This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa
File: 323830343a353735383a3a2f33322d313238203d3e20323638363035.roa (raw, json)
Hash identifier: xCjK0Xk7NHHxOZgmNTMhJBaGbS8baq3BSxwFJ+uKjRc=
Subject key identifier: AB:83:56:B4:D6:BF:FD:50:D8:3A:35:E8:EF:24:21:C8:75:DC:22:A5
Certificate issuer: /CN=892D6C10F30EBECA6D6198C23F932CA6387CC054
Certificate serial: 4B2778ABFA484AE77353B315C327C7E9E5B8CCC1
Authority key identifier: 89:2D:6C:10:F3:0E:BE:CA:6D:61:98:C2:3F:93:2C:A6:38:7C:C0:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/892D6C10F30EBECA6D6198C23F932CA6387CC054.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa
Signing time: Wed 07 Jan 2026 13:52:49 +0000
ROA not before: Wed 07 Jan 2026 13:47:49 +0000
ROA not after: Wed 06 Jan 2027 13:52:49 +0000
asID: 268605
IP address blocks: 2804:5758::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/892D6C10F30EBECA6D6198C23F932CA6387CC054.crl
rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/892D6C10F30EBECA6D6198C23F932CA6387CC054.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/892D6C10F30EBECA6D6198C23F932CA6387CC054.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 01:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:27:78:ab:fa:48:4a:e7:73:53:b3:15:c3:27:c7:e9:e5:b8:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892D6C10F30EBECA6D6198C23F932CA6387CC054
Validity
Not Before: Jan 7 13:47:49 2026 GMT
Not After : Jan 6 13:52:49 2027 GMT
Subject: CN=AB8356B4D6BFFD50D83A35E8EF2421C875DC22A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:f5:3e:9c:23:65:79:8a:aa:d0:56:2b:1e:
a2:74:c0:85:2b:bc:81:36:f7:d3:ba:bc:36:ea:2b:
0c:31:ff:4a:14:75:bc:9d:62:2d:41:29:ed:f7:fe:
40:46:18:9a:a6:a5:fd:e0:6c:ae:c9:76:7b:a2:dc:
8d:d9:5d:90:a4:24:a1:2a:e2:5d:d9:5c:1d:58:cf:
c6:0b:57:8c:8a:8a:fd:35:6b:8e:cf:d8:96:17:39:
37:36:aa:38:89:22:fe:95:79:01:32:20:bb:eb:34:
d9:b0:6e:eb:11:bb:f3:b9:f3:a7:55:0f:bd:ec:7d:
6d:c7:76:54:86:66:45:09:43:d1:12:16:5e:80:b6:
7d:d4:0a:eb:88:79:9d:08:15:94:92:7a:d4:f9:1b:
85:db:57:0e:2e:25:14:1b:b2:74:bf:f2:bb:52:cb:
1d:36:c8:ad:40:17:62:f7:5b:6d:e3:c1:2d:02:22:
44:58:fa:3f:58:7e:1b:e9:ed:15:99:30:ee:dd:30:
c9:58:af:21:0c:3f:89:43:36:de:4b:27:d7:ea:98:
e5:ac:7f:2b:dd:7f:3d:d3:17:17:07:e9:ca:aa:5b:
bf:7e:a5:10:fe:a0:ae:10:c1:6c:55:cc:2e:74:d1:
0c:f1:89:57:74:4a:99:29:92:d7:61:25:5d:80:b6:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:56:B4:D6:BF:FD:50:D8:3A:35:E8:EF:24:21:C8:75:DC:22:A5
X509v3 Authority Key Identifier:
keyid:89:2D:6C:10:F3:0E:BE:CA:6D:61:98:C2:3F:93:2C:A6:38:7C:C0:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/892D6C10F30EBECA6D6198C23F932CA6387CC054.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/892D6C10F30EBECA6D6198C23F932CA6387CC054.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5758::/32
Signature Algorithm: sha256WithRSAEncryption
aa:ce:55:d3:c0:c1:d2:08:e2:b8:27:c6:88:80:48:15:7d:2f:
09:df:35:a1:25:6b:f2:4b:6d:df:f1:94:8e:51:3b:aa:db:f0:
f2:78:d6:03:da:54:4b:23:9c:03:c7:52:d6:3d:ea:54:f1:1e:
6f:65:73:e9:6b:12:1f:5b:4b:13:67:6e:f2:24:0f:4c:67:c7:
7c:65:be:f9:51:52:bc:5a:84:10:da:0e:ed:f4:a4:90:cc:38:
20:ed:e7:1e:ed:dd:a0:f3:68:61:a0:5d:89:71:b2:29:65:91:
c7:d9:b4:74:a8:8e:65:21:3c:eb:4a:21:6e:a7:44:23:7f:a0:
d9:83:bc:6e:b7:30:fa:7e:88:36:de:71:e9:a8:8a:92:89:18:
0e:86:54:17:b2:d2:ac:73:35:a2:51:d6:7e:18:92:b2:2b:d6:
4b:9f:c5:03:d1:4f:dc:aa:aa:6d:7e:7b:d0:a1:0e:2f:88:d1:
0b:68:c1:5a:08:4c:83:2f:15:3f:b1:66:89:e2:9c:03:78:d3:
98:0f:a0:c7:40:1c:84:86:31:51:83:71:ed:18:f5:78:51:f7:
fb:4c:aa:95:98:d9:12:39:38:fa:0b:b0:75:f3:de:85:b3:28:
8b:2d:25:f9:24:dd:be:3a:49:eb:51:05:01:f2:41:e9:c5:ae:
2d:c4:b0:94
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSyd4q/pISudzU7MVwyfH6eW4zMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyRDZDMTBGMzBFQkVDQTZENjE5OEMyM0Y5MzJDQTYz
ODdDQzA1NDAeFw0yNjAxMDcxMzQ3NDlaFw0yNzAxMDYxMzUyNDlaMDMxMTAvBgNV
BAMTKEFCODM1NkI0RDZCRkZENTBEODNBMzVFOEVGMjQyMUM4NzVEQzIyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dfU+nCNleYqq0FYrHqJ0wIUr
vIE299O6vDbqKwwx/0oUdbydYi1BKe33/kBGGJqmpf3gbK7Jdnui3I3ZXZCkJKEq
4l3ZXB1Yz8YLV4yKiv01a47P2JYXOTc2qjiJIv6VeQEyILvrNNmwbusRu/O586dV
D73sfW3HdlSGZkUJQ9ESFl6Atn3UCuuIeZ0IFZSSetT5G4XbVw4uJRQbsnS/8rtS
yx02yK1AF2L3W23jwS0CIkRY+j9Yfhvp7RWZMO7dMMlYryEMP4lDNt5LJ9fqmOWs
fyvdfz3TFxcH6cqqW79+pRD+oK4QwWxVzC500QzxiVd0SpkpktdhJV2Atnv9AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUq4NWtNa//VDYOjXo7yQhyHXcIqUwHwYDVR0j
BBgwFoAUiS1sEPMOvsptYZjCP5Mspjh8wFQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkdHRGo3OWFxcE1TZTFRM3VySllKZnVSeFNNWmhLb3VYaU1CUVBaQmtN
UU4vMC84OTJENkMxMEYzMEVCRUNBNkQ2MTk4QzIzRjkzMkNBNjM4N0NDMDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MkQ2QzEwRjMwRUJFQ0E2
RDYxOThDMjNGOTMyQ0E2Mzg3Q0MwNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JHR0RqNzlhcXBNU2UxUTN1ckpZSmZ1UnhTTVpoS291WGlNQlFQWkJrTVFOLzAv
MzIzODMwMzQzYTM1MzczNTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFdYMA0GCSqGSIb3DQEBCwUAA4IBAQCqzlXT
wMHSCOK4J8aIgEgVfS8J3zWhJWvyS23f8ZSOUTuq2/DyeNYD2lRLI5wDx1LWPepU
8R5vZXPpaxIfW0sTZ27yJA9MZ8d8Zb75UVK8WoQQ2g7t9KSQzDgg7ece7d2g82hh
oF2JcbIpZZHH2bR0qI5lITzrSiFup0Qjf6DZg7xutzD6fog23nHpqIqSiRgOhlQX
stKsczWiUdZ+GJKyK9ZLn8UD0U/cqqptfnvQoQ4viNELaMFaCEyDLxU/sWaJ4pwD
eNOYD6DHQByEhjFRg3HtGPV4Uff7TKqVmNkSOTj6C7B1896FsyiLLSX5JN2+Oknr
UQUB8kHpxa4txLCU
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:16 2026 by rpki-client