This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
File: 323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (raw, json)
Hash identifier: 9yJTB1aQNRZQ7VBDWfm0bQSwLjvSqD2OSGJcvOqnuOc=
Subject key identifier: C6:F8:E4:39:1F:A7:17:64:24:F5:84:BF:6C:8C:1D:D1:56:37:39:4E
Certificate issuer: /CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
Certificate serial: 22CA04ED14A6FB9891828FE7211991C5E44763A3
Authority key identifier: BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
Signing time: Wed 07 Jan 2026 12:34:26 +0000
ROA not before: Wed 07 Jan 2026 12:29:26 +0000
ROA not after: Wed 06 Jan 2027 12:34:26 +0000
asID: 269526
IP address blocks: 2804:65fc::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl
rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 04:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ca:04:ed:14:a6:fb:98:91:82:8f:e7:21:19:91:c5:e4:47:63:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
Validity
Not Before: Jan 7 12:29:26 2026 GMT
Not After : Jan 6 12:34:26 2027 GMT
Subject: CN=C6F8E4391FA7176424F584BF6C8C1DD15637394E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:d2:96:ca:f1:09:8e:29:32:bb:7d:c2:45:
c4:c3:74:ef:c8:a0:54:9b:d1:8f:d9:ec:ae:55:7f:
c4:e8:b9:54:55:bc:9f:b2:bc:c9:4c:cb:1b:c0:8d:
b0:3b:48:1f:d1:e4:23:c9:b7:81:82:30:95:9e:91:
4e:b7:9b:c6:51:a8:43:9d:31:c9:a6:d5:69:25:b0:
ad:48:f1:77:e6:37:47:3b:05:8f:f8:5a:fc:52:4a:
6d:c1:c1:c0:04:d2:ef:8f:57:26:f1:02:e0:ae:31:
13:6c:44:6a:05:1e:b0:e3:db:54:d2:98:f8:38:83:
37:0e:7c:39:fe:6e:22:8a:33:1c:9f:a4:56:eb:91:
a7:77:26:d6:d6:5f:67:1f:95:6d:f2:75:e4:df:c9:
15:04:c8:9b:db:18:58:3d:de:4b:2f:b9:67:0a:c7:
74:46:15:cb:61:9f:fc:f7:4b:14:52:b1:77:bd:2b:
d7:2f:46:e8:0d:1a:97:e2:62:ab:e8:da:c9:50:ef:
54:0d:a1:d2:f7:ae:20:b4:5b:87:64:c5:1a:8b:ad:
22:17:a3:1a:db:29:05:80:cd:28:d5:ae:08:53:54:
fe:d9:53:b5:86:13:91:2b:1b:7b:96:69:b1:d1:da:
dc:08:f7:89:74:bd:ae:e6:f1:6f:b0:97:d7:05:4f:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F8:E4:39:1F:A7:17:64:24:F5:84:BF:6C:8C:1D:D1:56:37:39:4E
X509v3 Authority Key Identifier:
keyid:BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:65fc::/32
Signature Algorithm: sha256WithRSAEncryption
8f:c9:d9:98:15:4a:2e:17:2e:da:a3:cd:d8:1d:67:2a:29:76:
6b:2e:f6:81:c1:34:41:63:46:d0:00:9a:d4:ba:79:6a:34:d8:
04:6c:2c:6b:5a:9b:b3:64:f3:d8:a1:87:52:66:7a:aa:c9:66:
42:d2:2c:25:98:0e:e8:de:6f:34:7f:4b:d3:30:a5:bd:fa:3b:
7b:68:a2:b9:f2:69:3c:ae:1b:11:0d:2a:54:a1:f4:dd:b5:9d:
ee:7a:54:d2:f2:29:da:3d:f0:07:72:d9:63:8a:49:c5:d3:f4:
20:f3:58:b2:50:2f:c8:d0:87:1e:50:49:45:39:66:8e:ab:c5:
13:26:a6:9a:4f:a1:02:97:83:cc:b8:da:71:b7:a4:9f:5f:ac:
32:79:1f:08:29:04:16:e0:91:62:05:ec:fc:fb:8a:3e:1e:e6:
e7:a3:b9:36:a9:21:f3:7c:ab:b5:69:96:82:11:10:ea:e1:7f:
92:e8:a6:9e:bc:b3:85:d7:a9:2e:cf:14:88:ec:6c:8c:a4:b6:
cf:11:9a:70:61:da:4a:a1:3f:4d:f1:1b:14:f7:cf:f5:0c:b4:
12:d3:87:91:cb:3d:c8:dd:ea:9e:68:b8:89:b3:97:3d:b9:9e:
90:d1:45:7e:ce:46:23:fe:06:6b:fd:1b:63:ea:45:bb:c2:21:
b3:dc:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:00 2026 by rpki-client