This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3438203d3e20323733333530.roa
File: 323830343a386435343a3a2f33322d3438203d3e20323733333530.roa (raw, json)
Hash identifier: iKhZ9KokUcfIg5JLe4zTyBgv/gp+WtU6MBaPXrlEWKM=
Subject key identifier: E5:27:AE:79:3D:54:17:8D:53:C3:DB:91:F6:20:E1:70:05:63:BE:F6
Certificate issuer: /CN=613FAA413557F145002B707154580B79D61AF413
Certificate serial: 391AC0DD3FF5A5C1F73C292B3741A8F25C032ECA
Authority key identifier: 61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3438203d3e20323733333530.roa
Signing time: Mon 10 Nov 2025 17:36:09 +0000
ROA not before: Mon 10 Nov 2025 17:31:09 +0000
ROA not after: Mon 09 Nov 2026 17:36:09 +0000
asID: 273350
IP address blocks: 2804:8d54::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl
rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1a:c0:dd:3f:f5:a5:c1:f7:3c:29:2b:37:41:a8:f2:5c:03:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613FAA413557F145002B707154580B79D61AF413
Validity
Not Before: Nov 10 17:31:09 2025 GMT
Not After : Nov 9 17:36:09 2026 GMT
Subject: CN=E527AE793D54178D53C3DB91F620E1700563BEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:ff:9a:2e:29:75:e7:09:18:3f:51:a1:e6:
7a:3b:88:63:95:58:65:6e:4c:fe:5b:b5:d4:d7:d1:
88:72:be:3f:78:15:68:a9:ca:3f:65:77:1a:3c:0b:
c6:34:ca:00:3b:b4:22:cd:c4:ec:67:fe:d6:b8:3d:
35:86:61:6c:65:74:c4:78:40:8e:fc:ee:61:8e:6e:
57:0b:09:38:b8:83:15:85:82:71:0b:fa:4e:44:20:
e6:0e:b4:03:62:4c:2a:13:0d:4b:36:e5:d6:1d:fa:
6f:ac:f8:37:2d:65:13:d2:53:cf:64:b3:7f:b3:75:
cf:0a:97:eb:7c:6e:65:00:cf:cb:b2:b1:42:12:da:
da:89:5e:6e:94:6a:0a:f9:8d:0a:98:8e:a4:c3:a6:
8d:f8:85:40:aa:6b:f2:98:85:75:99:d9:30:35:48:
1f:41:7e:ac:52:47:7f:99:ea:c9:a6:cf:ae:e0:a7:
70:1b:48:fc:8f:cb:c1:c2:aa:c5:1e:68:f5:20:ca:
b4:26:d9:80:66:43:48:ed:79:32:cb:34:41:42:63:
81:3d:4a:02:69:b0:a2:09:50:a1:1c:9e:1b:5a:41:
ed:54:66:5a:03:94:50:22:b1:98:ca:d0:7d:fb:6b:
f9:0b:23:ca:83:2f:d9:63:39:b2:a5:77:cc:33:de:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:27:AE:79:3D:54:17:8D:53:C3:DB:91:F6:20:E1:70:05:63:BE:F6
X509v3 Authority Key Identifier:
keyid:61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3438203d3e20323733333530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8d54::/32
Signature Algorithm: sha256WithRSAEncryption
a4:4e:ea:82:77:5b:1d:3d:bb:cc:36:64:42:7e:8b:fb:9f:18:
65:05:f8:93:15:64:a6:95:cc:08:14:65:79:39:ba:67:ca:4a:
d5:61:93:05:b3:84:9a:ab:8a:d0:57:71:c5:60:91:f4:c8:81:
b6:8e:c9:b0:0d:58:0c:eb:77:2a:f0:6b:35:10:d2:19:58:fd:
08:85:34:f3:40:7b:43:ed:c5:e5:7a:36:9c:6e:b7:42:21:d9:
4d:cb:cd:88:40:ea:61:87:b3:2c:7c:9c:07:27:95:d6:e7:16:
e3:95:f2:22:26:e5:bb:37:6f:ca:58:be:a5:09:19:bd:a3:89:
4d:b8:70:ec:ce:8b:2a:49:47:c2:b8:d2:18:95:70:cf:13:be:
fc:7e:ed:06:d3:a6:9d:2d:fa:e3:ba:57:51:a7:47:0b:7f:6d:
91:c6:3f:3e:67:ce:68:a5:49:68:a0:a8:00:3e:e2:58:2a:81:
24:b2:7d:cd:8e:cc:15:92:b5:5e:ee:83:ea:5d:9f:df:d5:73:
bd:19:6d:69:1d:5b:bf:fa:3d:42:4f:be:ad:31:06:55:80:a6:
71:5e:7e:41:36:57:63:a4:e2:32:f9:f7:85:8e:ea:3f:29:a5:
c2:f2:f5:7b:fd:b0:14:a4:09:d0:24:ea:93:f0:df:fd:f1:c5:
dc:6b:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:35:10 2025 by rpki-client