This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3336203d3e20323635343834.roa
File: 323830343a333464383a3a2f33322d3336203d3e20323635343834.roa (raw, json)
Hash identifier: rqqnGf7z70ebu7k8BGzpChNYXc5ojCmWd35gMyEJ6Ug=
Subject key identifier: 41:96:BB:CA:D4:23:F7:D1:68:04:F2:83:8A:05:64:80:3F:58:C3:4C
Certificate issuer: /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial: 7B8B7401B36DB27999F818B6ECF680A998F6819F
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3336203d3e20323635343834.roa
Signing time: Tue 30 Dec 2025 20:27:40 +0000
ROA not before: Tue 30 Dec 2025 20:22:40 +0000
ROA not after: Tue 29 Dec 2026 20:27:40 +0000
asID: 265484
IP address blocks: 2804:34d8::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 03:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8b:74:01:b3:6d:b2:79:99:f8:18:b6:ec:f6:80:a9:98:f6:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Validity
Not Before: Dec 30 20:22:40 2025 GMT
Not After : Dec 29 20:27:40 2026 GMT
Subject: CN=4196BBCAD423F7D16804F2838A0564803F58C34C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:a2:0c:76:4f:ae:99:4b:73:5e:ee:d1:4e:
47:92:1d:5d:b9:5d:1a:ea:43:91:a9:a5:e3:c1:58:
3d:36:35:e6:47:b0:55:ae:17:85:b6:e7:cd:30:bd:
c5:7d:9a:bc:d4:c9:cb:a6:d4:3d:33:60:84:94:2f:
d9:8d:39:39:6a:71:6b:ee:7b:1f:df:6b:e3:16:05:
fa:ab:93:aa:22:3b:97:49:44:d8:05:72:85:f9:98:
0e:17:7c:73:8e:ce:93:90:af:3b:da:ea:9e:a3:b3:
a5:40:0a:42:cd:d0:1c:81:60:86:27:0e:53:0b:78:
3e:53:09:17:4a:3c:27:a8:b2:c5:8b:6b:60:47:dc:
22:04:d1:e8:66:b1:be:0f:55:52:d2:9d:d3:39:c5:
dd:01:e9:e8:60:8a:bb:24:7c:ce:52:bc:fb:12:44:
6a:e9:3c:4c:fa:d6:27:b5:da:69:d6:2d:d0:4e:be:
63:dc:30:c0:5b:a6:00:00:51:2a:bb:a8:75:93:93:
7f:7c:b0:87:77:5e:17:dd:09:0b:51:d1:ea:c7:b6:
a2:cc:73:94:9a:c0:fd:1f:be:81:37:b9:01:2d:59:
46:f1:54:96:47:d6:8f:b3:4c:b6:5e:67:17:58:9f:
1d:13:9e:2f:22:f2:07:08:ef:ef:4d:1b:11:15:be:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:BB:CA:D4:23:F7:D1:68:04:F2:83:8A:05:64:80:3F:58:C3:4C
X509v3 Authority Key Identifier:
keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3336203d3e20323635343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34d8::/32
Signature Algorithm: sha256WithRSAEncryption
b0:2b:a3:ca:0b:43:f4:7f:36:a5:2e:13:c1:0a:04:09:30:2e:
07:b1:c5:88:56:5a:37:de:32:c7:bc:7f:5d:6e:48:bb:07:80:
50:d2:ad:94:f6:4b:9c:d3:99:cc:78:86:ab:72:7e:44:ec:1f:
8e:cf:ab:7a:c7:72:72:18:ce:49:d0:e5:0c:95:64:50:24:1f:
5b:56:bf:c9:26:77:85:10:3b:fb:78:66:30:94:62:ec:2e:bc:
45:81:57:0d:dc:c2:e3:56:22:a8:fd:79:73:a4:c3:2b:f3:2c:
22:bb:51:1a:ca:3c:84:63:e0:b9:53:6b:34:88:e0:f1:21:f0:
23:fa:be:49:1b:2f:6f:34:5d:51:10:73:5a:2c:86:1e:db:6c:
6f:14:dc:69:3e:b9:7f:15:ab:1c:27:26:9e:91:f4:2d:ef:89:
9d:82:52:b7:c2:c8:e2:f4:24:01:c8:b8:f3:89:00:4b:a8:ef:
0b:62:50:52:ec:4b:5d:c4:9a:c2:e9:90:c4:b4:4a:0d:c9:d6:
92:b7:72:25:34:27:fe:26:94:db:72:f3:a6:03:38:99:df:33:
5a:50:8e:81:71:4a:39:98:6a:cf:32:e6:9e:6e:f2:11:58:1c:
a6:91:34:8e:19:92:67:6b:80:a6:9a:8e:03:ad:6b:a2:fa:f3:
45:8a:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:39:57 2026 by rpki-client