This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa
File: 323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa (raw, json)
Hash identifier: buQjtWSH9s2WAEvrRPvL6eVLOTO6AEzV5egKchSkWug=
Subject key identifier: 8F:E3:E8:33:86:E9:53:10:C7:0D:2B:92:D0:C5:B5:F0:B4:74:EB:27
Certificate issuer: /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial: 71BFB7C04D4D846AB193EAFA4066B50B0526B428
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa
Signing time: Mon 12 Jan 2026 12:31:52 +0000
ROA not before: Mon 12 Jan 2026 12:26:52 +0000
ROA not after: Mon 11 Jan 2027 12:31:52 +0000
asID: 272195
IP address blocks: 2804:8364:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 07:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:bf:b7:c0:4d:4d:84:6a:b1:93:ea:fa:40:66:b5:0b:05:26:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
Validity
Not Before: Jan 12 12:26:52 2026 GMT
Not After : Jan 11 12:31:52 2027 GMT
Subject: CN=8FE3E83386E95310C70D2B92D0C5B5F0B474EB27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:4c:97:8b:a6:57:98:64:0f:09:a1:d0:da:
04:eb:5f:73:49:82:d3:16:a7:17:6d:73:b5:64:97:
da:7d:7b:95:f7:62:56:54:48:57:cd:0e:f4:0b:9a:
db:34:34:7a:f8:f3:e8:ff:40:32:32:1b:84:e7:45:
24:58:91:76:3e:86:12:93:f4:17:a4:7b:5b:94:ee:
2f:7e:00:a4:f5:14:d2:a6:ff:3f:ce:5e:1f:57:12:
46:03:df:e4:48:63:2c:ca:1c:8a:0e:14:64:c7:62:
c9:93:b1:8c:22:77:ad:be:53:e5:fc:3a:65:8c:4c:
3d:d7:05:b6:61:05:9f:29:73:e6:5d:61:70:52:1e:
41:ad:07:8f:24:17:d4:5b:d2:df:f1:7c:6e:1e:3e:
95:df:46:6f:cd:3f:3d:0c:10:37:36:d8:75:d7:c5:
6b:a9:c6:08:f8:d3:ea:50:f3:80:ee:7f:c1:94:32:
79:78:60:65:de:b0:24:a3:a0:75:2b:60:a7:e8:79:
ca:e1:d1:87:23:2e:9a:ee:bb:c1:14:81:15:ca:b1:
7b:ba:10:e9:3a:78:e9:a3:67:33:95:99:be:d4:7b:
4a:d6:49:21:d5:5b:09:1b:82:c3:ff:5f:b5:4d:e7:
d2:f7:d9:de:d5:0d:56:66:85:a8:e1:b9:a4:39:35:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:E8:33:86:E9:53:10:C7:0D:2B:92:D0:C5:B5:F0:B4:74:EB:27
X509v3 Authority Key Identifier:
keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8364:8000::/34
Signature Algorithm: sha256WithRSAEncryption
55:19:7d:37:cc:c4:1a:cc:78:e7:54:6e:fd:73:dd:39:a1:25:
a4:82:64:b7:26:c9:39:a1:6b:c2:c8:f8:91:61:59:f3:0a:29:
1d:df:4d:3e:0e:46:8d:da:95:7b:ed:46:6f:30:c3:b1:ab:e6:
8b:1a:32:46:bb:6a:c6:dd:74:da:96:65:a1:8a:40:72:93:45:
64:c3:e9:48:06:d1:99:1a:a9:17:64:9b:60:ba:3e:90:a7:b3:
82:b2:88:49:04:04:4a:e4:73:e0:b0:8f:39:c0:c3:87:dd:50:
69:f0:ed:b5:f5:e3:1e:7b:b2:e2:31:9c:fb:41:17:13:70:2a:
35:9a:6c:18:20:0a:40:c1:0d:32:0b:b0:5b:a9:09:ed:91:af:
21:40:a2:d6:2e:32:d5:39:a7:78:d5:23:e9:9e:83:a5:13:f7:
34:93:e3:6d:8e:35:57:75:76:a3:fb:c4:b8:ad:41:c0:54:26:
23:0a:89:1b:43:94:3d:34:7a:94:04:7c:f2:57:15:15:ac:6e:
eb:28:dc:ea:84:c8:9d:97:62:0f:0e:ce:d4:d5:b4:1d:07:ca:
bc:55:9b:63:14:8f:21:65:bf:02:8c:9d:f8:bb:99:66:a3:3b:
35:54:f1:5b:7d:9f:d1:95:06:bb:83:99:ee:01:d8:ff:c9:b0:
fb:6e:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:52 2026 by rpki-client