This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d313238203d3e203631373631.roa
File: 323830343a313865343a3a2f33322d313238203d3e203631373631.roa (raw, json)
Hash identifier: 18YwBbRWwHlR0eBUfqkps7utV5wOE3BbjJDUuXKbFIs=
Subject key identifier: F8:F4:12:9A:CD:A1:D1:5D:46:33:0E:28:B4:A1:74:58:BB:76:8A:CB
Certificate issuer: /CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
Certificate serial: 5BB904A898B89AAD6636C7929908F2DA0BD32933
Authority key identifier: 2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d313238203d3e203631373631.roa
Signing time: Tue 11 Nov 2025 14:56:02 +0000
ROA not before: Tue 11 Nov 2025 14:51:02 +0000
ROA not after: Tue 10 Nov 2026 14:56:02 +0000
asID: 61761
IP address blocks: 2804:18e4::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl
rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b9:04:a8:98:b8:9a:ad:66:36:c7:92:99:08:f2:da:0b:d3:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
Validity
Not Before: Nov 11 14:51:02 2025 GMT
Not After : Nov 10 14:56:02 2026 GMT
Subject: CN=F8F4129ACDA1D15D46330E28B4A17458BB768ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:42:f3:da:13:f6:a4:23:6e:58:6e:e8:3a:
65:af:13:ec:50:96:a4:e4:da:8d:3f:df:00:e5:fa:
66:89:56:f2:b6:52:a6:36:17:c8:39:98:bf:7e:a5:
8a:7c:17:f1:83:2c:43:2c:f8:64:4f:55:64:10:54:
91:6f:22:f0:59:ec:f7:9a:66:bc:08:a9:a2:75:5d:
54:52:b6:39:5b:02:30:09:72:fc:24:64:c9:de:aa:
6d:bf:99:7d:93:d5:5d:c8:59:5c:a6:46:7d:cf:f6:
b6:c7:db:22:d4:a5:ae:f1:0e:25:f1:5b:53:3e:ce:
b1:a9:4b:11:e9:7b:a6:81:0c:97:3c:58:ca:15:e6:
7e:6c:ee:2a:d8:8c:02:c1:9b:2c:87:bb:11:7c:01:
d7:d2:23:1f:28:14:ea:2b:2a:60:d1:dd:9a:6b:c7:
2c:8a:5b:87:b6:33:5c:40:4c:e3:3e:36:f5:43:ce:
d9:09:0b:9e:fb:ea:16:eb:95:f3:fb:66:72:f2:eb:
6f:9d:3f:e9:b5:b9:c7:09:1b:39:88:f1:53:bc:89:
32:c9:22:31:bc:d6:e2:17:3d:71:76:ad:1e:3b:e9:
17:19:90:b5:2b:33:0b:d0:63:18:b0:7d:41:91:64:
13:be:39:f3:e9:d8:a3:fc:68:20:ce:55:b7:2b:07:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F4:12:9A:CD:A1:D1:5D:46:33:0E:28:B4:A1:74:58:BB:76:8A:CB
X509v3 Authority Key Identifier:
keyid:2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d313238203d3e203631373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:18e4::/32
Signature Algorithm: sha256WithRSAEncryption
55:b5:21:e7:7b:fb:bf:c4:5a:11:9c:f7:eb:58:f5:fe:b3:16:
02:b3:0a:58:14:44:0c:0e:16:ed:b3:a7:ff:21:aa:ad:c0:dd:
2e:9f:3b:20:13:6a:97:61:37:15:30:bc:e1:e4:c0:50:87:eb:
ff:90:80:fc:c0:b1:0f:0d:8b:66:27:03:b5:e8:00:ec:39:7c:
87:3e:c4:51:99:4a:47:a5:1b:c6:b9:66:bb:ff:85:96:3f:30:
f1:92:ec:19:ab:a1:bc:38:9d:4f:ba:1a:03:bc:e1:6d:76:1e:
06:be:ae:da:ad:04:05:b6:4b:fd:e3:cc:b0:57:a1:9e:f2:0d:
f9:6f:b5:30:fa:ce:72:ca:bf:c8:63:ef:06:41:10:0e:87:be:
25:bc:74:94:39:79:d0:af:68:f4:9f:16:09:85:39:d0:8f:be:
05:d9:a8:85:b5:6d:4b:d3:cf:d2:54:cb:4c:6d:e0:b2:a1:35:
58:1b:41:29:e5:fb:6a:a8:48:9c:8e:4e:92:6f:1e:c8:71:75:
39:a0:c9:2c:a4:5c:be:03:d3:1f:90:1d:5d:3c:31:a8:ef:43:
b0:b0:a2:d9:c0:bd:6d:63:c4:23:18:08:60:9f:56:04:1e:58:
0c:e2:8d:95:b3:af:d4:3b:7e:ed:72:16:c5:cb:46:7e:ea:92:
8f:58:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:10 2025 by rpki-client