This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa
File: 323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (raw, json)
Hash identifier: XIGTCoQg/BSob8oqo96n3uBMyrck0rCAY0jz87O7OUY=
Subject key identifier: 0A:48:01:5B:66:98:C2:95:B8:09:04:E5:C1:BA:54:8F:08:09:19:06
Certificate issuer: /CN=987C49173148EC0A164D79BE3F0B7F94AF367573
Certificate serial: 4C29EC489C7A82C9D91D0D9EB4EE6F0E13E30154
Authority key identifier: 98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa
Signing time: Mon 17 Nov 2025 13:08:43 +0000
ROA not before: Mon 17 Nov 2025 13:03:43 +0000
ROA not after: Mon 16 Nov 2026 13:08:43 +0000
asID: 274334
IP address blocks: 2804:9664::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl
rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 11:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:29:ec:48:9c:7a:82:c9:d9:1d:0d:9e:b4:ee:6f:0e:13:e3:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987C49173148EC0A164D79BE3F0B7F94AF367573
Validity
Not Before: Nov 17 13:03:43 2025 GMT
Not After : Nov 16 13:08:43 2026 GMT
Subject: CN=0A48015B6698C295B80904E5C1BA548F08091906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:42:86:dc:a9:ee:30:fc:4d:31:e9:7d:55:
8d:90:cd:e2:2c:78:52:5a:7e:c6:1f:6d:9c:d9:99:
54:f5:62:cb:e6:e7:c9:ff:e5:43:05:95:42:c8:95:
42:89:5a:50:52:9d:38:7c:7c:be:95:62:06:c1:50:
8f:00:60:23:4f:2c:fd:da:3f:cf:ca:46:17:fa:f0:
cd:fa:2a:d2:84:1c:d8:35:8a:d4:fb:2a:3f:ec:67:
1b:e0:24:28:38:4c:f8:47:ec:5d:fc:5f:8f:99:81:
f6:4e:85:bc:5c:bb:c3:b9:d2:7e:3f:c2:e1:d6:e0:
0e:a8:e9:f5:77:b0:17:46:f1:e7:ca:1e:8d:7a:54:
69:c6:dd:c6:0d:a1:e1:5c:72:13:70:3f:f4:79:83:
b8:18:3e:73:40:7e:24:33:a7:0c:87:96:3e:c4:a2:
cb:00:3d:f5:fb:6a:9a:af:2d:4c:af:02:0a:f9:67:
2c:96:d4:d5:fc:3b:51:0f:5c:84:dc:3e:1e:8b:9a:
66:a5:06:a4:64:8a:34:7e:48:61:e4:46:ea:1c:74:
ab:a1:a1:37:0f:5b:f2:59:f5:5b:d2:72:a7:ff:fa:
75:88:ed:7e:dd:26:99:93:7a:b7:39:5e:ce:13:d0:
15:ec:c3:d5:f2:5b:c5:59:f7:6b:38:23:88:2c:59:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:01:5B:66:98:C2:95:B8:09:04:E5:C1:BA:54:8F:08:09:19:06
X509v3 Authority Key Identifier:
keyid:98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9664::/32
Signature Algorithm: sha256WithRSAEncryption
2b:46:db:17:39:42:7b:7c:ae:8f:3a:eb:85:67:4f:ed:b9:39:
9b:5e:b6:ba:36:54:ee:9f:7c:59:8a:78:a2:c0:1d:f9:11:df:
9b:4f:60:05:9d:af:2b:1a:a7:61:93:cf:98:fd:56:44:d0:b3:
8e:df:bb:99:8b:7c:29:af:bc:cd:93:89:61:0e:35:1a:54:f9:
10:04:46:38:e9:4e:39:fa:19:9e:47:a2:84:46:fc:13:1a:92:
89:70:8c:53:5b:47:af:3c:fb:3a:77:62:5f:7c:00:c3:07:5d:
b8:a0:c8:ce:17:a4:c6:b4:cf:1e:f8:e1:0f:38:b1:b9:85:fc:
df:93:46:23:78:30:f5:1d:39:54:30:47:d0:bf:f3:f7:8f:b1:
12:14:0b:b7:bf:f7:6b:86:cb:e8:54:49:24:52:85:dd:dc:ac:
49:32:4c:b0:18:78:2c:79:67:7f:53:04:ba:93:4a:89:cf:40:
9c:09:62:30:17:a5:c3:34:7c:63:4e:15:a6:fe:df:9f:eb:87:
dc:6f:73:94:d3:51:4a:11:2f:a9:0d:91:44:74:e9:3e:75:ad:
ff:8b:f0:36:08:62:e1:90:26:b9:be:31:39:64:07:80:48:99:
9f:b2:09:84:59:e5:20:b4:11:ad:8b:7b:3f:ce:d9:81:96:d3:
cc:7a:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:13 2025 by rpki-client