This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a3a2f33322d3332203d3e203631373932.roa
File: 323830343a313936343a3a2f33322d3332203d3e203631373932.roa (raw, json)
Hash identifier: 6s7WcGjS8RTj+hTBcmIkW/kGxCIZHd+4rMUw97MmMOs=
Subject key identifier: 86:5B:5A:5C:50:91:DC:90:7E:D7:C3:57:37:49:00:D7:DB:A9:80:58
Certificate issuer: /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial: 60E4F98D960B2DBCBB1F9AC5980EC077B52ED869
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a3a2f33322d3332203d3e203631373932.roa
Signing time: Thu 11 Dec 2025 20:41:41 +0000
ROA not before: Thu 11 Dec 2025 20:36:41 +0000
ROA not after: Thu 10 Dec 2026 20:41:41 +0000
asID: 61792
IP address blocks: 2804:1964::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 18:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e4:f9:8d:96:0b:2d:bc:bb:1f:9a:c5:98:0e:c0:77:b5:2e:d8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
Validity
Not Before: Dec 11 20:36:41 2025 GMT
Not After : Dec 10 20:41:41 2026 GMT
Subject: CN=865B5A5C5091DC907ED7C357374900D7DBA98058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:98:aa:0e:2c:04:87:63:7d:47:38:b4:0b:
73:5c:a6:cb:f2:0b:e8:91:82:00:4a:37:0f:10:ed:
26:ff:4d:38:1a:eb:58:ec:95:c3:83:86:6c:37:70:
1e:65:64:7a:d1:a8:92:1c:83:c5:e2:54:94:5a:f8:
b1:fe:00:33:a9:f0:2c:ec:1d:56:61:59:37:46:f0:
6f:b4:02:ab:1e:8e:8e:ee:09:83:62:fd:64:b5:5f:
26:2f:ea:de:b5:56:64:3f:e5:85:35:21:4b:58:f4:
6e:89:3c:68:14:da:18:5f:e2:89:1a:1e:ef:9e:1c:
eb:ac:22:3c:1b:96:01:a6:8c:9f:91:9a:34:ad:cc:
72:ba:be:fc:6f:d6:29:3c:2b:cb:be:73:3e:dc:5d:
37:ff:55:61:d2:d5:ed:de:cb:b0:1d:3a:ed:37:db:
a7:6c:c0:a6:eb:c0:e5:13:04:81:01:87:31:7f:f9:
7e:a8:84:66:56:c7:5f:f5:70:5c:5f:cc:ec:4d:0e:
09:30:97:b2:81:26:54:c3:dd:b4:00:bd:94:83:ff:
a6:40:a9:31:70:3a:e5:b7:13:99:4a:d3:87:34:f0:
32:0d:03:39:22:57:02:6c:53:c6:56:41:1a:7a:7d:
a2:bd:6a:d5:95:37:30:a5:64:70:d6:5a:03:78:f2:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:5A:5C:50:91:DC:90:7E:D7:C3:57:37:49:00:D7:DB:A9:80:58
X509v3 Authority Key Identifier:
keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a3a2f33322d3332203d3e203631373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1964::/32
Signature Algorithm: sha256WithRSAEncryption
77:ea:4c:8c:af:5a:80:66:d5:4f:d5:f3:9f:ec:4a:a1:17:64:
54:32:ed:8f:01:c4:f6:e9:74:09:ae:19:a9:c9:4b:e9:dd:67:
76:10:8a:b3:95:cf:cb:20:4c:c3:ad:78:3b:13:e2:fa:6d:10:
2d:dd:eb:43:d5:bb:40:4c:91:de:74:c5:58:b0:cc:c5:9b:c0:
82:69:06:1b:90:59:05:3d:f4:55:0a:61:15:65:fe:70:7d:5f:
91:66:9e:4f:ed:bf:27:e2:fb:cc:96:e6:25:6d:ae:95:d2:37:
72:99:f8:da:9d:cb:b7:c8:78:85:e6:53:b1:09:b7:61:4a:4d:
94:11:be:11:f2:b7:9d:df:db:3c:33:fd:7d:6c:da:2d:9e:5e:
64:47:17:f0:53:07:72:a7:ed:00:fa:f3:d8:75:3f:0e:7a:14:
6c:2a:40:b4:8c:d8:e6:e5:a2:6e:a2:9b:2e:e1:de:40:19:61:
bb:86:1a:4a:ee:5d:f6:de:b4:91:53:1a:6f:9d:5b:19:3f:32:
52:d5:1f:30:57:39:a3:6a:e1:eb:27:5d:93:ef:0d:be:35:50:
de:10:7e:12:61:0a:9d:aa:a2:50:57:2d:f4:4e:74:e2:c5:01:
3a:74:07:a3:26:78:e3:db:e7:63:be:ae:14:1e:a7:9d:f3:10:
1f:56:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:52:04 2025 by rpki-client