This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a336231633a3a2f33322d3438203d3e20323632393037.roa
File: 323830343a336231633a3a2f33322d3438203d3e20323632393037.roa (raw, json)
Hash identifier: 9n5SWyqEtsKStIvQeJj/ggfNE5Is32lDMZq6DCR+dDo=
Subject key identifier: B1:6C:AD:C6:9F:2B:23:8B:2B:EA:49:C2:22:10:08:6E:8A:AF:A9:8C
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 45EAAEFAB623B64EA5A4BD2C6044E2470E42FC1F
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a336231633a3a2f33322d3438203d3e20323632393037.roa
Signing time: Thu 08 Jan 2026 12:12:51 +0000
ROA not before: Thu 08 Jan 2026 12:07:51 +0000
ROA not after: Thu 07 Jan 2027 12:12:51 +0000
asID: 262907
IP address blocks: 2804:3b1c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 18:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ea:ae:fa:b6:23:b6:4e:a5:a4:bd:2c:60:44:e2:47:0e:42:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Jan 8 12:07:51 2026 GMT
Not After : Jan 7 12:12:51 2027 GMT
Subject: CN=B16CADC69F2B238B2BEA49C22210086E8AAFA98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:ae:8c:c9:63:da:2f:65:21:5d:21:4f:b4:
b0:6e:a1:19:66:8a:99:5f:5b:73:ba:24:b7:22:62:
3e:4a:e3:53:16:59:8a:2c:a9:b7:23:83:d8:03:9f:
b2:07:fd:12:a3:57:16:8b:d9:d6:9c:69:87:44:ad:
51:55:6b:2c:ff:69:3f:2d:ce:be:5a:b1:0f:06:94:
5f:72:64:00:f7:cd:f5:d0:7a:62:33:98:62:02:38:
66:aa:7b:bb:69:f2:9e:2f:57:c4:dc:73:3f:be:f2:
d7:3d:36:d6:42:a5:bd:f7:53:89:d3:ac:5d:b0:73:
15:f6:b8:11:e6:10:e4:62:15:bc:b6:a5:29:bd:48:
82:27:6c:da:b9:16:f1:d4:ce:51:c6:f3:5e:b6:23:
47:71:b8:15:b2:4d:bf:da:04:b6:8d:cd:de:e1:59:
55:73:fb:0b:de:be:37:2c:98:5f:c9:a8:ec:fa:26:
b0:25:80:93:18:31:9b:12:15:a7:85:60:7e:b0:e4:
bd:bb:f1:ac:9c:3c:ca:c6:7c:52:0d:8b:ab:0e:75:
77:28:0f:42:25:0f:87:fb:d4:06:16:d1:4f:7c:8b:
45:a8:e8:98:e4:ef:3f:3b:7a:74:72:73:d3:0d:89:
78:72:2a:86:71:16:d2:3d:9c:e5:a0:4c:cf:5d:2a:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6C:AD:C6:9F:2B:23:8B:2B:EA:49:C2:22:10:08:6E:8A:AF:A9:8C
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a336231633a3a2f33322d3438203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b1c::/32
Signature Algorithm: sha256WithRSAEncryption
47:99:67:97:cf:6a:b8:54:fd:7d:20:12:7e:29:b2:72:54:62:
be:f4:13:df:35:4c:67:05:13:b1:f6:60:63:ff:0c:2c:16:8b:
5f:29:80:2f:a1:3f:f4:06:46:08:7d:c0:0d:75:b8:64:b9:1e:
5b:59:0e:91:b8:61:fa:90:45:a0:68:f5:b5:de:7b:5a:6e:b2:
d1:fe:74:3a:5b:b0:a0:4c:07:8d:c7:a6:ab:41:f5:0e:5e:d3:
5a:48:b7:e6:9b:85:0f:dc:ee:a3:42:54:24:34:20:1f:2f:79:
47:94:c2:b4:72:4c:a7:77:4e:f9:d9:13:0a:7b:a1:5f:60:fd:
a9:0d:f7:62:59:d2:82:61:09:4a:f1:2c:74:e7:8c:e0:7a:26:
c2:03:0c:93:e7:53:a7:a9:a0:88:be:7d:77:e1:88:a3:3b:76:
ab:d2:e8:1c:f3:5b:3e:72:96:66:47:db:ab:c1:2c:7e:3c:b9:
84:b6:60:92:8f:8f:3d:5e:58:27:46:b2:97:b4:c4:ec:ab:83:
f1:3a:f3:8b:86:5c:65:fe:2a:7f:87:1f:c3:07:12:d7:7d:5a:
f5:86:69:7c:eb:22:b4:49:51:d5:17:8a:56:6a:33:1f:6d:cf:
bd:95:d8:fc:77:78:e2:66:16:e9:a2:96:89:18:b5:44:0d:58:
19:48:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:37 2026 by rpki-client