This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616538303a3a2f34322d3432203d3e20323638373037.roa
File: 323830343a353938343a616538303a3a2f34322d3432203d3e20323638373037.roa (raw, json)
Hash identifier: 7yN5uFXhaWiVPrUquqiMApksRxa/5IYRPQGwzH6vhoI=
Subject key identifier: 45:63:25:B8:53:F7:2E:DC:AA:FA:09:C1:84:37:75:1A:6B:EA:44:15
Certificate issuer: /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial: 662A16FEAA81F97700DCED1AD7382CB68E1F8117
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616538303a3a2f34322d3432203d3e20323638373037.roa
Signing time: Wed 17 Dec 2025 03:36:09 +0000
ROA not before: Wed 17 Dec 2025 03:31:09 +0000
ROA not after: Wed 16 Dec 2026 03:36:09 +0000
asID: 268707
IP address blocks: 2804:5984:ae80::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 19:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2a:16:fe:aa:81:f9:77:00:dc:ed:1a:d7:38:2c:b6:8e:1f:81:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Validity
Not Before: Dec 17 03:31:09 2025 GMT
Not After : Dec 16 03:36:09 2026 GMT
Subject: CN=456325B853F72EDCAAFA09C18437751A6BEA4415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:3c:51:e3:1e:db:8a:08:bf:73:68:ef:82:
c7:d8:70:ed:b8:85:07:17:0e:74:30:96:97:35:68:
41:57:d8:97:6a:a1:bb:b6:a4:21:c6:09:ea:03:9e:
d9:2c:bc:1d:ab:35:4f:b0:8e:a3:11:d0:dc:b6:7b:
92:6b:b6:31:3b:a6:4d:de:7c:91:e9:aa:f4:5b:1c:
78:81:d7:81:f9:99:5d:b0:3d:ed:1a:b1:b7:d7:93:
1a:89:73:b0:b6:bc:e5:b8:00:38:64:1d:d7:06:03:
b9:33:ac:93:55:a1:af:77:ce:ef:c1:8d:76:c4:50:
71:0b:f9:67:4c:92:83:9b:97:97:33:86:d0:cb:96:
50:65:c7:11:23:b4:4b:4e:62:5f:67:28:14:0d:30:
aa:fb:ea:d0:1c:55:6e:2a:34:e7:8f:be:c6:04:12:
74:8a:50:0f:0d:9c:88:4f:2a:5d:63:b3:89:15:86:
0c:6a:7a:ee:9c:a7:f3:0b:4c:90:3e:80:5e:bc:b0:
4e:06:72:87:a0:f1:25:e6:6b:21:87:33:80:a7:85:
b7:7c:cb:1d:b6:44:1a:e1:65:bb:97:a2:e7:bc:a1:
98:c4:e0:b6:3e:34:a5:e8:2e:8a:c5:96:78:60:08:
b8:0f:3b:a9:63:92:5c:29:3b:04:fe:57:bb:61:d1:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:25:B8:53:F7:2E:DC:AA:FA:09:C1:84:37:75:1A:6B:EA:44:15
X509v3 Authority Key Identifier:
keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616538303a3a2f34322d3432203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:ae80::/42
Signature Algorithm: sha256WithRSAEncryption
6c:0c:f4:e9:50:38:9f:f0:c1:43:50:25:e6:bb:53:0e:33:1b:
d8:a5:e0:5a:c1:8c:e7:cb:14:c6:03:98:59:1b:cd:cb:73:de:
e2:24:2f:cf:e0:26:8d:e4:87:9e:cb:5d:aa:80:f3:ff:ef:3e:
7c:4b:53:a3:a9:f0:16:40:2f:f6:78:e7:2d:b0:7a:2e:f3:f0:
bc:ef:bf:09:26:e5:01:d9:bf:1a:8b:5a:8f:6a:31:ac:0d:10:
fb:4b:61:47:22:b5:97:58:ac:64:4f:a7:9c:96:64:05:5f:d8:
b4:1e:b6:c3:9c:5e:0e:f3:88:77:20:b8:86:3e:bc:d6:43:c1:
70:c0:0d:89:d1:af:1b:fd:44:2c:2a:4d:71:db:29:7b:4a:29:
38:63:62:91:f2:38:96:df:b8:bf:90:bf:44:5c:0a:9c:37:0f:
08:11:f4:a8:18:72:d3:50:f9:e7:d2:73:9b:8a:14:9d:fc:ae:
e2:8f:28:90:15:63:f1:62:9b:77:50:70:5c:d3:bc:8a:8b:70:
ff:5b:06:5c:3e:a5:ee:18:e8:8e:ee:79:f4:e6:97:25:2d:63:
92:d3:26:e2:5a:03:12:b9:df:2e:90:94:94:f6:1b:a5:db:5e:
36:7f:92:4c:62:06:e1:0d:87:e3:c5:51:3b:05:38:33:e2:2a:
4e:39:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:02:02 2025 by rpki-client