This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa
File: 323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa (raw, json)
Hash identifier: 3TtQCBObhCqQUVM6gi6dMXwDktIwJXskTVotNeR28yA=
Subject key identifier: EF:DC:3D:59:7F:22:CF:06:91:84:12:A3:4D:13:F3:D2:9B:46:CF:53
Certificate issuer: /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial: 061F042D9D0EAC98548DDF2AE8C0883ACE208B69
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa
Signing time: Wed 17 Dec 2025 03:35:52 +0000
ROA not before: Wed 17 Dec 2025 03:30:52 +0000
ROA not after: Wed 16 Dec 2026 03:35:52 +0000
asID: 268707
IP address blocks: 2804:5984:8000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 19:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1f:04:2d:9d:0e:ac:98:54:8d:df:2a:e8:c0:88:3a:ce:20:8b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Validity
Not Before: Dec 17 03:30:52 2025 GMT
Not After : Dec 16 03:35:52 2026 GMT
Subject: CN=EFDC3D597F22CF06918412A34D13F3D29B46CF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:35:0b:0e:a0:46:90:8e:d7:93:21:94:81:
23:09:48:04:4c:3e:35:46:cf:ac:9c:95:9e:70:2b:
dd:a0:14:ed:ec:a0:88:5f:24:1a:39:21:b0:7a:65:
e7:26:f5:1d:93:a0:e8:30:ba:22:d5:00:e4:9e:be:
14:fc:f7:3b:85:72:0c:fc:72:b1:4f:1d:65:0a:9d:
16:57:a4:e2:d8:42:c5:94:79:03:59:cf:95:99:00:
16:b3:08:a2:c8:be:23:ee:de:38:2d:0b:3e:3f:20:
61:89:64:3f:fe:92:96:ff:3c:62:9d:81:c8:52:f5:
a9:3e:38:f4:6a:c2:0b:ad:b2:97:3b:e0:ee:03:41:
80:fb:13:df:5e:53:50:12:dd:27:18:ac:dd:31:0f:
9a:98:d9:aa:a4:99:11:f5:e9:00:21:45:75:1c:8a:
d2:f0:6d:d1:e5:8b:22:46:e1:75:d8:3f:65:49:f3:
c5:f5:2a:3f:d6:e9:52:5a:17:5a:da:60:7a:8c:55:
fa:1b:a0:b9:17:9b:bd:c9:af:ca:7a:95:37:a9:31:
33:3a:db:76:c0:fe:f2:c9:64:bc:f8:fb:b8:2c:f8:
04:22:f3:4b:82:04:4e:c0:3d:d1:be:7d:09:b3:20:
01:21:62:96:96:76:12:fe:ff:8d:c3:d4:05:91:19:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:3D:59:7F:22:CF:06:91:84:12:A3:4D:13:F3:D2:9B:46:CF:53
X509v3 Authority Key Identifier:
keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:8000::/35
Signature Algorithm: sha256WithRSAEncryption
46:77:b8:e4:04:67:8d:25:63:37:9c:6a:db:b5:60:d4:a4:df:
48:9e:c3:3a:df:a1:25:46:e3:59:1e:93:1b:b1:f6:ca:df:5f:
ce:2e:3b:04:c7:6d:2d:fd:1a:82:75:bf:48:10:80:29:ac:55:
c9:96:24:09:06:04:3b:4a:05:9a:29:1d:50:e1:80:59:14:b5:
a0:db:f7:50:b3:35:54:f7:f0:5f:d0:4a:7a:a5:b8:4e:7a:20:
a8:47:95:d3:b8:b7:13:49:bd:af:15:09:9a:26:0d:81:07:e7:
57:13:b4:c6:2e:ec:31:1f:94:d8:74:d7:45:3a:65:0b:08:0e:
7a:14:45:6e:65:c9:9a:c4:82:28:84:99:8a:d8:b4:a7:70:61:
cd:76:94:50:dd:9b:10:7b:d1:06:c4:81:e2:04:25:00:3d:7d:
22:17:e3:ab:d3:3d:ec:47:17:30:70:8e:d8:f9:09:c2:d7:66:
2e:81:fe:54:fb:77:63:12:e7:0f:82:8d:4a:c0:3c:10:42:4f:
45:df:a4:c6:17:c1:a7:9e:25:f8:ec:62:58:47:b0:8b:6e:f2:
c2:e0:c6:15:ae:11:ca:96:2d:c6:cd:a1:da:9b:46:7d:17:de:
93:ae:16:00:24:b7:78:d8:3c:ac:d4:d6:8d:4f:9a:6b:56:90:
82:e9:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:03:12 2025 by rpki-client