This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/323830343a346132383a3a2f33322d3332203d3e203533313934.roa
File: 323830343a346132383a3a2f33322d3332203d3e203533313934.roa (raw, json)
Hash identifier: kyTI34BJus7x9iP+Lch8JQVpRDqyUEZp1ef69hMGrvo=
Subject key identifier: 86:01:48:AA:EA:E7:07:51:8D:0C:B5:5E:AB:59:1E:52:B7:C7:5E:31
Certificate issuer: /CN=D898A501884A69107F2B7763B90247B1A49C3A70
Certificate serial: 4D1CAC71D4A90B588F3527DFF9E483E271C132F6
Authority key identifier: D8:98:A5:01:88:4A:69:10:7F:2B:77:63:B9:02:47:B1:A4:9C:3A:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/323830343a346132383a3a2f33322d3332203d3e203533313934.roa
Signing time: Thu 20 Nov 2025 14:51:41 +0000
ROA not before: Thu 20 Nov 2025 14:46:41 +0000
ROA not after: Thu 19 Nov 2026 14:51:41 +0000
asID: 53194
IP address blocks: 2804:4a28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.crl
rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 02:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1c:ac:71:d4:a9:0b:58:8f:35:27:df:f9:e4:83:e2:71:c1:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D898A501884A69107F2B7763B90247B1A49C3A70
Validity
Not Before: Nov 20 14:46:41 2025 GMT
Not After : Nov 19 14:51:41 2026 GMT
Subject: CN=860148AAEAE707518D0CB55EAB591E52B7C75E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:81:bd:e6:10:3d:0e:eb:6a:b3:b6:c9:66:
ee:be:21:1a:90:d7:ad:94:33:3b:ae:99:00:ce:57:
fa:ab:1a:9d:7a:26:9e:7a:b0:12:4a:50:88:b7:dc:
b1:1a:3b:b3:8c:65:81:69:2f:09:60:8d:ca:85:36:
5b:2a:a7:13:37:98:ec:e8:e9:e5:8f:44:7f:fd:5f:
51:cf:b6:94:69:45:ef:15:12:29:90:7f:30:38:0a:
0a:20:2a:5a:47:53:59:3d:0d:a7:c5:02:91:85:24:
9d:c9:ef:03:5f:15:5f:16:b2:d1:f9:fc:3b:bf:05:
01:7e:63:71:fb:0f:21:7d:50:da:82:3f:8e:cb:e0:
fb:b0:c0:21:d4:62:15:00:e9:39:a6:a6:f4:fc:bf:
38:0c:68:de:b3:3b:66:6b:2e:ec:79:8c:0e:cf:4c:
30:c7:47:ef:2a:8e:16:a6:76:8e:cf:ca:e8:02:c7:
1d:76:0f:ba:28:45:4e:3f:4e:d9:ff:44:cc:b1:fd:
af:ea:69:78:07:9b:35:f4:ee:87:91:d2:e4:76:35:
dd:51:c7:93:68:22:1f:71:5c:37:01:e7:d2:e3:c5:
a0:c9:45:da:54:d1:e7:ba:34:f9:d4:02:68:8a:af:
b8:9f:bb:00:bf:de:40:68:71:1d:da:30:4f:9c:17:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:48:AA:EA:E7:07:51:8D:0C:B5:5E:AB:59:1E:52:B7:C7:5E:31
X509v3 Authority Key Identifier:
keyid:D8:98:A5:01:88:4A:69:10:7F:2B:77:63:B9:02:47:B1:A4:9C:3A:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/323830343a346132383a3a2f33322d3332203d3e203533313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4a28::/32
Signature Algorithm: sha256WithRSAEncryption
44:64:8c:4e:f0:92:c8:50:cb:f1:a8:86:74:e0:fd:cc:98:87:
51:cf:8a:75:78:44:93:a2:d5:d7:74:73:e4:f9:c4:d0:82:63:
d5:c4:c7:65:91:7c:5e:c7:87:1e:a0:84:dc:52:18:fc:7c:6b:
58:07:cb:4e:da:de:01:d2:4f:74:a8:c1:45:90:07:9d:4a:2e:
42:e8:1c:83:f8:47:a2:fb:da:df:1c:e3:eb:14:41:ff:dd:1d:
9b:6e:7a:a8:af:cc:c5:04:aa:90:86:92:1b:83:9f:3e:cd:ef:
34:dc:eb:c1:83:06:ea:b1:6d:0c:4b:fd:82:43:f3:13:d2:08:
9f:22:32:7f:fc:72:45:f7:b4:b8:b7:f4:d1:59:fd:66:75:01:
13:bd:21:c6:9a:e0:a1:cb:dc:5d:34:76:f9:97:07:3f:c3:ad:
c9:8a:db:18:8c:e9:b3:76:cb:f1:f3:17:9d:3c:ae:2f:5f:9f:
f4:5c:ef:c2:ba:96:7d:25:2e:c0:94:50:c7:3d:9a:ee:ef:74:
8a:3d:a3:00:b6:70:e7:61:62:65:3b:02:7c:ec:b4:19:76:bb:
4f:cc:b9:88:42:b5:ea:3a:ab:33:f0:4e:58:43:24:5a:ec:43:
fb:d2:f7:72:bd:8e:60:32:ad:4c:c1:37:80:93:db:c9:ea:f2:
d0:8c:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:50:52 2025 by rpki-client