This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/323830343a363838383a3a2f33322d3438203d3e20323639363939.roa
File: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (raw, json)
Hash identifier: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=
Subject key identifier: 15:D6:75:26:D0:A6:58:C7:81:73:DE:40:B3:7A:95:10:B6:94:52:FA
Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
Certificate serial: 3ED7094059A82597ED8CB9F5AE28292C7A896327
Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/323830343a363838383a3a2f33322d3438203d3e20323639363939.roa
Signing time: Thu 06 Nov 2025 18:48:52 +0000
ROA not before: Thu 06 Nov 2025 18:43:52 +0000
ROA not after: Thu 05 Nov 2026 18:48:52 +0000
asID: 269699
IP address blocks: 2804:6888::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl
rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d7:09:40:59:a8:25:97:ed:8c:b9:f5:ae:28:29:2c:7a:89:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
Validity
Not Before: Nov 6 18:43:52 2025 GMT
Not After : Nov 5 18:48:52 2026 GMT
Subject: CN=15D67526D0A658C78173DE40B37A9510B69452FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:a8:95:f2:5c:b2:02:41:92:d9:7f:d6:39:
a1:ee:19:f2:2a:dc:58:55:9c:02:31:f4:cb:a3:2d:
03:57:8e:5e:ae:b4:fc:78:e8:8b:29:89:e2:e0:55:
73:0a:04:a3:bd:8b:de:89:38:b4:4a:cf:c6:46:41:
25:54:d7:f9:3d:ba:39:ac:ae:0c:e0:7b:ab:27:b1:
c8:b9:2c:8a:34:f6:49:55:a5:18:de:76:46:13:f1:
a9:95:fa:a1:6b:e1:e0:d8:7c:d8:f3:8e:0b:1d:ec:
2c:e2:94:ff:9c:00:70:fb:38:9a:22:a3:f1:8a:5b:
74:ee:3d:7a:23:a7:d6:02:80:47:83:52:b3:c2:52:
f3:55:d3:63:29:ba:30:ac:05:3f:01:a2:b1:5f:ae:
29:a1:71:a3:4f:a3:c8:5c:bc:5f:b0:b6:aa:4d:04:
d2:c6:f6:04:63:46:c1:61:f7:1c:a0:3d:49:47:82:
59:30:43:7c:bd:ea:2e:84:94:36:b4:b9:ad:ae:a4:
00:81:f3:d0:50:3f:23:29:25:8e:c7:78:78:d5:37:
e4:ae:d8:e4:f1:07:34:45:31:5f:ca:a3:a3:4d:3b:
8e:15:bc:3b:dc:aa:cd:b9:2d:ba:69:2e:38:84:e0:
ac:7e:40:7a:86:44:ec:5e:a6:96:34:b9:82:44:58:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:75:26:D0:A6:58:C7:81:73:DE:40:B3:7A:95:10:B6:94:52:FA
X509v3 Authority Key Identifier:
keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/323830343a363838383a3a2f33322d3438203d3e20323639363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6888::/32
Signature Algorithm: sha256WithRSAEncryption
88:db:84:20:22:f3:6c:46:d3:82:1d:07:49:1d:53:d2:fb:19:
0b:20:13:a5:83:7a:4b:81:c4:81:55:96:05:fb:aa:98:af:90:
f2:1e:3b:5f:6d:51:f0:c9:3e:c6:94:1f:c7:85:c5:28:dd:57:
34:3f:8d:86:a9:f0:08:1d:3e:38:bc:0b:3c:e3:64:06:51:92:
99:82:db:f9:fe:e4:37:11:e1:35:49:eb:d7:e7:7e:5b:1c:d0:
0a:90:5a:c9:95:81:cc:3d:01:e7:07:4f:06:14:76:bd:3b:3e:
4e:64:15:f8:95:14:b4:70:0c:a4:ec:6f:02:b0:b2:66:ca:a7:
28:3b:34:fe:d7:0f:a8:29:ae:b4:f1:17:d7:d8:45:e4:31:8a:
34:71:79:f7:6a:c6:de:15:26:5c:ae:41:aa:c7:d5:2c:ee:45:
b0:da:a2:58:a8:b6:ef:3d:a2:73:e1:0b:93:a2:2f:7d:2f:ec:
2d:e9:65:09:28:a7:a0:75:6a:c7:4f:03:57:71:a2:f9:0c:1f:
10:68:28:a7:1e:c0:65:21:4f:dc:9f:64:f4:6a:fe:96:f3:c9:
68:9e:6f:3a:87:24:96:62:0b:54:bd:6f:4a:fe:ad:7c:25:9e:
1c:68:f7:d8:0e:8a:4b:ca:6d:25:45:48:ff:68:f7:c7:ac:e8:
f2:fb:ef:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:36:37 2025 by rpki-client