This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f33322d3438203d3e20323731303134.roa
File: 323830343a373466343a3a2f33322d3438203d3e20323731303134.roa (raw, json)
Hash identifier: 5ta1zOMgVoZPbCGHY6y3AGzRt6BUjiuQbVXNMQPJM9g=
Subject key identifier: FF:02:4D:A1:B4:B4:F7:5A:26:12:84:47:98:B4:CE:FF:41:D4:B9:BA
Certificate issuer: /CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Certificate serial: 6CB1F18FE019D4AAE5EF293A29C0D51CB5602E51
Authority key identifier: 38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f33322d3438203d3e20323731303134.roa
Signing time: Sun 18 Jan 2026 14:24:06 +0000
ROA not before: Sun 18 Jan 2026 14:19:06 +0000
ROA not after: Sun 17 Jan 2027 14:24:06 +0000
asID: 271014
IP address blocks: 2804:74f4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 01:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b1:f1:8f:e0:19:d4:aa:e5:ef:29:3a:29:c0:d5:1c:b5:60:2e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Validity
Not Before: Jan 18 14:19:06 2026 GMT
Not After : Jan 17 14:24:06 2027 GMT
Subject: CN=FF024DA1B4B4F75A2612844798B4CEFF41D4B9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:e3:b0:f7:ae:f9:67:0a:a1:b6:cb:66:60:
39:81:dc:1f:23:08:e7:a7:eb:1b:1a:0e:7b:30:eb:
12:f5:3b:f6:84:17:77:06:96:e7:3c:78:82:34:db:
8f:96:b7:9a:eb:99:ca:9f:8b:84:12:62:2c:0e:e0:
09:b5:5b:04:d0:8c:ca:e5:a2:76:b4:7c:d1:9b:3e:
9f:c9:74:35:18:2d:fe:8a:a8:b3:7f:83:04:eb:58:
d9:b6:49:75:04:2b:4c:fa:ab:f8:97:b0:48:d4:8a:
c4:f2:9e:8b:d9:05:1d:2a:c6:69:b8:2d:f6:b1:a2:
a7:09:21:53:b8:6c:82:b5:f4:91:9b:54:4f:66:85:
cb:19:9d:8e:6b:99:00:c9:e3:ed:d7:83:89:93:f8:
73:ba:a1:a2:f5:55:03:ae:d7:9f:8d:f5:93:75:5e:
25:dc:b3:f7:be:8f:b7:93:89:16:12:42:71:32:5f:
aa:45:2e:7a:53:7b:83:52:01:d8:0c:20:85:ef:2f:
22:c2:c4:00:95:37:b6:81:aa:c8:b0:a4:0e:03:e9:
6a:c5:9d:92:e5:2d:99:e1:89:db:3e:28:d1:05:79:
de:61:cb:56:c3:25:a1:3a:23:a4:5f:f2:e2:74:f7:
9d:03:14:f8:0e:af:17:18:be:45:fc:43:92:85:1f:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:02:4D:A1:B4:B4:F7:5A:26:12:84:47:98:B4:CE:FF:41:D4:B9:BA
X509v3 Authority Key Identifier:
keyid:38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f33322d3438203d3e20323731303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:74f4::/32
Signature Algorithm: sha256WithRSAEncryption
64:ab:e8:fa:15:2f:73:bd:a4:c0:1f:46:b4:26:9e:4f:33:3c:
df:5c:7f:6a:72:10:b8:99:f4:c5:31:6f:49:a3:5d:4b:7b:9a:
f0:c8:5f:a6:30:50:dd:2e:b2:f6:f3:4a:67:5b:bc:65:56:45:
70:5c:67:86:89:4d:ef:7b:48:09:64:45:d4:01:34:a7:b3:79:
40:ca:63:b6:03:c0:af:a7:29:1c:6b:a3:2c:03:e6:be:50:d2:
77:da:52:2e:9c:ca:54:cf:fe:7f:a8:3e:7b:c3:6a:be:58:59:
5a:ec:2b:40:54:08:b7:fc:1d:ac:2d:ef:96:43:6e:f8:8f:6b:
c9:72:04:04:13:03:70:6f:f2:93:a1:18:d0:56:c6:33:4e:a5:
f7:39:fb:49:e3:3c:48:28:ba:f7:1d:13:a1:34:34:6b:a2:9d:
33:14:dd:65:df:dd:8e:42:45:39:e9:2a:cf:97:7c:f5:98:6b:
ed:d3:84:0b:c4:b9:77:a8:28:c7:29:70:47:26:e5:b3:83:db:
18:3f:d9:d2:2e:ce:a7:e8:0d:43:1d:ba:1f:a8:3a:7f:63:23:
82:a2:13:a6:05:e1:13:13:39:1c:2a:58:cb:54:b4:1b:fa:80:
14:54:b1:9b:3f:74:ea:0d:fb:a5:f9:c5:b8:32:57:77:73:67:
f9:78:75:ef
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbLHxj+AZ1Krl7yk6KcDVHLVgLlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGRkFGQ0Y3QjA4OEZCMjIzOUVBMEJEOTlDQzZCRDU0
Q0ZGODcwNzAeFw0yNjAxMTgxNDE5MDZaFw0yNzAxMTcxNDI0MDZaMDMxMTAvBgNV
BAMTKEZGMDI0REExQjRCNEY3NUEyNjEyODQ0Nzk4QjRDRUZGNDFENEI5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNseOw9675ZwqhtstmYDmB3B8j
COen6xsaDnsw6xL1O/aEF3cGluc8eII024+Wt5rrmcqfi4QSYiwO4Am1WwTQjMrl
ona0fNGbPp/JdDUYLf6KqLN/gwTrWNm2SXUEK0z6q/iXsEjUisTynovZBR0qxmm4
LfaxoqcJIVO4bIK19JGbVE9mhcsZnY5rmQDJ4+3Xg4mT+HO6oaL1VQOu15+N9ZN1
XiXcs/e+j7eTiRYSQnEyX6pFLnpTe4NSAdgMIIXvLyLCxACVN7aBqsiwpA4D6WrF
nZLlLZnhids+KNEFed5hy1bDJaE6I6Rf8uJ0950DFPgOrxcYvkX8Q5KFHznxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/wJNobS091omEoRHmLTO/0HUubowHwYDVR0j
BBgwFoAUOP+vz3sIj7IjnqC9mcxr1Uz/hwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC8zOEZGQUZDRjdCMDg4RkIyMjM5RUEwQkQ5OUNDNkJENTRDRkY4NzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RkZBRkNGN0IwODhGQjIy
MzlFQTBCRDk5Q0M2QkQ1NENGRjg3MDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U0M0dkYm1peGNQWDg3eGlBUzN5dFdqZmY0c3ViQnVrZzZ0b2NVRExHZ0R3LzAv
MzIzODMwMzQzYTM3MzQ2NjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR09DANBgkqhkiG9w0BAQsFAAOCAQEAZKvo+hUv
c72kwB9GtCaeTzM831x/anIQuJn0xTFvSaNdS3ua8MhfpjBQ3S6y9vNKZ1u8ZVZF
cFxnholN73tICWRF1AE0p7N5QMpjtgPAr6cpHGujLAPmvlDSd9pSLpzKVM/+f6g+
e8NqvlhZWuwrQFQIt/wdrC3vlkNu+I9ryXIEBBMDcG/yk6EY0FbGM06l9zn7SeM8
SCi69x0ToTQ0a6KdMxTdZd/djkJFOekqz5d89Zhr7dOEC8S5d6goxylwRybls4Pb
GD/Z0i7Op+gNQx26H6g6f2MjgqITpgXhExM5HCpYy1S0G/qAFFSxmz906g37pfnF
uDJXd3Nn+Xh17w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:22 2026 by rpki-client