This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33362d3336203d3e20323635323430.roa
File: 323830343a326362633a3a2f33362d3336203d3e20323635323430.roa (raw, json)
Hash identifier: XU4f3uHP9FzglIVTR7B0yPOno7IN/ky8hf6+EwIfED8=
Subject key identifier: 85:BB:E7:C4:EF:4A:A5:3B:F7:68:4B:F7:51:6F:6D:20:98:00:16:84
Certificate issuer: /CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D
Certificate serial: 12B4E10A36AC2046D80F12CCD6152F80D7A809E4
Authority key identifier: DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33362d3336203d3e20323635323430.roa
Signing time: Mon 10 Nov 2025 19:24:07 +0000
ROA not before: Mon 10 Nov 2025 19:19:07 +0000
ROA not after: Mon 09 Nov 2026 19:24:07 +0000
asID: 265240
IP address blocks: 2804:2cbc::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl
rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 08:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b4:e1:0a:36:ac:20:46:d8:0f:12:cc:d6:15:2f:80:d7:a8:09:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D
Validity
Not Before: Nov 10 19:19:07 2025 GMT
Not After : Nov 9 19:24:07 2026 GMT
Subject: CN=85BBE7C4EF4AA53BF7684BF7516F6D2098001684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:9c:d9:02:74:6e:2f:af:ec:13:11:de:1a:
b0:28:d2:2e:cd:c6:b0:a6:9c:f3:c9:bf:6a:63:3a:
94:ad:2b:83:16:16:ed:29:65:31:65:c8:80:08:fa:
17:7b:cd:96:1c:01:5d:8e:66:91:05:53:f6:27:b2:
70:a6:07:b5:8f:a8:94:d1:7e:45:3d:e4:7d:f1:a9:
e5:a8:09:bd:6d:e9:c9:40:84:42:d3:1d:6d:5d:1e:
17:c0:2a:93:33:d2:98:5c:fe:5d:60:ee:3b:d1:4b:
9b:1b:c0:7d:93:cf:07:88:2a:33:2b:51:9e:f9:50:
df:c7:d4:9e:29:19:67:9d:53:53:a1:46:01:e5:16:
0e:ac:95:12:e8:c1:03:d7:79:8a:21:8d:f9:9b:2a:
b0:fb:4b:9c:55:bb:a6:ec:65:7f:56:cb:2e:5c:fa:
19:63:3b:41:bb:09:9e:b8:04:e7:94:aa:56:22:4a:
2c:88:a2:aa:e4:9c:c0:a7:65:4e:12:30:3f:5d:05:
96:b7:2b:1f:4a:c6:38:aa:8f:7c:ae:cc:a1:f3:74:
7d:df:12:ad:0f:30:1b:48:05:4f:44:3e:0c:66:23:
f2:44:b3:62:8d:3f:da:59:da:79:91:54:1c:88:95:
f4:ec:c6:87:41:5c:96:ec:ad:80:b2:8f:be:d7:9a:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:E7:C4:EF:4A:A5:3B:F7:68:4B:F7:51:6F:6D:20:98:00:16:84
X509v3 Authority Key Identifier:
keyid:DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33362d3336203d3e20323635323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2cbc::/36
Signature Algorithm: sha256WithRSAEncryption
4f:04:be:59:0d:f6:37:13:57:2e:c7:4f:13:9f:e4:ff:4f:93:
02:42:45:f7:54:e0:44:99:24:f3:85:48:2a:69:27:6d:ee:78:
92:4e:71:47:ee:38:bc:dd:cd:9c:92:1c:14:e0:3a:00:46:e3:
1e:aa:10:e7:c5:c3:33:50:72:c3:09:af:93:15:ca:cf:d7:22:
fc:a2:e6:61:fd:79:84:8b:32:1e:65:cc:be:cf:ee:00:02:af:
1f:8e:c2:bf:a0:d6:da:92:d0:a1:c3:f7:75:e1:7e:d5:35:a6:
98:49:9b:b7:7c:79:fb:8f:c8:db:74:36:b0:58:00:cd:75:34:
9f:87:c4:91:7b:67:38:a0:17:4f:92:ad:c6:c3:13:f5:50:f9:
3a:8a:d4:d7:a8:e1:5f:56:f8:bc:e3:a1:06:44:e9:55:13:0b:
e7:83:03:f3:0e:03:9a:ad:9c:47:31:e6:97:05:de:08:01:88:
c7:48:8f:7c:2b:92:27:8d:f5:2f:da:dd:e9:2d:f4:24:0e:ca:
51:ca:a8:86:16:bd:fb:54:f1:3e:ee:4e:7e:5b:c4:ec:c6:34:
96:c3:9f:24:82:fe:73:eb:72:41:50:34:42:d5:c9:d3:d7:c8:
6a:d0:63:e0:7a:2e:b5:88:e1:d8:26:c9:94:88:53:66:f1:6a:
eb:d3:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:28 2025 by rpki-client