This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a3a2f33332d3333203d3e203631373932.roa
File: 323830343a313936343a3a2f33332d3333203d3e203631373932.roa (raw, json)
Hash identifier: TFlgZio72uHQ4yY7JK4Rn7/kCiIBld1nj6UDCea26II=
Subject key identifier: 71:70:79:CA:C9:17:24:C7:3F:42:D0:C0:57:62:F4:0D:B0:17:D3:E0
Certificate issuer: /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial: 01994D12E40F7034FDB0CD02A3279C26E82F8C66
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a3a2f33332d3333203d3e203631373932.roa
Signing time: Thu 11 Dec 2025 20:41:43 +0000
ROA not before: Thu 11 Dec 2025 20:36:43 +0000
ROA not after: Thu 10 Dec 2026 20:41:43 +0000
asID: 61792
IP address blocks: 2804:1964::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 18:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:12:e4:0f:70:34:fd:b0:cd:02:a3:27:9c:26:e8:2f:8c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
Validity
Not Before: Dec 11 20:36:43 2025 GMT
Not After : Dec 10 20:41:43 2026 GMT
Subject: CN=717079CAC91724C73F42D0C05762F40DB017D3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:44:c4:ac:d6:8a:33:e2:66:2b:c3:74:a8:
e9:4d:8c:6f:61:15:05:94:0d:7c:be:e5:67:fd:7a:
f7:ef:46:0b:02:74:00:5c:7f:f2:bc:b4:85:78:54:
ee:7d:f0:44:94:a2:7b:8f:78:13:a0:f9:31:09:19:
cf:94:a0:67:40:ba:da:eb:9f:38:c5:ab:1c:af:40:
f4:51:46:c9:05:2d:69:49:03:65:a8:e8:eb:2a:1a:
a8:79:80:3a:48:2f:5f:39:12:11:25:14:23:d0:b7:
ab:a1:9b:a8:ee:6b:20:ff:9d:dc:00:a5:1e:73:4d:
df:56:f2:4b:5d:61:60:46:b1:46:a9:e9:52:5e:41:
14:d8:34:ee:96:eb:9b:8d:2e:34:95:50:df:0d:eb:
94:e0:14:ef:fd:96:86:02:d4:3e:cc:ff:f4:c5:c6:
a8:47:a9:36:96:5c:6d:95:e1:ae:68:55:25:c0:f0:
d1:8c:8b:14:f6:03:6e:f2:8a:bb:e3:58:92:c2:89:
7c:22:e3:43:75:28:d4:19:91:94:d0:a8:a3:fe:79:
07:90:f8:0b:ce:46:b6:6c:76:97:60:31:e2:62:49:
21:b4:3a:02:ac:91:48:7e:b1:a9:f7:72:8a:2e:48:
18:db:3a:43:67:74:f2:70:8b:b1:ea:11:4e:a6:db:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:70:79:CA:C9:17:24:C7:3F:42:D0:C0:57:62:F4:0D:B0:17:D3:E0
X509v3 Authority Key Identifier:
keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a3a2f33332d3333203d3e203631373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1964::/33
Signature Algorithm: sha256WithRSAEncryption
40:98:88:66:0c:3f:50:fe:60:79:b1:24:45:59:fa:c6:10:9c:
86:fe:f9:22:ad:68:33:3f:9a:01:eb:e9:d4:19:72:7c:d5:6f:
c3:db:a3:f4:7b:02:70:11:25:cc:eb:46:b5:ef:93:ad:32:4e:
88:99:af:80:9b:7b:0d:cd:6e:63:84:d4:fd:dc:b8:b7:72:9d:
48:ab:58:e7:f7:be:95:52:79:0f:02:a3:27:84:63:61:f8:b2:
5c:d4:8a:a0:11:1c:a8:2f:f1:aa:68:2a:b2:a2:5f:03:47:4d:
d0:a0:8f:00:43:14:17:75:1c:fa:6f:3f:98:70:61:a5:ef:95:
47:87:03:4d:b7:6b:4b:34:ae:31:cf:49:81:7f:02:ee:11:8d:
04:da:cd:4e:ba:53:a5:53:7a:47:ec:60:5f:08:9a:66:4d:b5:
21:5b:7a:d2:5d:fd:a2:c5:18:69:4c:77:b6:4e:03:63:35:22:
6a:a8:07:be:7d:a6:d7:15:82:12:1b:d8:9f:99:93:40:f0:92:
90:b9:76:ad:ed:dd:55:6b:fa:b3:46:33:b8:80:14:32:5a:80:
0c:d5:20:00:70:8c:72:cc:2f:4c:e4:2f:c9:11:f2:53:84:81:
73:06:eb:c5:08:c7:85:f3:66:9f:93:dc:3e:d1:15:d1:9d:84:
2c:b4:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:52:04 2025 by rpki-client