This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a3a2f33322d3438203d3e20323635303131.roa
File: 323830343a333136343a3a2f33322d3438203d3e20323635303131.roa (raw, json)
Hash identifier: g+9dg+D40GSNVGcSYe8+sgjj7d3122wbPttD8XZWVJg=
Subject key identifier: 4E:DE:64:8A:5F:15:C2:B4:6B:55:09:AE:11:A4:86:2A:57:CE:CB:E1
Certificate issuer: /CN=84FD8F1989410A974714F8A8E867D28365445A3B
Certificate serial: 2A976DA1A4F7668BFE214640C290E215526D9A9E
Authority key identifier: 84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a3a2f33322d3438203d3e20323635303131.roa
Signing time: Mon 05 Jan 2026 18:12:05 +0000
ROA not before: Mon 05 Jan 2026 18:07:05 +0000
ROA not after: Mon 04 Jan 2027 18:12:05 +0000
asID: 265011
IP address blocks: 2804:3164::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl
rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 02:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:97:6d:a1:a4:f7:66:8b:fe:21:46:40:c2:90:e2:15:52:6d:9a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84FD8F1989410A974714F8A8E867D28365445A3B
Validity
Not Before: Jan 5 18:07:05 2026 GMT
Not After : Jan 4 18:12:05 2027 GMT
Subject: CN=4EDE648A5F15C2B46B5509AE11A4862A57CECBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:b7:a1:a3:88:5e:ba:16:41:f2:40:3f:63:
46:08:0e:69:cc:08:ee:c2:9a:70:ef:f3:45:0e:b1:
a1:df:f2:36:cc:7e:f9:b4:45:a5:4c:60:6f:d8:14:
8f:9e:b7:e3:c2:d8:08:46:88:85:29:e8:a2:15:6e:
30:d5:e3:51:d9:42:07:bd:85:bb:fd:15:3f:f6:17:
1f:b7:c7:c1:cd:e6:17:95:b3:6c:0a:22:4c:ab:25:
22:ad:48:43:2d:9e:12:b8:e3:d9:57:55:e8:41:33:
68:3e:90:87:73:66:df:9c:d5:71:92:06:b8:c6:31:
50:3d:9e:4f:0e:16:f8:81:74:4f:41:cf:12:5e:c1:
86:03:a8:73:72:6e:ce:1e:07:75:3e:4c:30:21:38:
4d:ea:3d:90:f7:e9:c6:bf:e8:14:ec:a8:ec:72:4a:
8e:6a:c9:92:9f:29:b1:2e:34:f9:3f:ca:aa:30:aa:
97:89:ec:49:c8:f5:ba:0a:4e:2e:78:1b:c8:e1:04:
d4:08:a3:83:b5:38:ad:52:86:f5:1f:3c:67:74:47:
e7:82:bb:ac:08:e1:50:36:ef:ad:51:60:c4:71:d0:
26:d1:26:3e:15:d4:fc:5f:10:80:e5:f9:61:84:a9:
3b:3d:0f:87:1e:5e:07:28:27:e9:d1:f0:1d:c5:62:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:64:8A:5F:15:C2:B4:6B:55:09:AE:11:A4:86:2A:57:CE:CB:E1
X509v3 Authority Key Identifier:
keyid:84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a3a2f33322d3438203d3e20323635303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3164::/32
Signature Algorithm: sha256WithRSAEncryption
ad:5a:27:ac:b8:24:1a:39:a5:e0:56:29:a6:c6:a7:03:3d:24:
88:ea:57:ab:71:1c:5f:fe:30:a5:d8:c2:62:b2:29:ae:34:30:
2b:9a:9f:d3:a5:05:47:86:24:c5:1d:33:18:31:08:97:19:f9:
12:00:1b:b7:61:85:18:97:43:c2:2b:17:42:1e:d7:d6:d5:a3:
3c:12:b3:95:02:ea:72:71:7a:f8:1c:51:64:be:b2:30:26:45:
fc:0d:ea:01:fc:4c:55:fd:94:d3:b5:40:02:a4:de:d8:a7:6d:
40:4a:cd:22:3a:58:c2:38:dd:b7:eb:b3:4b:76:d0:3c:5a:3d:
51:98:1f:56:bc:c2:d3:a0:3f:ac:30:7a:66:b2:23:2d:c0:3c:
c9:ac:e8:1e:98:ce:9c:61:06:83:75:75:7d:34:5c:2d:98:27:
03:36:19:c4:e6:52:7f:4a:a3:3a:fb:47:d5:fe:86:e4:7a:88:
6e:b2:d2:71:4d:7f:be:1d:54:16:4e:b5:ac:05:57:41:a7:01:
f7:51:69:52:d0:73:d8:1b:b1:0d:a5:a6:0a:7b:a4:85:e4:5c:
5a:df:7d:64:31:1f:25:e3:09:43:33:88:a7:78:fd:2d:d3:af:
7c:c3:95:f3:8f:00:c5:92:96:bf:40:dd:30:bc:66:67:cb:4c:
c7:ff:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:16 2026 by rpki-client