This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/323830343a38303a3a2f33322d313238203d3e203533303736.roa
File: 323830343a38303a3a2f33322d313238203d3e203533303736.roa (raw, json)
Hash identifier: ORNgJYPfJWO4oKJCjIhvum+lPkxOSMY/85AD++IU2VA=
Subject key identifier: 98:B5:B7:F6:23:89:95:64:ED:3E:7E:47:8C:25:A5:DF:04:61:3D:E0
Certificate issuer: /CN=76C4776FBE20DB3195620B86F139D481D1E270D0
Certificate serial: 7756CC383B7C696B35514F3E93DBC5CE49257E0C
Authority key identifier: 76:C4:77:6F:BE:20:DB:31:95:62:0B:86:F1:39:D4:81:D1:E2:70:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C4776FBE20DB3195620B86F139D481D1E270D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/323830343a38303a3a2f33322d313238203d3e203533303736.roa
Signing time: Thu 08 Jan 2026 14:12:17 +0000
ROA not before: Thu 08 Jan 2026 14:07:17 +0000
ROA not after: Thu 07 Jan 2027 14:12:17 +0000
asID: 53076
IP address blocks: 2804:80::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/76C4776FBE20DB3195620B86F139D481D1E270D0.crl
rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/76C4776FBE20DB3195620B86F139D481D1E270D0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C4776FBE20DB3195620B86F139D481D1E270D0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 13:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:56:cc:38:3b:7c:69:6b:35:51:4f:3e:93:db:c5:ce:49:25:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76C4776FBE20DB3195620B86F139D481D1E270D0
Validity
Not Before: Jan 8 14:07:17 2026 GMT
Not After : Jan 7 14:12:17 2027 GMT
Subject: CN=98B5B7F623899564ED3E7E478C25A5DF04613DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:92:25:c9:87:10:e7:50:45:7a:db:38:2b:
e8:bb:9d:7b:a2:b8:03:7e:f7:39:ef:b8:01:d3:0f:
5b:27:5d:de:ec:be:4d:2b:0a:32:f1:8d:d2:ef:d7:
f2:2b:d1:f3:84:3b:e4:12:13:ed:fb:7c:20:f2:24:
19:c7:e2:e8:c1:ac:4e:b8:8a:08:35:b2:ad:02:bf:
e5:e6:78:d3:4b:1e:ab:2f:1a:85:93:bd:ba:9b:07:
6e:33:ef:f0:d8:92:40:bd:df:60:46:12:f0:f2:a5:
1b:58:c4:cb:e4:25:eb:9d:3d:67:34:64:d3:04:e7:
b3:a3:dc:df:c1:60:31:34:cc:fe:96:b1:a0:f0:f5:
df:cc:74:6c:7f:12:91:d7:b8:a6:7d:6c:43:f1:94:
60:bb:be:6b:88:86:7f:98:93:8d:bd:69:38:80:3a:
35:60:7d:5d:18:0b:6d:c3:9b:8d:57:de:16:fa:49:
25:e1:71:6c:63:d8:c3:dd:f2:b4:cf:90:06:aa:75:
0b:43:34:9c:fe:82:b8:64:03:6c:07:a1:62:8b:e1:
cb:51:91:a6:80:6d:92:58:46:52:4b:12:52:7e:30:
8b:e8:52:7c:f3:b5:0a:05:35:3f:4f:55:a2:0b:be:
4d:6f:4a:d8:b6:59:aa:b1:df:cc:86:f3:a2:ea:2c:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:B7:F6:23:89:95:64:ED:3E:7E:47:8C:25:A5:DF:04:61:3D:E0
X509v3 Authority Key Identifier:
keyid:76:C4:77:6F:BE:20:DB:31:95:62:0B:86:F1:39:D4:81:D1:E2:70:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/76C4776FBE20DB3195620B86F139D481D1E270D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C4776FBE20DB3195620B86F139D481D1E270D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/323830343a38303a3a2f33322d313238203d3e203533303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:80::/32
Signature Algorithm: sha256WithRSAEncryption
40:dd:0a:a6:57:65:e9:55:4e:bb:e3:3f:69:34:3e:c4:76:9a:
08:07:a2:9b:ef:dc:6e:40:fd:88:78:8f:99:f7:3e:d9:d6:4e:
91:4f:34:39:d3:80:2f:66:83:77:37:0e:53:59:92:f3:7d:18:
7c:fb:c0:7d:68:89:4c:1f:88:cc:73:9a:c0:0d:9c:97:1a:c5:
8c:ae:48:45:c3:83:e6:bf:e1:03:02:c8:9f:61:03:57:ae:06:
bc:38:2d:17:cc:88:78:ec:ef:42:47:8b:6c:49:ed:01:4d:53:
cb:f0:83:20:0b:93:24:48:e6:03:97:b9:df:ca:74:21:d7:13:
2b:cc:f7:f0:f3:c7:9b:12:7a:25:a8:3d:dd:5c:c6:2c:a3:93:
ce:b8:0b:db:a2:54:85:d1:b2:5b:f4:9a:f6:1c:29:0d:a9:69:
37:22:eb:4a:05:0d:66:a2:e7:3c:e5:b7:ca:da:ec:db:04:47:
1c:bd:76:02:d4:05:f0:6c:f6:46:e8:ad:13:18:8f:1e:e7:66:
89:f8:42:7f:71:dc:69:8d:1a:b8:8c:68:80:b5:2f:dc:32:30:
1d:05:a2:03:57:12:40:c7:02:31:05:16:60:09:d7:43:23:a5:
49:54:31:0d:90:82:6e:f7:7c:02:3f:ab:4c:20:9a:32:91:42:
90:6b:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:39 2026 by rpki-client