This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a313030303a3a2f33372d3337203d3e20323632373739.roa
File: 323830343a333231303a313030303a3a2f33372d3337203d3e20323632373739.roa (raw, json)
Hash identifier: LIW1xfQ8RY1boBNmJnrCPXJdZggTNZj/17/4PGBiOH8=
Subject key identifier: 8D:4B:AB:8B:BC:8C:54:6F:AF:E9:EE:CA:1F:0B:AB:C0:22:40:96:F9
Certificate issuer: /CN=E132E5111ED9D50EC92DF7DA6C45792F1165AB85
Certificate serial: 20DD0DBD35B258F164D6304EA18537168440152F
Authority key identifier: E1:32:E5:11:1E:D9:D5:0E:C9:2D:F7:DA:6C:45:79:2F:11:65:AB:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a313030303a3a2f33372d3337203d3e20323632373739.roa
Signing time: Mon 17 Nov 2025 12:21:35 +0000
ROA not before: Mon 17 Nov 2025 12:16:35 +0000
ROA not after: Mon 16 Nov 2026 12:21:35 +0000
asID: 262779
IP address blocks: 2804:3210:1000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.crl
rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:dd:0d:bd:35:b2:58:f1:64:d6:30:4e:a1:85:37:16:84:40:15:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E132E5111ED9D50EC92DF7DA6C45792F1165AB85
Validity
Not Before: Nov 17 12:16:35 2025 GMT
Not After : Nov 16 12:21:35 2026 GMT
Subject: CN=8D4BAB8BBC8C546FAFE9EECA1F0BABC0224096F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:68:5a:86:8c:d1:5e:c8:8e:96:2b:2b:17:
c4:a9:7a:18:cf:71:07:4c:79:17:e7:53:50:52:ed:
1e:bd:a1:e2:92:9f:6d:da:f2:0a:22:ec:b3:32:a0:
1b:08:1d:4e:cf:90:14:9a:67:2a:4e:07:60:36:01:
cd:13:52:13:27:77:66:7a:ca:20:6a:a1:77:95:a6:
4e:37:55:71:e8:83:d4:4d:3a:ea:4e:35:84:44:d1:
3c:58:bc:7b:6c:94:e2:a7:d9:8f:a4:9d:e6:89:22:
91:b5:95:1a:f9:82:b3:2c:cd:04:44:55:6d:d0:70:
ec:b1:dd:23:72:65:e0:29:e2:12:35:6e:00:bd:4d:
cd:82:83:0d:98:c9:1f:ca:9d:a5:02:a3:81:d4:de:
37:cb:6b:f2:5f:67:42:da:02:6a:c8:cd:8e:a4:ec:
cc:fb:8e:4a:71:4d:4e:a2:e8:1e:3c:a6:cd:d7:17:
0f:4a:7e:56:1d:65:dd:48:af:d4:14:38:df:f8:83:
17:1d:dd:4b:c7:e7:7d:02:5c:34:ec:5e:69:b7:7f:
20:73:05:95:a4:54:2c:e6:77:74:34:5e:c3:b7:f4:
e5:1e:da:d4:85:89:09:c1:1b:c0:05:fe:09:4e:bd:
68:ad:98:3b:aa:49:e1:fc:29:9e:92:74:26:5c:21:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:AB:8B:BC:8C:54:6F:AF:E9:EE:CA:1F:0B:AB:C0:22:40:96:F9
X509v3 Authority Key Identifier:
keyid:E1:32:E5:11:1E:D9:D5:0E:C9:2D:F7:DA:6C:45:79:2F:11:65:AB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a313030303a3a2f33372d3337203d3e20323632373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3210:1000::/37
Signature Algorithm: sha256WithRSAEncryption
c8:b6:25:a7:a4:45:e3:86:69:0e:32:71:24:93:c9:71:a5:13:
96:09:ef:5b:d8:50:74:4b:c9:25:07:35:e5:c2:32:96:d9:38:
06:18:3a:e5:b3:00:4c:9c:b1:96:21:83:94:35:98:81:bc:a6:
3f:2a:fc:30:ab:48:d0:be:b9:0b:03:95:b8:97:c2:63:a6:19:
d7:0b:9b:69:a1:54:51:41:07:3a:1e:03:23:f1:de:bb:2d:2f:
21:ed:36:51:a8:a6:f4:e5:5c:e4:b2:6e:da:c2:98:9e:2b:fe:
e5:15:cc:59:be:ab:b6:c5:1f:95:22:78:67:37:57:28:47:21:
ba:a9:bc:6d:bf:b2:2a:30:bb:9e:cb:7f:cb:44:59:d5:8c:c7:
18:d6:11:e7:56:be:c5:fb:f9:78:24:f1:2a:f8:64:32:c4:8a:
72:62:85:0a:6f:a3:63:20:26:5f:05:82:07:ed:24:3c:1e:73:
ca:38:03:c7:fd:9c:d5:23:00:34:b3:d9:44:7f:e8:cd:64:f6:
c4:a2:6c:da:87:9c:4b:50:d5:c7:09:ec:52:90:c3:37:61:f0:
61:93:49:a7:b5:5e:47:44:2c:cc:d1:05:fc:d0:18:2d:96:9a:
2a:e4:1b:80:a3:d1:09:d1:43:90:51:68:bc:c7:15:ba:ba:2f:
96:1f:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:54 2025 by rpki-client