This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/323830343a363934303a3a2f33322d313238203d3e20323730323538.roa
File: 323830343a363934303a3a2f33322d313238203d3e20323730323538.roa (raw, json)
Hash identifier: 3tsYT8SUMOVUQyEdwK16B3lt0iXoYtumoCmOphT0MOo=
Subject key identifier: A9:AE:B5:2A:F8:8E:05:0F:74:FB:36:B3:E3:8A:D1:49:F6:08:CB:7C
Certificate issuer: /CN=208F84112F1A4B695E56F4EB839321D9C18D523D
Certificate serial: 2B5C6C76295A39826E6976BE3AEBAB93F6ACCAF1
Authority key identifier: 20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/323830343a363934303a3a2f33322d313238203d3e20323730323538.roa
Signing time: Thu 27 Nov 2025 11:56:50 +0000
ROA not before: Thu 27 Nov 2025 11:51:50 +0000
ROA not after: Thu 26 Nov 2026 11:56:50 +0000
asID: 270258
IP address blocks: 2804:6940::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl
rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 12:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5c:6c:76:29:5a:39:82:6e:69:76:be:3a:eb:ab:93:f6:ac:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208F84112F1A4B695E56F4EB839321D9C18D523D
Validity
Not Before: Nov 27 11:51:50 2025 GMT
Not After : Nov 26 11:56:50 2026 GMT
Subject: CN=A9AEB52AF88E050F74FB36B3E38AD149F608CB7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:75:2c:b5:69:2a:16:71:6c:f1:44:71:3b:
d3:75:14:b9:86:44:c9:d4:58:3c:e0:fe:ab:2a:c9:
cd:d3:b1:66:33:b8:cb:bb:d4:5b:cc:3c:e2:0f:1b:
9a:84:28:12:8c:f4:c5:7f:39:13:6e:61:56:cd:ac:
9d:a3:1a:65:9f:75:58:a4:2f:c6:d6:e6:4e:7d:af:
06:e9:25:86:39:45:68:ca:dd:07:78:a5:3f:75:5c:
dc:75:9d:ad:c2:08:4d:62:e1:4b:5a:e5:6a:9f:71:
c5:4b:71:6f:03:d7:da:66:8c:7a:25:e8:6d:ee:06:
b6:27:dd:00:78:50:d0:33:e8:c7:97:e0:a4:96:da:
96:87:91:e9:db:b9:56:26:88:79:fc:09:14:25:a7:
b3:2f:80:44:85:b0:d1:2c:3d:e1:d6:c3:ca:57:b2:
4a:f5:de:ee:6d:c6:5a:80:a1:9d:aa:9a:0c:9d:b8:
5d:ed:3b:ad:6a:08:2a:4a:9d:6a:59:43:f4:02:e8:
16:18:a3:fb:17:a0:34:2b:be:96:df:0d:29:ce:1c:
8c:f9:58:1f:2f:cd:a2:05:14:a2:7d:7c:41:72:b8:
f9:a2:b5:d3:f4:c1:9f:49:f2:75:b1:89:b3:a8:ac:
43:2d:29:d1:62:99:61:16:c8:ac:09:2d:08:2a:6a:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AE:B5:2A:F8:8E:05:0F:74:FB:36:B3:E3:8A:D1:49:F6:08:CB:7C
X509v3 Authority Key Identifier:
keyid:20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/323830343a363934303a3a2f33322d313238203d3e20323730323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6940::/32
Signature Algorithm: sha256WithRSAEncryption
94:c1:97:7d:8e:69:eb:5b:89:76:22:3e:15:10:07:91:88:3f:
8a:35:02:a3:9e:1b:c3:d0:61:87:bc:dd:fd:bf:e6:da:66:45:
e9:33:1e:a0:42:68:99:33:b3:c0:1f:46:63:e5:45:7d:7f:d0:
a1:3d:25:f5:92:a5:92:e8:58:dd:51:03:77:05:39:5c:06:4b:
97:da:2c:7f:a5:24:38:73:1b:2d:9b:80:cc:5e:80:09:61:a3:
6b:3e:15:a6:fc:b4:91:da:c7:3c:76:07:a3:3c:f9:c9:a0:5a:
e6:44:17:3d:70:88:d6:71:57:76:07:d9:c0:e3:12:ed:50:f8:
1c:81:4f:e8:70:53:84:2c:2b:44:2c:e6:ba:47:4d:a4:52:ef:
80:7c:7f:9d:97:3c:3e:4f:06:4b:31:99:be:b6:02:86:d7:f9:
b2:7b:3d:1d:c1:70:3e:c5:a2:36:59:ef:aa:22:1e:a1:a3:9c:
16:e1:88:13:43:f5:25:01:51:bb:86:07:7b:73:e9:48:e7:1c:
da:5b:d2:5a:16:5b:43:58:5d:24:61:60:7e:6d:b5:84:27:66:
74:f2:41:d5:2d:fa:c3:13:e0:03:18:86:a9:96:6e:63:fd:94:
1a:94:69:18:46:7c:da:de:64:40:63:1d:15:ba:9a:1f:8a:e3:
81:ee:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:11 2025 by rpki-client