This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/323830343a353865633a383030303a3a2f33342d3334203d3e20323638313538.roa
File: 323830343a353865633a383030303a3a2f33342d3334203d3e20323638313538.roa (raw, json)
Hash identifier: EyG8AOsQG7J6RIzhgT2MEL8O6xALhyj35z12n6/0Bv4=
Subject key identifier: 2B:2D:14:E9:E2:63:12:19:42:FE:83:24:15:B1:74:B3:D9:55:1A:CD
Certificate issuer: /CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
Certificate serial: 20DE5D7D124468892004DE1CE295E285A33D74F0
Authority key identifier: 87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/323830343a353865633a383030303a3a2f33342d3334203d3e20323638313538.roa
Signing time: Fri 16 Jan 2026 17:05:33 +0000
ROA not before: Fri 16 Jan 2026 17:00:33 +0000
ROA not after: Fri 15 Jan 2027 17:05:33 +0000
asID: 268158
IP address blocks: 2804:58ec:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl
rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:de:5d:7d:12:44:68:89:20:04:de:1c:e2:95:e2:85:a3:3d:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
Validity
Not Before: Jan 16 17:00:33 2026 GMT
Not After : Jan 15 17:05:33 2027 GMT
Subject: CN=2B2D14E9E263121942FE832415B174B3D9551ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:07:f2:e7:a7:df:d1:7d:1a:25:12:96:fa:
5c:ea:07:8f:f3:d5:90:11:19:4e:69:05:1e:6c:66:
9b:32:ff:8e:20:89:7b:b7:47:88:12:8e:b6:73:f0:
60:d6:49:d4:6a:74:5e:42:0b:f7:81:08:23:59:f1:
dd:63:0a:74:36:37:e9:7e:86:42:02:30:3f:3d:dd:
7b:8d:30:3e:cc:2b:05:75:9b:c7:dc:17:7e:4f:34:
89:61:34:3e:74:8e:2a:f5:b1:b6:28:76:8a:ce:4a:
cd:a7:d3:02:40:ec:e6:ed:f8:88:23:b3:5d:9a:07:
24:55:0e:21:49:df:00:d1:11:e5:ff:17:38:3b:fe:
56:8b:ab:0b:85:f0:37:d4:51:57:af:eb:ac:ed:69:
32:be:42:68:a7:3c:15:0d:b0:d1:89:73:4b:2c:4a:
6b:65:02:3a:1e:3c:07:7a:83:52:1a:66:e5:4d:4a:
08:f2:49:75:1f:27:cf:8b:45:8c:03:ea:d8:cd:d7:
51:c6:2e:cb:e4:0f:38:7b:28:d8:d7:d2:ca:86:c3:
f9:5e:57:98:13:c3:10:73:be:56:54:87:6f:aa:70:
61:4a:3d:c4:57:04:4c:e8:36:01:1c:57:8e:c9:2d:
47:ae:6b:e8:e0:c1:c3:2d:28:a0:0c:99:47:1b:c2:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:14:E9:E2:63:12:19:42:FE:83:24:15:B1:74:B3:D9:55:1A:CD
X509v3 Authority Key Identifier:
keyid:87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/323830343a353865633a383030303a3a2f33342d3334203d3e20323638313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:58ec:8000::/34
Signature Algorithm: sha256WithRSAEncryption
b4:2b:82:08:af:f8:e6:64:22:80:32:39:1f:97:98:cb:86:dd:
52:5c:82:2f:65:fa:ac:16:ff:e2:c8:9a:71:3a:63:90:97:6c:
43:9e:13:0c:25:b2:20:ab:33:54:2a:2d:93:20:6d:38:b5:7c:
b7:46:36:ea:4a:47:ad:03:1f:cc:6c:88:c8:43:55:ac:49:0b:
0f:9d:89:03:97:65:be:ae:5e:b1:35:d0:2f:d8:bd:7a:2b:f1:
32:34:1f:c6:ab:f4:ad:5c:d9:57:40:03:38:45:9d:f7:db:a1:
d1:8e:9c:8b:9c:74:53:bd:6d:b1:c9:a5:e4:c1:7f:bc:a5:76:
fc:d4:79:91:25:59:6c:8f:b9:4d:cf:85:1a:b2:f5:df:00:3f:
d6:69:bf:64:99:c1:1c:1a:62:3a:25:ed:18:a4:08:ac:21:c5:
82:15:a3:1c:69:27:c6:69:f5:5d:d0:52:6a:2e:04:f5:ad:ed:
d6:8b:b4:90:6d:6d:0b:a7:90:5c:e4:4a:4c:0d:00:c5:cb:aa:
74:d7:18:12:8f:2e:bf:e8:49:66:a1:6f:78:72:e9:cb:20:be:
08:49:3d:82:be:d2:b7:55:4f:a0:66:e3:d5:17:fe:3a:9f:93:
45:23:87:e3:da:8c:f3:97:c2:ef:57:9f:43:33:7d:28:41:bc:
0d:f3:48:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:23:12 2026 by rpki-client