This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa
File: 323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa (raw, json)
Hash identifier: xnXDzoH3/S68frwVKP+UPecXvFgXSM56k4h5r+dt1js=
Subject key identifier: D6:B0:BF:AC:48:67:26:68:49:ED:D8:D3:B1:52:02:96:8F:A5:93:FA
Certificate issuer: /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial: 50B138A1625A78E7484AE0E13F032F02474A2E8E
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa
Signing time: Tue 06 Jan 2026 13:59:01 +0000
ROA not before: Tue 06 Jan 2026 13:54:01 +0000
ROA not after: Tue 05 Jan 2027 13:59:01 +0000
asID: 268529
IP address blocks: 2804:529c:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b1:38:a1:62:5a:78:e7:48:4a:e0:e1:3f:03:2f:02:47:4a:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Validity
Not Before: Jan 6 13:54:01 2026 GMT
Not After : Jan 5 13:59:01 2027 GMT
Subject: CN=D6B0BFAC4867266849EDD8D3B15202968FA593FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:69:28:98:22:df:f8:55:f5:68:e1:60:14:
b1:87:24:1e:73:73:99:d7:21:86:13:50:67:23:8a:
39:cc:1e:fc:c3:e3:1d:7e:27:25:36:28:3f:85:06:
75:e9:f2:7b:ff:b6:19:09:7a:44:15:69:32:a9:18:
fb:c6:05:a7:0c:85:be:5f:5d:86:d2:df:54:cf:f6:
02:1a:34:17:25:51:d4:79:2b:db:d5:ac:8c:24:81:
05:28:16:66:b8:5d:5f:3a:fe:fc:fa:c1:45:05:fb:
5b:57:13:6f:31:4b:d1:9f:42:86:15:c8:0b:30:68:
b2:a1:7a:fd:17:5d:57:d7:8d:d1:bb:17:78:ba:36:
84:bc:8a:b1:c5:2a:46:f0:b7:f5:2f:f5:89:1e:6b:
3b:d0:c4:3c:c3:2c:af:a3:1b:ed:80:bf:84:99:c1:
a6:8b:4b:8d:23:a0:b8:9d:d7:c1:c2:2d:9e:93:97:
7e:e8:38:71:63:13:ed:6b:b5:12:99:af:24:2f:07:
48:44:6d:67:21:6e:c5:3f:ee:69:98:42:0b:9e:57:
2f:02:52:a4:2f:60:28:4b:72:dc:a6:b5:31:b9:e9:
cc:66:30:89:45:49:62:dd:9d:e2:96:00:48:68:05:
f3:11:fe:8f:c4:9d:32:ba:b6:5c:c9:41:64:fc:58:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:BF:AC:48:67:26:68:49:ED:D8:D3:B1:52:02:96:8F:A5:93:FA
X509v3 Authority Key Identifier:
keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:529c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
51:d8:3f:7b:1d:b5:84:e8:b4:73:2d:73:88:22:f7:05:10:c8:
0f:ad:02:9d:83:96:ff:a4:ae:b6:62:9d:04:7f:e7:37:48:94:
79:7f:20:91:ea:1a:4e:6f:95:f1:fc:ec:55:7d:94:78:73:1b:
43:d8:58:17:f0:a3:0e:61:1b:c7:a1:b6:41:aa:6b:6e:a0:9a:
c6:c6:28:ec:96:0b:0d:5c:18:62:52:76:d4:69:7f:e4:8c:e3:
fe:4f:c1:13:78:dd:95:f5:c5:fe:db:37:fc:d8:15:4d:de:39:
bb:b8:9b:a7:81:f3:60:12:42:a1:ad:79:53:d4:57:29:74:c0:
5c:76:15:c0:4a:b4:1b:b3:49:b6:8a:01:3d:86:c4:94:67:50:
0c:8b:ab:e3:e6:fa:bd:7f:dc:6b:fe:38:db:61:07:b9:c7:1b:
67:56:80:39:4d:54:a6:90:18:78:ff:dd:cc:f8:d9:a9:3c:1e:
b9:c3:a3:25:d2:1e:7a:78:14:87:3c:89:0e:b4:76:b4:54:36:
dc:5c:32:2c:f5:8c:6b:a3:29:b7:6b:48:6d:a0:74:c2:05:a1:
42:9e:8d:91:08:37:0b:06:f7:5a:23:7b:9d:42:b4:76:c9:01:
79:40:dd:1b:eb:0a:7a:ce:80:f3:25:0e:f9:5b:27:b9:23:84:
20:61:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:32:10 2026 by rpki-client