This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a383030303a3a2f33332d3333203d3e20323633353631.roa
File: 323830343a6566633a383030303a3a2f33332d3333203d3e20323633353631.roa (raw, json)
Hash identifier: R3OguuMUdgiErsmYtAc6e5dn0P7/FkDUAcd04Tz5gr8=
Subject key identifier: 74:E4:7C:D6:63:48:D3:EC:BF:08:68:25:1F:21:8F:E0:50:A9:BE:C7
Certificate issuer: /CN=4D703EAE3998947027B5655C14708E2E67520077
Certificate serial: 4DA22F06EF35D17B9E1D9A82138A1195097563F1
Authority key identifier: 4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a383030303a3a2f33332d3333203d3e20323633353631.roa
Signing time: Wed 03 Dec 2025 20:56:44 +0000
ROA not before: Wed 03 Dec 2025 20:51:44 +0000
ROA not after: Wed 02 Dec 2026 20:56:44 +0000
asID: 263561
IP address blocks: 2804:efc:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl
rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a2:2f:06:ef:35:d1:7b:9e:1d:9a:82:13:8a:11:95:09:75:63:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D703EAE3998947027B5655C14708E2E67520077
Validity
Not Before: Dec 3 20:51:44 2025 GMT
Not After : Dec 2 20:56:44 2026 GMT
Subject: CN=74E47CD66348D3ECBF0868251F218FE050A9BEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:0e:62:78:98:4e:40:73:ab:f0:c3:3d:5c:
8e:a2:e0:2f:72:3b:ec:2a:23:37:f9:64:a5:b9:33:
99:63:27:9b:1e:85:1b:33:bb:16:d6:a3:f3:be:99:
a3:ad:94:9b:5a:d0:af:e4:ae:ff:a7:a2:cb:bf:fc:
7e:7b:ef:8e:c5:b9:b8:f8:33:59:76:51:14:bd:d2:
3c:38:eb:f1:6c:6d:08:16:18:8c:35:1c:68:bc:77:
a4:b3:e5:98:33:50:f5:c3:3a:45:6f:09:d0:e2:49:
39:15:13:ae:c3:84:c0:44:f1:9f:05:95:ed:25:96:
23:6a:24:d1:14:98:ec:e5:99:b1:e3:af:70:4d:de:
9a:40:a0:c9:f8:62:43:aa:68:51:08:13:ac:07:7b:
85:e6:7a:d8:3a:81:71:d4:ce:b1:ba:18:26:2d:69:
f3:dd:0a:cd:4b:ad:3a:4d:53:e9:3d:8d:f3:88:99:
4b:85:48:d9:e8:04:75:a5:af:f2:b2:a0:44:8f:35:
d2:f2:d4:e7:51:6c:15:0f:4b:56:15:fb:fa:bc:09:
18:85:5c:a6:28:72:98:af:46:8e:fb:29:3e:87:85:
ac:8d:65:e4:2a:2e:7b:6b:6b:76:19:ae:fa:06:4d:
42:03:68:5a:90:94:39:b3:2a:50:86:2d:15:4b:56:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:7C:D6:63:48:D3:EC:BF:08:68:25:1F:21:8F:E0:50:A9:BE:C7
X509v3 Authority Key Identifier:
keyid:4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a383030303a3a2f33332d3333203d3e20323633353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:efc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
11:1c:c4:32:57:f2:16:2c:83:cc:d2:67:18:e7:db:b8:ce:84:
93:4f:ba:49:20:be:58:4e:e9:e5:f6:8c:5d:59:c3:b7:50:78:
81:ae:9e:cd:95:8a:bc:dc:e8:0a:27:5c:95:7e:83:23:63:f2:
4d:c8:67:c3:05:d6:1c:fa:a8:dd:64:0b:0f:29:41:ab:32:60:
92:9d:79:cb:74:50:b9:8c:a6:f5:00:32:18:ea:6e:36:66:0c:
b1:0c:9b:d3:e7:5a:b9:5a:df:a3:ad:af:c5:0c:43:6d:69:dd:
86:f8:f0:3c:7f:5e:45:43:09:5b:4e:03:b5:f5:48:76:f2:81:
69:6f:42:a6:49:e6:90:a3:c0:68:b7:b3:93:f9:13:11:be:a9:
e0:c6:a8:93:77:c7:67:2e:43:b9:9b:8e:59:11:f3:06:82:1a:
28:f5:b2:7e:37:3e:0e:23:4d:2b:fd:08:a1:c5:99:cc:c0:43:
6b:2e:b2:59:83:bf:77:b7:3a:61:5d:28:05:ee:59:b1:0f:52:
f3:c9:ab:8f:b4:14:12:5c:90:49:6c:92:71:3e:ad:73:56:40:
f5:aa:12:b3:41:2f:5d:30:ee:09:b3:65:74:36:2a:7d:b2:f2:
ba:50:98:9c:40:83:13:97:3b:d7:11:91:58:a7:c0:fa:50:62:
85:c9:37:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTaIvBu810XueHZqCE4oRlQl1Y/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3MDNFQUUzOTk4OTQ3MDI3QjU2NTVDMTQ3MDhFMkU2
NzUyMDA3NzAeFw0yNTEyMDMyMDUxNDRaFw0yNjEyMDIyMDU2NDRaMDMxMTAvBgNV
BAMTKDc0RTQ3Q0Q2NjM0OEQzRUNCRjA4NjgyNTFGMjE4RkUwNTBBOUJFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpNQ5ieJhOQHOr8MM9XI6i4C9y
O+wqIzf5ZKW5M5ljJ5sehRszuxbWo/O+maOtlJta0K/krv+nosu//H57747Fubj4
M1l2URS90jw46/FsbQgWGIw1HGi8d6Sz5ZgzUPXDOkVvCdDiSTkVE67DhMBE8Z8F
le0lliNqJNEUmOzlmbHjr3BN3ppAoMn4YkOqaFEIE6wHe4Xmetg6gXHUzrG6GCYt
afPdCs1LrTpNU+k9jfOImUuFSNnoBHWlr/KyoESPNdLy1OdRbBUPS1YV+/q8CRiF
XKYocpivRo77KT6HhayNZeQqLntra3YZrvoGTUIDaFqQlDmzKlCGLRVLVgGZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdOR81mNI0+y/CGglHyGP4FCpvscwHwYDVR0j
BBgwFoAUTXA+rjmYlHAntWVcFHCOLmdSAHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdENXNUM1R2RFFyV2dTQWZkNWJwY2NSM0ZXMXVyZ3FDeHNZSnZYYVZR
NVMvMC80RDcwM0VBRTM5OTg5NDcwMjdCNTY1NUMxNDcwOEUyRTY3NTIwMDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENzAzRUFFMzk5ODk0NzAy
N0I1NjU1QzE0NzA4RTJFNjc1MjAwNzcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXRDVzVDNUdkRRcldnU0FmZDVicGNjUjNGVzF1cmdxQ3hzWUp2WGFWUTVTLzAv
MzIzODMwMzQzYTY1NjY2MzNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzMjM2MzMzNTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBA78gDANBgkqhkiG9w0BAQsFAAOC
AQEAERzEMlfyFiyDzNJnGOfbuM6Ek0+6SSC+WE7p5faMXVnDt1B4ga6ezZWKvNzo
CidclX6DI2PyTchnwwXWHPqo3WQLDylBqzJgkp15y3RQuYym9QAyGOpuNmYMsQyb
0+dauVrfo62vxQxDbWndhvjwPH9eRUMJW04DtfVIdvKBaW9CpknmkKPAaLezk/kT
Eb6p4Maok3fHZy5DuZuOWRHzBoIaKPWyfjc+DiNNK/0IocWZzMBDay6yWYO/d7c6
YV0oBe5ZsQ9S88mrj7QUElyQSWyScT6tc1ZA9aoSs0EvXTDuCbNldDYqfbLyulCY
nECDE5c71xGRWKfA+lBihck3HQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:45:58 2025 by rpki-client