This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa
File: 323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa (raw, json)
Hash identifier: 4BDrTRk1UtCHoemUAIh6vrDCYH2pVwftfZ9H9RqodAE=
Subject key identifier: 66:F4:B2:20:C0:B5:28:B2:19:A1:04:CF:AE:35:85:81:6D:D3:19:96
Certificate issuer: /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial: 5F40FC3BE8F7675A8547D64A674C45DB03AC10C1
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa
Signing time: Wed 17 Dec 2025 03:36:07 +0000
ROA not before: Wed 17 Dec 2025 03:31:07 +0000
ROA not after: Wed 16 Dec 2026 03:36:07 +0000
asID: 268707
IP address blocks: 2804:5984:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 19:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:40:fc:3b:e8:f7:67:5a:85:47:d6:4a:67:4c:45:db:03:ac:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Validity
Not Before: Dec 17 03:31:07 2025 GMT
Not After : Dec 16 03:36:07 2026 GMT
Subject: CN=66F4B220C0B528B219A104CFAE3585816DD31996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:2f:b9:87:6f:de:49:bd:0b:5f:8c:3e:01:
5e:01:02:49:91:6e:5e:36:ae:dc:a3:d3:e3:49:bc:
bb:bc:83:38:67:a6:66:ca:1b:7f:58:ac:25:54:5e:
82:b8:cd:02:88:07:55:14:b2:b4:6b:a0:c7:59:2f:
64:50:b4:ad:90:11:38:f8:2d:90:f1:5b:29:d1:1d:
09:94:67:a4:c1:8f:d2:2f:65:00:57:88:f3:8e:58:
17:54:35:0c:33:f5:5b:09:de:94:01:21:99:99:06:
00:3e:44:17:3e:99:d6:c3:59:de:b6:fe:22:34:67:
c2:1c:9a:09:0d:3f:ee:b8:1d:f9:dd:1b:30:d9:02:
71:e4:ac:4f:c3:0d:18:0f:30:9d:38:b7:cf:9e:e1:
29:57:71:32:6c:45:07:e2:d6:1f:fa:31:89:59:a1:
4a:21:53:52:fe:a7:1f:02:66:1d:97:ad:bc:2c:d3:
1b:3f:5f:9f:26:f9:dd:29:67:b9:c0:d3:57:1e:6d:
17:13:7b:bf:2c:3d:09:60:9c:63:ab:19:c5:8a:65:
5c:74:bf:f1:c5:47:57:0b:40:5b:a0:71:f1:56:5f:
32:48:42:76:d0:31:bb:d7:0d:f7:9d:f3:cb:65:1f:
a6:c7:2e:16:0b:15:04:7c:4c:5c:14:fd:6e:ab:65:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:B2:20:C0:B5:28:B2:19:A1:04:CF:AE:35:85:81:6D:D3:19:96
X509v3 Authority Key Identifier:
keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:b000::/36
Signature Algorithm: sha256WithRSAEncryption
b4:41:27:93:c1:a4:3a:85:9c:e2:9f:de:d3:e4:77:9a:6a:e1:
c0:8b:b9:b2:4b:55:4c:02:80:5a:a2:dd:ef:d9:9d:2f:3a:eb:
da:d6:e0:b1:55:1b:07:16:9a:89:df:57:fb:66:b9:bf:78:10:
7a:7b:13:8f:c7:86:61:ad:07:3a:56:f2:73:21:e6:00:e4:37:
c6:81:fc:33:b9:0a:93:02:ef:36:54:8b:87:fa:4d:c9:47:cb:
16:f7:00:7b:f0:c1:fd:21:74:e1:2b:de:87:41:51:08:39:eb:
16:ab:10:5f:e4:76:70:3a:b9:e1:07:15:9c:22:d7:51:66:fa:
cb:b8:74:ad:bf:41:e9:ee:43:b1:b4:61:c1:41:d2:f6:44:6c:
e5:93:0c:8f:96:06:2d:fa:e8:fe:a3:b4:6b:97:2d:2f:89:ce:
2e:30:6f:6f:fc:a3:fd:83:c3:1d:3c:6b:df:28:af:92:bb:7e:
85:d9:40:1f:11:b9:45:0b:fc:7b:87:1a:3a:d2:40:73:f1:8c:
d6:25:6e:3c:94:d4:d6:04:b1:e2:d4:d4:24:f9:6f:bb:d5:64:
53:48:56:af:e7:4d:88:27:d3:8f:4f:8b:0d:3e:14:74:27:8c:
74:09:2c:00:34:58:a6:2a:0d:a7:9e:22:61:98:bb:d2:33:3d:
d3:e9:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:03:13 2025 by rpki-client