This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa
File: 323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa (raw, json)
Hash identifier: CQbXhN8agY1aeVLarLVZn3RL/jbpZygQuRNl0/VKMxc=
Subject key identifier: F8:D8:EB:1D:8C:30:C1:7F:CD:0E:D4:51:92:BE:25:F5:D6:6B:6F:F1
Certificate issuer: /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial: 3FA48F2A00845E642DA1295586D7EADA3B13A4AF
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa
Signing time: Wed 17 Dec 2025 03:36:08 +0000
ROA not before: Wed 17 Dec 2025 03:31:08 +0000
ROA not after: Wed 16 Dec 2026 03:36:08 +0000
asID: 268707
IP address blocks: 2804:5984:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 19:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a4:8f:2a:00:84:5e:64:2d:a1:29:55:86:d7:ea:da:3b:13:a4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Validity
Not Before: Dec 17 03:31:08 2025 GMT
Not After : Dec 16 03:36:08 2026 GMT
Subject: CN=F8D8EB1D8C30C17FCD0ED45192BE25F5D66B6FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:b1:a3:9f:3f:c9:1d:ed:39:d5:36:e7:1a:
69:8a:07:75:c0:a2:ac:2e:0d:d1:4a:12:ff:1e:85:
09:ae:a8:81:c9:5e:a2:b1:66:55:84:ab:7c:b6:f4:
c2:67:6b:6e:e3:32:16:50:a6:63:37:ad:f1:9d:19:
6c:ac:8b:bf:fa:dd:2c:8a:9a:af:bd:36:46:08:4d:
66:12:07:4d:b8:99:80:d8:af:5e:6b:a8:5a:af:63:
86:12:56:09:f9:83:5d:8d:f7:c4:19:b2:1e:64:05:
39:57:fa:f8:e5:a3:2a:22:17:62:bf:2c:c1:d6:86:
48:9a:d8:80:f7:87:31:e6:25:59:14:90:1a:46:e9:
41:46:a2:84:7d:9b:24:f5:94:88:51:1b:13:2a:2d:
8e:2c:22:e1:2a:0a:c8:79:f4:fd:f4:97:e7:d6:64:
a4:62:06:b5:fc:e4:fe:e9:23:3d:9e:fa:b3:f8:9a:
f1:fc:21:c3:5e:a7:7e:72:3b:96:f7:70:f4:72:a1:
40:d1:fa:60:a3:be:e5:01:0f:2e:47:36:5f:eb:6e:
55:06:6e:d0:1b:25:5b:c9:b5:91:55:f2:f5:42:cb:
fb:ff:94:80:38:6a:3b:35:0a:46:1e:9a:bd:bb:a4:
7b:1c:c8:a8:83:36:00:67:e4:e9:a6:50:ca:a6:6d:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:EB:1D:8C:30:C1:7F:CD:0E:D4:51:92:BE:25:F5:D6:6B:6F:F1
X509v3 Authority Key Identifier:
keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:9000::/36
Signature Algorithm: sha256WithRSAEncryption
98:f1:df:92:4a:c1:ab:34:a6:83:89:d0:a3:db:b3:b9:d7:14:
c3:c1:27:90:38:e0:88:58:c0:ff:17:8c:60:6d:dd:df:5f:06:
11:ad:c7:c6:47:2d:ec:b3:6e:cc:47:d0:2e:d4:a5:9a:4b:5a:
7a:ee:9a:df:91:ea:d2:bb:8f:3d:d7:72:91:09:8e:2a:13:56:
3a:a5:fd:e4:65:38:29:2c:73:d6:a3:37:55:f8:1b:c3:8b:1b:
27:10:02:d6:4d:4f:2a:96:5e:c6:20:dc:fc:60:c8:ee:55:53:
2f:ba:f7:9e:d4:72:d7:17:09:72:59:d5:44:7f:21:79:ef:e3:
75:a4:5c:03:65:45:28:1a:13:64:a2:a4:e9:bd:dc:ea:9a:78:
e1:60:93:d7:58:53:44:4e:81:6c:d1:db:e1:d5:ee:78:0b:a7:
1f:dd:84:0c:19:b3:d5:bb:e3:a1:24:82:47:16:22:8b:c3:e5:
6e:f5:5a:be:d0:25:35:c4:55:62:51:81:9d:f9:4b:6a:22:df:
93:dd:49:c9:dc:d6:7b:c8:f6:7d:a9:83:a7:3f:1b:8c:92:aa:
97:b2:7d:f5:2b:26:2b:c4:80:2f:2a:e2:8e:8a:98:5c:af:94:
54:ed:34:7a:4b:77:19:eb:16:12:c1:1f:9c:91:2e:d1:a0:77:
a0:a0:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:03:13 2025 by rpki-client