This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a3a2f33322d3332203d3e20323633353631.roa
File: 323830343a6566633a3a2f33322d3332203d3e20323633353631.roa (raw, json)
Hash identifier: fZ+zUwS/sjlslCYlPvoBmns0LYT08HTVZ3bhSZwP9EI=
Subject key identifier: E6:45:6B:E6:FD:82:29:D3:3C:8B:4E:88:47:38:D3:54:12:57:91:62
Certificate issuer: /CN=4D703EAE3998947027B5655C14708E2E67520077
Certificate serial: 21C3CB2AC7B3A421679B43090B02831704171340
Authority key identifier: 4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a3a2f33322d3332203d3e20323633353631.roa
Signing time: Wed 03 Dec 2025 20:55:42 +0000
ROA not before: Wed 03 Dec 2025 20:50:42 +0000
ROA not after: Wed 02 Dec 2026 20:55:42 +0000
asID: 263561
IP address blocks: 2804:efc::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl
rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c3:cb:2a:c7:b3:a4:21:67:9b:43:09:0b:02:83:17:04:17:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D703EAE3998947027B5655C14708E2E67520077
Validity
Not Before: Dec 3 20:50:42 2025 GMT
Not After : Dec 2 20:55:42 2026 GMT
Subject: CN=E6456BE6FD8229D33C8B4E884738D35412579162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:b2:56:8c:60:69:95:a6:98:1a:79:e6:2d:
9a:07:b1:b2:83:20:38:c6:17:af:ca:e1:d6:60:2c:
6c:0e:33:03:7d:58:d8:b4:60:51:6a:ed:f4:ce:dc:
94:c9:9b:55:6d:c9:3d:1e:27:68:cb:db:ec:6e:f3:
33:26:a6:51:1a:46:0c:57:76:74:6a:51:bd:ff:14:
16:4c:18:e5:22:46:47:8f:1d:bb:f2:b5:e2:0f:90:
fb:ec:9b:b3:29:02:33:f1:43:87:5f:2a:47:dc:f6:
f6:07:48:6e:e1:1e:b9:73:ca:e3:56:fc:00:b4:c6:
eb:6d:0c:15:8e:dd:3c:ba:1e:37:e6:94:35:6a:ae:
ab:a3:df:99:c4:0a:9e:3f:7b:25:86:82:16:95:89:
bb:08:45:5e:89:2e:5f:a9:d6:13:f9:29:00:38:63:
1e:05:d6:c6:54:34:4b:d1:a9:71:3b:f2:01:2f:9c:
cd:cd:2b:69:42:8f:ab:b1:12:1f:5c:65:2d:e1:1c:
f4:d5:89:f4:d8:8c:fe:68:25:4b:1d:7d:30:5f:f2:
aa:1e:6a:b6:35:6f:3a:38:40:d9:24:06:b2:1f:17:
6b:19:8c:c3:67:a9:35:b4:71:b2:24:77:8e:91:10:
61:f1:6b:de:d8:ee:53:87:88:d9:21:30:8b:43:77:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:6B:E6:FD:82:29:D3:3C:8B:4E:88:47:38:D3:54:12:57:91:62
X509v3 Authority Key Identifier:
keyid:4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a3a2f33322d3332203d3e20323633353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:efc::/32
Signature Algorithm: sha256WithRSAEncryption
28:34:2d:d1:f1:cf:44:f9:49:33:a2:ac:09:6f:2a:98:2e:cc:
e4:33:91:04:3b:e4:4a:77:6c:a1:8f:d4:70:14:e4:06:90:73:
6e:b2:6e:0e:3f:81:59:ec:5c:3e:73:56:0f:47:bd:6b:31:55:
a5:f9:d3:87:70:d9:10:1d:cb:bb:b5:fe:c4:a6:2d:0b:49:50:
b5:39:60:45:1a:02:04:90:26:58:c5:31:75:0e:a0:0a:03:87:
5a:d5:84:04:a0:9d:65:bc:3b:3a:15:65:11:e1:c8:ca:1b:1d:
93:8b:fc:ad:d3:92:93:e4:0a:8c:8f:f9:41:15:b2:c9:7d:eb:
a3:cd:69:33:c7:83:bc:7f:c6:d1:b3:75:86:d5:9c:6c:81:a7:
4d:ed:5d:74:14:df:8b:1c:d9:27:8a:5e:05:c3:90:35:4b:5c:
5c:d3:11:c5:09:55:f6:69:b0:ab:a8:9c:9d:38:23:7a:63:fb:
cb:49:5a:eb:0d:dd:57:e9:61:8f:09:21:f3:a8:ad:54:ff:81:
8d:3e:a8:00:1d:34:00:00:9b:6e:aa:1e:4e:55:2b:c3:84:00:
dc:36:87:a1:55:6a:97:ed:0b:f9:9b:17:56:66:aa:2c:32:4c:
17:f6:9c:04:3b:99:30:a4:82:31:c7:c8:79:e7:ec:5f:f1:29:
87:fd:6d:4a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIcPLKsezpCFnm0MJCwKDFwQXE0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3MDNFQUUzOTk4OTQ3MDI3QjU2NTVDMTQ3MDhFMkU2
NzUyMDA3NzAeFw0yNTEyMDMyMDUwNDJaFw0yNjEyMDIyMDU1NDJaMDMxMTAvBgNV
BAMTKEU2NDU2QkU2RkQ4MjI5RDMzQzhCNEU4ODQ3MzhEMzU0MTI1NzkxNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bLJWjGBplaaYGnnmLZoHsbKD
IDjGF6/K4dZgLGwOMwN9WNi0YFFq7fTO3JTJm1VtyT0eJ2jL2+xu8zMmplEaRgxX
dnRqUb3/FBZMGOUiRkePHbvyteIPkPvsm7MpAjPxQ4dfKkfc9vYHSG7hHrlzyuNW
/AC0xuttDBWO3Ty6HjfmlDVqrquj35nECp4/eyWGghaVibsIRV6JLl+p1hP5KQA4
Yx4F1sZUNEvRqXE78gEvnM3NK2lCj6uxEh9cZS3hHPTVifTYjP5oJUsdfTBf8qoe
arY1bzo4QNkkBrIfF2sZjMNnqTW0cbIkd46REGHxa97Y7lOHiNkhMItDd/Z9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU5kVr5v2CKdM8i06IRzjTVBJXkWIwHwYDVR0j
BBgwFoAUTXA+rjmYlHAntWVcFHCOLmdSAHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdENXNUM1R2RFFyV2dTQWZkNWJwY2NSM0ZXMXVyZ3FDeHNZSnZYYVZR
NVMvMC80RDcwM0VBRTM5OTg5NDcwMjdCNTY1NUMxNDcwOEUyRTY3NTIwMDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENzAzRUFFMzk5ODk0NzAy
N0I1NjU1QzE0NzA4RTJFNjc1MjAwNzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXRDVzVDNUdkRRcldnU0FmZDVicGNjUjNGVzF1cmdxQ3hzWUp2WGFWUTVTLzAv
MzIzODMwMzQzYTY1NjY2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM1
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDvwwDQYJKoZIhvcNAQELBQADggEBACg0LdHxz0T5
STOirAlvKpguzOQzkQQ75Ep3bKGP1HAU5AaQc26ybg4/gVnsXD5zVg9HvWsxVaX5
04dw2RAdy7u1/sSmLQtJULU5YEUaAgSQJljFMXUOoAoDh1rVhASgnWW8OzoVZRHh
yMobHZOL/K3TkpPkCoyP+UEVssl966PNaTPHg7x/xtGzdYbVnGyBp03tXXQU34sc
2SeKXgXDkDVLXFzTEcUJVfZpsKuonJ04I3pj+8tJWusN3VfpYY8JIfOorVT/gY0+
qAAdNAAAm26qHk5VK8OEANw2h6FVapftC/mbF1ZmqiwyTBf2nAQ7mTCkgjHHyHnn
7F/xKYf9bUo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:44:33 2025 by rpki-client