This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EbrLVotHmooR6SSL2MnrdFa5dyNy7RNDMygpQPqgWXJA/0/323830343a366265383a3a2f33322d313238203d3e20323730343333.roa
File: 323830343a366265383a3a2f33322d313238203d3e20323730343333.roa (raw, json)
Hash identifier: OXf/cO3muMKoQA7dhr0pgLVRK0i6kHbWSc/FLki/a6Y=
Subject key identifier: C2:06:D2:88:20:BD:07:2F:08:7D:98:73:D7:E5:64:76:D8:DF:7A:AA
Certificate issuer: /CN=3D8B395EFF838D42EAF31ADC5139BCC40700FA07
Certificate serial: 0D644D4F0774D436A8CF5A39CBDE38981127F66F
Authority key identifier: 3D:8B:39:5E:FF:83:8D:42:EA:F3:1A:DC:51:39:BC:C4:07:00:FA:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D8B395EFF838D42EAF31ADC5139BCC40700FA07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EbrLVotHmooR6SSL2MnrdFa5dyNy7RNDMygpQPqgWXJA/0/323830343a366265383a3a2f33322d313238203d3e20323730343333.roa
Signing time: Thu 27 Nov 2025 12:15:14 +0000
ROA not before: Thu 27 Nov 2025 12:10:14 +0000
ROA not after: Thu 26 Nov 2026 12:15:14 +0000
asID: 270433
IP address blocks: 2804:6be8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EbrLVotHmooR6SSL2MnrdFa5dyNy7RNDMygpQPqgWXJA/0/3D8B395EFF838D42EAF31ADC5139BCC40700FA07.crl
rsync://rpki-repo.registro.br/repo/EbrLVotHmooR6SSL2MnrdFa5dyNy7RNDMygpQPqgWXJA/0/3D8B395EFF838D42EAF31ADC5139BCC40700FA07.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D8B395EFF838D42EAF31ADC5139BCC40700FA07.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:64:4d:4f:07:74:d4:36:a8:cf:5a:39:cb:de:38:98:11:27:f6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D8B395EFF838D42EAF31ADC5139BCC40700FA07
Validity
Not Before: Nov 27 12:10:14 2025 GMT
Not After : Nov 26 12:15:14 2026 GMT
Subject: CN=C206D28820BD072F087D9873D7E56476D8DF7AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:d7:99:4b:d5:6d:4a:ea:75:0f:fc:4b:5d:
22:d8:80:28:a3:a8:67:a3:5d:71:88:d8:6c:12:4d:
f6:ed:7a:dd:9e:38:49:8b:b2:5b:f0:ab:42:af:c2:
20:21:cc:19:67:f8:57:c5:2d:a4:56:32:d6:30:6b:
82:ab:1a:10:d3:57:2c:84:b3:f2:cc:60:dd:ca:a7:
ca:14:f3:9d:0d:b8:e4:b8:bf:09:16:bf:d6:28:f7:
f1:87:a0:a0:fd:5e:d5:88:6a:48:9c:9b:05:c1:3a:
03:a3:b9:29:02:3b:a3:6b:d2:59:0e:0f:d7:4a:a8:
c6:e6:98:59:43:d6:ec:e6:f7:f8:2a:cd:75:df:9b:
9a:69:08:3f:26:ab:9d:ef:3c:e4:a6:5d:5f:c9:75:
83:34:d4:b0:ba:ab:57:98:fb:2c:74:9f:c1:20:54:
d4:99:5f:25:82:8a:9d:a3:10:5c:74:45:55:e9:2a:
4a:13:ec:ea:9a:88:2c:77:fd:de:be:f8:a4:f1:2e:
a2:f2:3c:d9:71:2e:19:01:44:33:35:92:f1:f4:0d:
08:75:18:e9:11:af:91:36:3c:3e:7e:6e:82:0c:a7:
27:ec:c7:ec:c2:c2:c0:a8:58:f0:6c:cb:dd:2a:fa:
80:e6:2b:ec:1b:82:16:a0:01:21:e7:2b:ac:81:f9:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:D2:88:20:BD:07:2F:08:7D:98:73:D7:E5:64:76:D8:DF:7A:AA
X509v3 Authority Key Identifier:
keyid:3D:8B:39:5E:FF:83:8D:42:EA:F3:1A:DC:51:39:BC:C4:07:00:FA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EbrLVotHmooR6SSL2MnrdFa5dyNy7RNDMygpQPqgWXJA/0/3D8B395EFF838D42EAF31ADC5139BCC40700FA07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D8B395EFF838D42EAF31ADC5139BCC40700FA07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbrLVotHmooR6SSL2MnrdFa5dyNy7RNDMygpQPqgWXJA/0/323830343a366265383a3a2f33322d313238203d3e20323730343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6be8::/32
Signature Algorithm: sha256WithRSAEncryption
58:e0:bb:38:a5:9c:ea:cf:c2:16:3d:71:f2:5f:fb:f8:30:61:
d1:ca:7a:4c:d2:a8:41:dc:9f:47:70:db:b5:aa:ec:a0:78:74:
5b:1f:d5:89:f7:ad:83:77:9c:d5:ab:15:6d:cc:cf:bf:4a:9c:
98:f2:a8:ea:38:a0:66:be:9d:ba:eb:40:d2:21:d7:fc:85:76:
db:c6:20:a1:1e:2e:cf:34:9d:c1:c7:52:6c:95:a3:63:19:7f:
f3:30:52:3f:f3:29:63:6c:bc:81:24:23:5f:13:d0:2d:69:ee:
94:c3:5e:56:43:4f:44:c7:5e:e0:6e:80:62:80:53:ba:de:ee:
c5:59:06:a7:ae:76:0c:cb:71:33:53:e4:48:6d:ea:93:69:50:
91:6e:08:f8:14:a1:ec:bd:c0:53:80:c5:6f:43:50:98:55:01:
36:22:c7:d9:2c:c6:a3:80:1a:b4:e5:9c:d3:74:6e:2c:e0:3f:
d5:38:34:53:92:17:e2:32:c2:ee:b5:5c:bc:81:04:fb:cb:40:
4b:10:ff:00:88:ea:f4:ee:be:9d:f4:46:28:5a:4a:9b:cb:4b:
3d:0f:a6:1f:2e:b3:b9:87:5e:2f:f9:80:9d:7b:15:fb:46:50:
ef:97:d2:27:ef:96:90:c6:55:5c:7b:74:c8:5d:a3:6e:0f:89:
d6:47:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:29 2025 by rpki-client