This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
File: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (raw, json)
Hash identifier: jXI+rnnGScFRIoLsTqtkiZ6Ij3SjhmDHR0OsRnyshww=
Subject key identifier: 99:15:80:30:A1:57:D2:4C:24:BF:B0:A4:9D:DD:23:35:63:2A:0F:BD
Certificate issuer: /CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA
Certificate serial: 72D1B609C7549BED83B1E8AC5BD48E49EDF79650
Authority key identifier: 17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
Signing time: Wed 19 Nov 2025 07:08:04 +0000
ROA not before: Wed 19 Nov 2025 07:03:04 +0000
ROA not after: Wed 18 Nov 2026 07:08:04 +0000
asID: 267578
IP address blocks: 2804:4398::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl
rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 15:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d1:b6:09:c7:54:9b:ed:83:b1:e8:ac:5b:d4:8e:49:ed:f7:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA
Validity
Not Before: Nov 19 07:03:04 2025 GMT
Not After : Nov 18 07:08:04 2026 GMT
Subject: CN=99158030A157D24C24BFB0A49DDD2335632A0FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:75:b7:fa:8f:56:59:4f:b6:fa:71:d4:30:
ed:00:7c:01:47:16:09:8a:d2:53:0e:00:47:f0:ca:
83:a0:8b:06:88:85:ee:c0:47:ae:87:43:60:ba:ee:
39:9b:6e:9e:4a:74:d6:3f:d7:a5:4a:2f:37:2e:2a:
de:60:ad:0e:a3:86:76:9e:8a:db:4c:e2:ad:aa:10:
e3:df:8d:09:7d:05:c4:23:3e:71:5b:9e:6b:aa:7e:
5c:36:d0:92:2d:70:76:35:a1:f3:64:d9:47:8a:96:
7a:b4:2a:37:79:9e:54:ce:b3:ed:ad:14:7e:b3:f6:
0d:83:b3:db:ab:8a:17:f0:8e:51:b5:46:46:2d:8f:
2b:79:28:34:d4:e4:43:82:5e:e5:6f:05:6f:cf:88:
25:58:32:7e:08:34:98:ce:20:66:f5:e6:80:6f:e5:
db:7c:11:a5:da:e6:f8:d6:a2:4e:bd:36:66:a9:e4:
4b:d8:bb:0d:97:4a:28:de:0e:67:5e:0a:e0:00:fd:
37:00:fb:ec:8d:3a:be:fb:40:f0:81:54:23:19:fa:
a6:f1:ca:72:55:64:9b:32:92:87:13:83:01:b2:f7:
65:4e:c9:45:46:43:0f:2f:8e:bc:5b:7d:71:be:a6:
eb:84:a5:5f:02:2f:ec:f8:83:f1:eb:63:ed:38:97:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:80:30:A1:57:D2:4C:24:BF:B0:A4:9D:DD:23:35:63:2A:0F:BD
X509v3 Authority Key Identifier:
keyid:17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4398::/32
Signature Algorithm: sha256WithRSAEncryption
77:b4:04:9c:65:28:26:10:1a:6b:8b:cd:2b:d3:7d:05:14:f2:
58:31:64:6c:93:a5:34:6c:ac:28:6f:ba:b9:a9:90:d6:7b:18:
47:79:55:d2:37:ea:2e:d6:8f:f1:b5:60:64:fc:43:44:c6:b7:
ce:8e:0a:27:73:e9:26:10:dc:10:4d:e3:bb:06:d4:b2:d0:32:
35:17:1e:82:e2:fe:3f:4e:f0:ba:f9:a6:1b:40:74:93:31:ab:
91:39:6d:92:2f:cb:f6:84:a3:b9:b4:f2:49:4c:ca:d0:cd:14:
7e:25:44:9c:d5:cb:98:fb:59:73:c4:f2:20:b3:b8:36:18:40:
de:a3:91:cb:38:a3:53:b8:7c:83:3d:2c:59:94:24:f7:da:c8:
11:d0:69:d6:14:49:8c:ef:2e:e4:ae:85:fc:93:d4:0a:a9:c7:
e4:4f:82:95:d5:94:8a:78:b2:e2:e0:a8:7e:f6:03:8b:0e:e1:
10:ec:4b:32:50:c8:32:7e:53:fe:e3:73:8d:81:73:8c:51:2e:
3a:f1:ef:30:86:39:af:4f:dd:c2:38:8c:b0:16:36:a1:ad:ea:
41:31:3b:6c:3c:bd:4b:bf:ef:cf:c1:b4:b3:73:63:f1:33:bc:
f1:eb:69:5f:28:90:7b:d6:e2:63:4c:de:4a:00:d0:f5:e0:27:
dc:7c:35:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:48 2025 by rpki-client