This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
File: 323830343a336130383a3a2f33332d3333203d3e20323636303636.roa (raw, json)
Hash identifier: uEn5GGDBxey7gWcTkZjO5ydHCFxNcXVzHPYF9zUI86Y=
Subject key identifier: 60:9C:5E:BB:95:02:16:4F:4D:A4:47:F1:2C:7C:A0:5A:F3:97:90:C4
Certificate issuer: /CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA
Certificate serial: 42B6D5D30A402309001A0968351D572D2CD3ECEC
Authority key identifier: 76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
Signing time: Mon 15 Dec 2025 19:10:37 +0000
ROA not before: Mon 15 Dec 2025 19:05:37 +0000
ROA not after: Mon 14 Dec 2026 19:10:37 +0000
asID: 266066
IP address blocks: 2804:3a08::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl
rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 18:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b6:d5:d3:0a:40:23:09:00:1a:09:68:35:1d:57:2d:2c:d3:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA
Validity
Not Before: Dec 15 19:05:37 2025 GMT
Not After : Dec 14 19:10:37 2026 GMT
Subject: CN=609C5EBB9502164F4DA447F12C7CA05AF39790C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b2:48:2e:0a:5b:b9:16:8b:54:35:ae:39:32:
fb:da:0a:5b:43:4e:89:16:ae:69:aa:f2:81:32:14:
84:21:b1:d5:9e:9e:97:77:7a:c8:c9:90:f5:3e:90:
8b:0e:d5:12:ad:dd:ee:88:d7:39:5f:90:3b:d4:f0:
e7:b7:21:fa:40:4c:58:fa:93:58:01:b2:d7:57:43:
ca:25:41:c0:5b:23:37:65:63:c7:2a:62:6b:db:d2:
a6:a4:9e:13:55:ca:6b:3c:6b:05:cf:91:fa:a5:c5:
9e:34:ed:62:f1:13:14:81:04:4a:7c:06:88:22:4a:
85:71:dc:9b:e7:42:69:b0:75:d1:d2:61:8e:b8:b7:
01:9e:67:7f:68:1a:86:52:4a:d0:3c:fe:5b:59:15:
84:3c:3a:4a:41:d3:1f:74:4f:98:49:88:f5:f0:ac:
ab:e7:4c:49:0c:08:44:f0:b9:fb:1c:db:af:8e:8d:
98:00:b9:fe:fa:21:59:a8:b9:01:40:6a:1b:c2:e5:
1b:79:ef:26:1f:15:29:d7:03:41:20:94:d9:7d:7b:
dd:5e:8f:7f:d7:4c:c2:f4:1d:0f:ac:3a:41:dc:f4:
f8:d0:77:a1:3e:bd:dc:3c:b4:d0:91:61:3a:ff:61:
a0:71:de:3d:a5:fa:b7:33:e7:2c:a5:39:c3:bc:cb:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:5E:BB:95:02:16:4F:4D:A4:47:F1:2C:7C:A0:5A:F3:97:90:C4
X509v3 Authority Key Identifier:
keyid:76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3a08::/33
Signature Algorithm: sha256WithRSAEncryption
7e:53:6a:e2:b2:18:0d:8b:56:f4:5f:bf:c5:31:23:41:58:de:
27:ad:38:bb:50:7c:77:85:92:4a:b1:29:aa:72:7f:e9:7e:98:
20:12:9d:3a:9f:f8:4d:25:71:22:ae:83:aa:87:70:6f:95:6c:
10:83:e0:4f:24:d0:1a:76:a9:a8:24:05:a2:84:46:4e:ad:cb:
32:6b:4d:2e:55:73:23:f7:41:aa:ef:40:e8:d7:3f:ff:88:9d:
d0:e8:87:7b:b9:f0:c7:1c:7b:cf:a4:8f:3c:db:b5:b3:07:21:
60:5e:5a:74:81:ab:86:0f:df:b3:3d:d1:9b:db:ca:48:c1:32:
3e:63:d7:e2:09:24:55:23:16:51:28:43:9c:e3:95:f7:85:ef:
3b:f6:5e:fd:2e:19:2d:90:5b:d9:5b:d4:66:8e:b0:24:bb:c9:
fe:e7:5f:5a:9b:4a:26:a2:82:6a:df:6a:e1:0d:3d:5a:83:fa:
51:b9:8a:d9:c4:ab:4b:81:b6:6d:bc:dd:67:12:3c:30:c6:bf:
6a:34:ec:e0:65:d0:fa:41:ef:35:9a:3b:bf:df:d8:96:b6:b8:
94:7d:3f:d2:8b:ab:38:d4:c5:43:9f:b9:78:91:ef:bb:0c:8a:
2c:9e:f3:a7:50:44:95:55:dd:42:ad:13:a0:aa:97:af:03:c9:
23:db:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:45:09 2025 by rpki-client