This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa
File: 323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa (raw, json)
Hash identifier: zI+VPQ9qySXlbz2Y+fLp1CvmwCQe9DPBqmzTnp/iW2w=
Subject key identifier: D7:79:F8:E5:F1:2C:06:DC:B1:F6:26:E8:C4:2B:9A:39:B1:30:75:1F
Certificate issuer: /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial: 4F5DB72338961CF3E409D3CE6C27D745D4370CF1
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa
Signing time: Mon 12 Jan 2026 12:31:51 +0000
ROA not before: Mon 12 Jan 2026 12:26:51 +0000
ROA not after: Mon 11 Jan 2027 12:31:51 +0000
asID: 272195
IP address blocks: 2804:8364:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 07:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5d:b7:23:38:96:1c:f3:e4:09:d3:ce:6c:27:d7:45:d4:37:0c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
Validity
Not Before: Jan 12 12:26:51 2026 GMT
Not After : Jan 11 12:31:51 2027 GMT
Subject: CN=D779F8E5F12C06DCB1F626E8C42B9A39B130751F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:07:a7:d2:4a:64:a8:a0:a5:d7:32:04:6c:
10:c8:1f:4d:33:19:9f:bc:96:2c:5b:89:c7:f9:41:
a7:d3:1b:7d:7c:32:67:5f:f3:e2:e6:0a:bb:95:8a:
d1:4f:2c:37:de:66:be:55:b5:e8:40:3d:3b:3e:76:
70:cf:e5:c3:7b:5b:f8:dd:d4:7f:a5:44:f5:95:5d:
5a:8a:c9:d3:46:1e:4b:7c:c7:56:3d:68:05:4c:bb:
7f:61:a3:40:a3:f4:32:7b:67:a9:4f:75:c6:30:f6:
94:2d:64:42:24:8b:27:61:6f:71:30:b7:8f:02:37:
0d:a4:48:aa:1f:b0:4c:a6:a5:9e:d2:8a:ec:de:4f:
e5:92:44:98:17:92:10:22:e0:8f:d5:19:0a:6e:e6:
6c:3c:9b:b4:56:f3:5b:2c:3d:02:63:fc:0f:62:ed:
4e:1f:da:9c:ca:67:4e:f9:6b:18:e4:42:ea:f7:ad:
94:e2:18:da:46:17:62:c0:d7:3e:1a:44:70:66:0c:
ab:ab:61:09:1e:9a:e7:56:c3:b3:3e:e7:74:00:83:
b1:56:42:db:dd:d1:7a:0b:2e:e4:ea:86:93:bb:0c:
a7:41:fc:3c:23:2e:a0:27:85:fc:d6:16:78:dc:94:
b6:f4:99:b5:82:b8:38:15:06:97:ab:8c:7b:2e:91:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:F8:E5:F1:2C:06:DC:B1:F6:26:E8:C4:2B:9A:39:B1:30:75:1F
X509v3 Authority Key Identifier:
keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8364:4000::/34
Signature Algorithm: sha256WithRSAEncryption
70:32:65:e7:65:2f:13:3f:5b:9b:c8:fb:11:e2:8d:51:7a:7e:
26:46:b7:27:53:cc:79:1c:c2:d2:3a:9f:d7:a7:16:a0:53:e4:
37:31:f9:d6:a7:bd:f0:c7:93:76:95:23:fc:54:2b:7c:38:e5:
38:58:d1:70:70:8c:eb:60:df:b3:c1:e0:b0:8b:f4:68:90:a4:
aa:ce:f9:05:89:64:bc:c3:82:b5:18:d0:2b:b1:cd:fb:b0:4d:
2d:87:d2:cc:52:b7:d1:c7:5a:7b:83:6b:85:1d:21:de:68:5e:
15:f8:4d:d3:28:e3:14:67:9b:d2:2b:45:1a:ff:c7:16:48:c3:
6f:96:de:b1:50:a1:56:12:be:0c:36:90:0d:3e:f7:52:63:be:
2d:ad:5d:d0:5e:4b:69:36:c1:62:da:0f:2a:5a:3b:5b:47:5e:
cf:fe:58:b9:f6:c3:61:85:13:d2:95:84:96:d1:c1:1e:5a:ec:
c5:fb:8b:57:aa:b3:98:85:4d:89:d2:df:4f:47:7e:5f:57:c9:
f3:e3:f6:03:e9:bc:e5:35:06:a3:e7:94:f3:b9:2b:fd:b4:5f:
bf:52:f4:0c:72:0e:40:53:ca:43:86:cc:4c:1f:d8:af:4b:db:
3c:42:1c:f3:6f:cf:68:0d:ff:5f:b8:58:f6:7a:fc:82:97:f3:
4c:71:c2:84
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUT123IziWHPPkCdPObCfXRdQ3DPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc4NDUzOTEwMTRGN0Y5NDcwNzg4RUM3Mjc1NjEzODJD
OUVFODQzOTAeFw0yNjAxMTIxMjI2NTFaFw0yNzAxMTExMjMxNTFaMDMxMTAvBgNV
BAMTKEQ3NzlGOEU1RjEyQzA2RENCMUY2MjZFOEM0MkI5QTM5QjEzMDc1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcgwen0kpkqKCl1zIEbBDIH00z
GZ+8lixbicf5QafTG318Mmdf8+LmCruVitFPLDfeZr5VtehAPTs+dnDP5cN7W/jd
1H+lRPWVXVqKydNGHkt8x1Y9aAVMu39ho0Cj9DJ7Z6lPdcYw9pQtZEIkiydhb3Ew
t48CNw2kSKofsEympZ7SiuzeT+WSRJgXkhAi4I/VGQpu5mw8m7RW81ssPQJj/A9i
7U4f2pzKZ075axjkQur3rZTiGNpGF2LA1z4aRHBmDKurYQkemudWw7M+53QAg7FW
Qtvd0XoLLuTqhpO7DKdB/DwjLqAnhfzWFnjclLb0mbWCuDgVBperjHsukV6VAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU13n45fEsBtyx9iboxCuaObEwdR8wHwYDVR0j
BBgwFoAU14RTkQFPf5RweI7HJ1YTgsnuhDkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9QNVdacFpMWmV6MWQzV1NtZXVKSmY1ZmVEa05ma3lCdWtBdEZCV3ZZ
ZEEvMC9ENzg0NTM5MTAxNEY3Rjk0NzA3ODhFQzcyNzU2MTM4MkM5RUU4NDM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3ODQ1MzkxMDE0RjdGOTQ3
MDc4OEVDNzI3NTYxMzgyQzlFRTg0MzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvUDVXWnBaTFplejFkM1dTbWV1SkpmNWZlRGtOZmt5QnVrQXRGQld2WWRBLzAv
MzIzODMwMzQzYTM4MzMzNjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMxMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEg2RAMA0GCSqGSIb3DQEBCwUA
A4IBAQBwMmXnZS8TP1ubyPsR4o1Ren4mRrcnU8x5HMLSOp/XpxagU+Q3MfnWp73w
x5N2lSP8VCt8OOU4WNFwcIzrYN+zweCwi/RokKSqzvkFiWS8w4K1GNArsc37sE0t
h9LMUrfRx1p7g2uFHSHeaF4V+E3TKOMUZ5vSK0Ua/8cWSMNvlt6xUKFWEr4MNpAN
PvdSY74trV3QXktpNsFi2g8qWjtbR17P/li59sNhhRPSlYSW0cEeWuzF+4tXqrOY
hU2J0t9PR35fV8nz4/YD6bzlNQaj55TzuSv9tF+/UvQMcg5AU8pDhsxMH9ivS9s8
Qhzzb89oDf9fuFj2evyCl/NMccKE
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:58 2026 by rpki-client