This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa
File: 323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa (raw, json)
Hash identifier: VVAcNQ0sElvXB3Ieud2rqLCdPpVcfjWc5klPdZwlCTM=
Subject key identifier: A0:F4:52:73:C1:52:27:23:D3:5B:76:48:2F:9C:7E:7B:4A:E4:EA:3B
Certificate issuer: /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial: 17908DEA89757F1F183508C92869D77707D54875
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa
Signing time: Wed 12 Nov 2025 02:08:33 +0000
ROA not before: Wed 12 Nov 2025 02:03:33 +0000
ROA not after: Wed 11 Nov 2026 02:08:33 +0000
asID: 269411
IP address blocks: 2804:642c:c000::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:90:8d:ea:89:75:7f:1f:18:35:08:c9:28:69:d7:77:07:d5:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Validity
Not Before: Nov 12 02:03:33 2025 GMT
Not After : Nov 11 02:08:33 2026 GMT
Subject: CN=A0F45273C1522723D35B76482F9C7E7B4AE4EA3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:df:dc:a6:89:c7:f2:4c:a6:bf:87:c8:32:
1c:23:79:5c:9b:d0:dc:06:db:4e:f3:da:08:d2:01:
c4:bb:b5:88:24:c3:b2:92:45:b2:fc:f0:39:d9:42:
71:de:3f:3e:89:eb:f0:64:0f:bd:cb:b2:ca:66:a6:
99:15:6e:70:62:89:ae:fe:29:a5:78:37:ab:43:19:
f6:60:21:34:0b:c1:96:d9:a7:47:29:d2:59:e2:8d:
d6:e6:db:bf:a4:02:6e:f0:ff:b3:4a:d6:7e:3f:13:
2b:00:54:aa:92:27:10:f6:28:8e:03:d6:b2:6e:eb:
a3:17:28:97:75:c4:41:9c:dc:86:76:02:da:81:35:
4c:f4:57:0f:ef:2f:35:03:5f:cc:8d:a1:5a:1f:8a:
d6:dc:e2:33:c7:41:0b:08:79:61:37:94:13:1d:4b:
21:57:d9:a3:2c:7c:a7:b2:28:0a:a7:58:e8:16:88:
b5:49:70:15:3f:10:83:36:34:8d:a1:7d:6a:58:ae:
b3:68:d6:af:6e:3a:2c:e6:62:13:c3:ba:eb:78:47:
b8:fd:68:34:b7:bf:98:6e:8a:a1:9d:7f:ab:64:95:
58:cb:d8:6f:ad:8e:11:00:0f:20:26:7f:c8:a5:d0:
f0:98:5b:80:43:de:95:ae:62:03:73:91:3f:79:23:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:52:73:C1:52:27:23:D3:5B:76:48:2F:9C:7E:7B:4A:E4:EA:3B
X509v3 Authority Key Identifier:
keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:642c:c000::/48
Signature Algorithm: sha256WithRSAEncryption
06:cc:57:b6:c1:55:3a:11:6a:06:4b:6a:e7:86:9b:08:3a:4b:
28:2f:b0:b1:27:05:01:d1:61:4c:46:bb:96:ba:48:6e:8c:d1:
82:3b:92:37:b6:a7:72:4d:c7:a9:35:32:0b:d4:92:5c:8c:d7:
20:f0:3f:de:f4:4a:5b:ed:26:92:22:b1:09:20:6b:3c:c3:b9:
bf:b9:09:1a:68:a6:9c:d7:10:15:39:0f:62:57:39:56:12:bb:
36:b8:0c:f3:4e:37:2b:04:b3:ce:0b:58:e1:4d:b7:0c:ab:ba:
8e:6d:51:1f:e8:2f:83:7c:2f:3c:f5:a7:32:7b:5e:4f:1e:7c:
de:4c:5f:13:09:c3:90:f3:78:71:8d:e3:fa:af:3c:3f:74:e6:
11:87:d2:f9:f4:07:9e:59:d9:33:be:a1:4e:e3:df:93:21:92:
0e:f8:15:b1:2a:30:ce:44:61:58:68:94:1c:ee:e5:f5:22:9e:
43:c6:99:38:ba:6f:0e:83:b3:08:fa:08:23:f1:94:b8:33:96:
c5:9a:22:0e:b4:a6:b6:c4:45:27:ed:0a:6c:9c:6b:7f:4d:f8:
4a:9b:86:ed:06:b3:62:33:a2:a6:a4:c5:2a:0e:f9:a3:9b:c1:
2f:a1:92:c5:54:4e:a2:73:5f:2c:73:e2:a6:c5:cf:ff:8d:2d:
2f:4d:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:24 2025 by rpki-client