This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
File: 323830343a316530633a3a2f33332d3333203d3e20323634313431.roa (raw, json)
Hash identifier: GzDexzn6unJlBaU/lFZe/x9gu6RMzCIqXmBWUAsAm2o=
Subject key identifier: 75:19:48:69:6A:A8:BA:24:AC:D8:5C:D8:D1:D4:7A:AA:1B:D8:61:99
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 503EC587A9B87671E97E9581BDE876296C403643
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
Signing time: Thu 04 Dec 2025 20:38:50 +0000
ROA not before: Thu 04 Dec 2025 20:33:50 +0000
ROA not after: Thu 03 Dec 2026 20:38:50 +0000
asID: 264141
IP address blocks: 2804:1e0c::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3e:c5:87:a9:b8:76:71:e9:7e:95:81:bd:e8:76:29:6c:40:36:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Dec 4 20:33:50 2025 GMT
Not After : Dec 3 20:38:50 2026 GMT
Subject: CN=751948696AA8BA24ACD85CD8D1D47AAA1BD86199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:d3:9c:ea:1b:a3:94:7a:74:d3:37:24:54:
73:21:f6:6c:f4:0c:7a:09:cd:bb:1b:b2:2f:fd:1c:
30:12:01:12:31:23:f6:f7:5d:dc:34:a0:69:4c:c1:
58:77:82:d2:02:65:d8:73:ab:31:d7:bb:c9:79:eb:
49:04:29:8c:56:b7:d8:93:2e:22:fd:c5:e9:1c:e9:
65:12:fb:6c:3e:1b:51:b3:20:72:d9:6d:03:63:7a:
a3:4e:f7:22:c4:de:f5:ca:44:58:48:76:87:11:6c:
68:64:7f:d6:da:68:87:78:4b:0e:f6:48:7b:81:09:
99:51:02:94:a2:87:8a:47:a6:e5:7a:3d:5a:2d:6e:
a4:13:96:d3:3e:b6:6f:fe:4c:77:40:b5:c6:ff:a1:
40:70:82:b9:d7:94:06:1d:74:52:af:43:da:dd:c3:
01:9b:42:ca:00:c6:dc:0d:3d:9f:a1:f0:3e:ef:de:
78:71:c6:e5:55:19:9d:ba:fb:69:15:04:a3:84:a5:
ba:f0:1c:80:9c:cf:ce:0a:f9:51:89:11:9d:49:f6:
3e:8e:c4:e2:e0:31:c6:5a:72:8b:a9:1f:88:7c:b3:
94:64:18:8d:e9:bf:84:bd:f7:da:f9:d6:be:96:60:
8e:2d:5c:fe:4c:e7:8e:27:eb:e6:b3:d9:41:b4:91:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:48:69:6A:A8:BA:24:AC:D8:5C:D8:D1:D4:7A:AA:1B:D8:61:99
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c::/33
Signature Algorithm: sha256WithRSAEncryption
a5:4e:47:34:6c:21:2c:82:44:c0:22:4b:ad:f4:46:15:e2:af:
b6:52:d3:89:cd:15:89:0a:df:a4:43:36:d4:bd:35:b8:e1:1e:
70:82:62:d4:21:5a:29:4a:ba:cc:99:25:61:92:23:60:f0:0e:
18:d9:b9:3d:b6:0f:06:db:ee:5c:ce:32:5f:99:fd:fb:c6:f5:
58:bf:cf:b2:55:73:a0:54:7a:2d:f4:63:b3:43:90:db:53:fe:
5b:c9:07:75:75:92:ba:e5:b1:ef:8d:78:29:e3:9e:9a:66:38:
56:dd:31:f9:c4:ee:e6:77:a3:3e:a5:5f:f1:e0:14:17:50:4b:
2a:e4:0a:5a:01:b8:83:4f:35:66:89:29:19:ad:6a:36:b8:f5:
5b:b2:32:9b:0f:0b:85:eb:1d:67:b4:72:c9:4d:ab:b3:af:22:
6b:be:c9:1c:c3:62:3d:04:09:98:0e:64:40:ac:09:1e:1c:5d:
be:9c:74:6e:f2:22:4d:1b:2f:76:13:ee:de:d0:1f:84:0a:a2:
b3:17:1a:c8:1c:71:d6:b7:e2:87:07:98:79:57:ae:57:7a:0b:
4d:a5:c3:ed:84:90:92:d6:79:ab:21:8f:1b:d3:9b:b2:59:e3:
30:c2:08:d9:dc:37:56:b9:41:d6:1a:22:e8:7c:0a:c2:6c:3e:
3b:4e:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:08 2025 by rpki-client