This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/323830343a363261633a3a2f33322d3438203d3e20323639333131.roa
File: 323830343a363261633a3a2f33322d3438203d3e20323639333131.roa (raw, json)
Hash identifier: RwoAgXzqXwlplt+uKaPo/pB5TEki3aobVNIeELH1HdY=
Subject key identifier: 1C:89:FA:63:49:1A:BE:FA:C2:B8:7F:2C:11:B4:38:9E:5A:AC:3A:70
Certificate issuer: /CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0
Certificate serial: 2D627DAD0F0B8EA222CF6F1E82A0BC6A5CC55B20
Authority key identifier: 0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/323830343a363261633a3a2f33322d3438203d3e20323639333131.roa
Signing time: Tue 25 Nov 2025 14:24:53 +0000
ROA not before: Tue 25 Nov 2025 14:19:53 +0000
ROA not after: Tue 24 Nov 2026 14:24:53 +0000
asID: 269311
IP address blocks: 2804:62ac::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl
rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 17:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:62:7d:ad:0f:0b:8e:a2:22:cf:6f:1e:82:a0:bc:6a:5c:c5:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0
Validity
Not Before: Nov 25 14:19:53 2025 GMT
Not After : Nov 24 14:24:53 2026 GMT
Subject: CN=1C89FA63491ABEFAC2B87F2C11B4389E5AAC3A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:e5:3b:23:90:1c:e6:34:6c:f1:23:77:12:
43:e3:40:fc:25:26:2f:71:3a:9c:d9:2e:8c:e4:54:
a0:a0:9f:f7:c0:85:b5:27:61:1d:15:18:b1:a3:9d:
73:35:92:70:bc:02:8c:61:ba:fb:37:28:30:eb:d2:
b8:2b:5e:bf:e7:a2:28:d2:e8:b5:03:c6:6f:8b:f1:
8e:86:7b:30:77:77:ba:cf:47:c2:4f:83:62:42:24:
d2:7d:69:94:9a:1f:01:5a:5a:60:7e:40:98:b5:8b:
80:96:da:95:ec:c6:3b:2b:ec:d3:d9:ca:a7:38:c5:
ab:3c:48:ac:89:87:4e:1a:e9:50:45:30:03:d4:73:
52:8a:6e:60:0b:69:09:b1:11:ad:b3:d3:a6:02:f5:
ea:f9:18:d8:79:73:0d:6b:d3:16:b3:24:d6:ab:81:
74:b5:40:90:40:32:5b:2b:ae:98:67:02:30:07:8d:
c8:d7:b2:98:d1:e5:97:a3:fe:b1:ed:ac:56:aa:c0:
50:bc:69:65:37:85:20:68:89:d0:c5:d3:c1:4f:f3:
77:02:23:80:6a:53:da:71:90:6b:7b:89:8e:c6:3c:
fa:2a:f4:c9:3a:ff:0e:09:27:ab:8d:29:6a:32:39:
df:15:37:40:94:0e:25:b1:f8:2a:99:d3:f9:b5:7a:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:FA:63:49:1A:BE:FA:C2:B8:7F:2C:11:B4:38:9E:5A:AC:3A:70
X509v3 Authority Key Identifier:
keyid:0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/323830343a363261633a3a2f33322d3438203d3e20323639333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:62ac::/32
Signature Algorithm: sha256WithRSAEncryption
1c:40:4f:6d:c5:d2:e8:e6:93:f3:f2:db:f7:52:c2:45:50:97:
99:ed:56:59:6e:95:76:62:c2:54:01:12:08:6d:47:cd:c5:7d:
9a:6e:26:2f:3b:a0:e4:d0:74:cd:ed:20:d1:5c:43:be:f7:23:
01:e0:6b:dd:69:77:da:20:a7:4e:85:c2:fc:34:07:3c:42:b4:
ce:89:f2:83:f9:27:e2:08:1e:ad:0d:11:92:6b:76:14:8a:2f:
2f:97:d2:47:c9:f4:99:cd:21:aa:d7:ed:9f:6f:70:2b:32:74:
10:0f:65:4e:df:77:e8:ef:56:a7:8e:1a:6c:be:66:74:81:1f:
6c:d5:e0:22:89:9b:28:a0:8c:74:d2:0c:eb:6a:e5:47:f9:cb:
db:8f:18:d3:36:10:ae:41:39:8e:33:5b:09:09:f9:88:19:6d:
df:6d:bf:be:79:06:07:fc:49:4f:ef:5f:8d:e5:a9:56:c5:2a:
5f:49:69:96:8e:da:2d:ea:12:10:ba:77:9a:d7:2b:fa:01:6d:
c2:52:4c:b8:d4:0f:b9:f0:c4:12:71:b5:8d:90:18:a9:0b:65:
ed:b1:68:f6:09:aa:b6:69:cf:bc:dd:5d:ee:43:56:52:e3:78:
03:73:5e:96:59:f3:92:ab:12:19:78:49:ed:ee:41:75:6d:11:
f6:f3:be:6a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULWJ9rQ8LjqIiz28egqC8alzFWyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJCQjhDOTUxMEQyNkYyQkI2RUJBQzlCQTg5RTUyNEUz
Q0E2NkFEMDAeFw0yNTExMjUxNDE5NTNaFw0yNjExMjQxNDI0NTNaMDMxMTAvBgNV
BAMTKDFDODlGQTYzNDkxQUJFRkFDMkI4N0YyQzExQjQzODlFNUFBQzNBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyauU7I5Ac5jRs8SN3EkPjQPwl
Ji9xOpzZLozkVKCgn/fAhbUnYR0VGLGjnXM1knC8Aoxhuvs3KDDr0rgrXr/noijS
6LUDxm+L8Y6GezB3d7rPR8JPg2JCJNJ9aZSaHwFaWmB+QJi1i4CW2pXsxjsr7NPZ
yqc4xas8SKyJh04a6VBFMAPUc1KKbmALaQmxEa2z06YC9er5GNh5cw1r0xazJNar
gXS1QJBAMlsrrphnAjAHjcjXspjR5Zej/rHtrFaqwFC8aWU3hSBoidDF08FP83cC
I4BqU9pxkGt7iY7GPPoq9Mk6/w4JJ6uNKWoyOd8VN0CUDiWx+CqZ0/m1euP5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHIn6Y0kavvrCuH8sEbQ4nlqsOnAwHwYDVR0j
BBgwFoAUC7uMlRDSbyu266ybqJ5STjymatAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkE3dkRZWTJWZGo5TGNDdG9peGN0MmdtUG9xZWdMWXA5bUV1VDE4TXBX
WXMvMC8wQkJCOEM5NTEwRDI2RjJCQjZFQkFDOUJBODlFNTI0RTNDQTY2QUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQkI4Qzk1MTBEMjZGMkJC
NkVCQUM5QkE4OUU1MjRFM0NBNjZBRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JBN3ZEWVkyVmRqOUxjQ3RvaXhjdDJnbVBvcWVnTFlwOW1FdVQxOE1wV1lzLzAv
MzIzODMwMzQzYTM2MzI2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARirDANBgkqhkiG9w0BAQsFAAOCAQEAHEBPbcXS
6OaT8/Lb91LCRVCXme1WWW6VdmLCVAESCG1HzcV9mm4mLzug5NB0ze0g0VxDvvcj
AeBr3Wl32iCnToXC/DQHPEK0zonyg/kn4ggerQ0Rkmt2FIovL5fSR8n0mc0hqtft
n29wKzJ0EA9lTt936O9Wp44abL5mdIEfbNXgIombKKCMdNIM62rlR/nL248Y0zYQ
rkE5jjNbCQn5iBlt322/vnkGB/xJT+9fjeWpVsUqX0lplo7aLeoSELp3mtcr+gFt
wlJMuNQPufDEEnG1jZAYqQtl7bFo9gmqtmnPvN1d7kNWUuN4A3NellnzkqsSGXhJ
7e5BdW0R9vO+ag==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:12:18 2025 by rpki-client