:91:d9:96:50:a5:
cf:da:ad:0d:d1:6d:d9:68:64:51:4d:72:3b:65:b9:
0d:b8:71:66:a1:56:10:64:f0:01:09:25:9d:7c:8a:
0e:eb:69:ea:94:68:5f:a2:1d:5c:9d:0c:8b:1a:f2:
34:5d:8a:e0:d0:f8:5b:a1:f7:46:3f:6c:c7:49:d4:
24:81:17:91:82:30:4c:f5:67:85:21:4b:54:89:97:
2d:49:cb:cb:f4:a7:64:cc:1f:f5:f6:55:fd:af:0d:
9a:a5:34:ac:30:26:4d:44:2a:ca:6b:dc:9a:49:eb:
4b:51:c5:45:cd:f2:cc:17:01:2c:2e:86:d3:3e:d8:
a8:6c:ee:c4:2b:1a:82:31:95:84:ac:06:ad:67:01:
2c:9c:f9:63:32:92:46:18:5c:e9:16:52:5b:0c:04:
cb:51:23:a8:4d:ed:a5:14:a3:a0:09:5c:66:0c:ba:
d8:fa:6f:a1:54:5f:2b:d6:f7:95:7f:63:51:41:f2:
13:8f:d9:e2:a6:55:47:f6:c1:e6:4f:ba:47:62:e2:
df:26:ab:4b:49:a9:96:f9:ae:03:1b:80:9d:bb:2f:
ab:41:d6:16:90:bc:86:61:29:4e:3d:dd:1a:9e:21:
e8:1f:9a:27:1f:8b:18:10:24:f0:89:40:27:c0:05:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E1:8B:B9:21:22:97:63:9A:FC:3A:8A:1F:CD:A6:43:AF:61:D6:6C
X509v3 Authority Key Identifier:
keyid:29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:349c::/32
Signature Algorithm: sha256WithRSAEncryption
88:d0:4d:2f:88:f5:5e:7f:ea:82:16:fa:b8:75:69:78:c5:75:
94:63:11:f7:ea:5c:3e:58:a5:b6:5c:21:ca:a2:a9:d6:2c:c9:
d7:94:02:45:20:c2:31:cd:91:d8:4b:4c:63:d1:c7:ad:8e:40:
f5:2f:d5:35:1b:b8:95:07:e3:4e:3d:c5:cd:19:41:06:24:fb:
46:bb:33:b5:77:2e:48:5a:7d:31:a3:56:3a:cd:9b:e9:e6:2d:
21:b7:d9:c1:b1:36:a5:92:9a:a1:a2:ef:6f:82:8f:47:fd:e1:
2e:80:54:a4:3f:c4:34:e9:ec:84:1c:d3:52:f5:74:ac:9b:c4:
fc:7f:0b:ea:f5:1b:d4:a6:06:05:d9:b2:17:c9:f8:6f:c1:6d:
3d:2a:c9:cd:48:e4:85:14:f4:8e:2e:db:24:e6:ff:7b:17:7a:
ef:9f:c1:f9:fe:f1:00:c7:b8:a7:d7:71:3f:5c:23:85:71:5d:
e2:95:ff:95:d4:69:52:a5:32:f3:6e:14:9f:d2:30:ac:f1:7b:
aa:fb:06:10:68:b4:0e:08:55:b1:df:1e:3e:20:98:fe:61:b5:
dd:62:a3:43:bb:e3:38:e6:3b:a4:98:51:f3:d1:53:84:9f:db:
af:bc:77:21:e9:f8:55:bf:84:45:b7:2f:a2:a2:51:36:28:04:
e4:1c:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:12 2025 by rpki-client