This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/323830343a316339383a3a2f33322d3332203d3e203631363634.roa
File: 323830343a316339383a3a2f33322d3332203d3e203631363634.roa (raw, json)
Hash identifier: 0kbSA3hyhI6lE577lkPzBOFXhGd8yekfcTxN+dPsdNI=
Subject key identifier: FC:CA:8D:83:15:1B:B5:18:AE:94:2F:69:A9:C0:2C:7E:27:34:78:19
Certificate issuer: /CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
Certificate serial: 2EC3C2EFFB9703E26881412D128D1E34A8E9F323
Authority key identifier: 8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/323830343a316339383a3a2f33322d3332203d3e203631363634.roa
Signing time: Tue 20 Jan 2026 13:51:47 +0000
ROA not before: Tue 20 Jan 2026 13:46:47 +0000
ROA not after: Tue 19 Jan 2027 13:51:47 +0000
asID: 61664
IP address blocks: 2804:1c98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl
rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 19:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c3:c2:ef:fb:97:03:e2:68:81:41:2d:12:8d:1e:34:a8:e9:f3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
Validity
Not Before: Jan 20 13:46:47 2026 GMT
Not After : Jan 19 13:51:47 2027 GMT
Subject: CN=FCCA8D83151BB518AE942F69A9C02C7E27347819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:49:7a:89:04:6e:1a:f0:95:f8:c5:20:2d:
f3:20:da:33:a4:0c:c5:03:d2:59:4a:4b:d3:96:d1:
09:98:d4:e8:bf:96:14:ce:3f:53:92:c9:f0:6b:5f:
c9:e6:a0:00:61:98:ab:87:5c:0b:0d:f2:b7:b9:3b:
f5:cf:74:e8:33:08:0f:cb:fc:89:05:51:7c:90:cb:
cf:5a:12:c8:ed:6a:44:77:9a:ca:37:b2:f7:b0:fe:
85:9a:c0:86:c4:2b:cd:09:9d:ea:48:08:f0:26:a8:
04:06:31:81:bf:25:f8:9b:75:63:23:e9:a0:ef:8b:
2c:0c:d0:ba:dc:5e:66:b4:f2:5b:a6:c6:a0:5e:cf:
8e:82:ae:f8:99:72:4f:c5:40:a1:86:78:1b:97:a4:
bd:cb:f6:8b:f7:4f:1d:06:d7:be:06:f1:33:f7:0a:
5f:71:54:53:4b:71:65:9e:6c:0d:70:29:ee:32:37:
46:d3:6a:56:9c:39:d7:56:51:40:3f:fa:d9:ff:33:
6f:48:39:2a:5e:e6:ae:fe:70:22:42:19:ff:82:b1:
54:81:ad:62:79:64:2b:bd:b0:9f:e5:03:55:95:7f:
82:91:0f:40:73:e7:db:b6:f0:57:db:72:02:41:37:
ec:00:9a:27:ab:a2:d9:89:5f:c8:10:b2:34:83:c6:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:8D:83:15:1B:B5:18:AE:94:2F:69:A9:C0:2C:7E:27:34:78:19
X509v3 Authority Key Identifier:
keyid:8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/323830343a316339383a3a2f33322d3332203d3e203631363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1c98::/32
Signature Algorithm: sha256WithRSAEncryption
65:17:dd:5a:26:aa:1f:54:f2:3b:75:36:ff:f7:18:7c:1d:3e:
cd:b5:19:41:7a:17:83:ab:bf:f1:4b:28:32:50:3c:05:9f:6e:
5e:ee:1b:33:81:57:ed:06:53:0f:e4:a9:15:0f:b5:96:63:ac:
cb:57:c1:4c:83:44:f5:ce:65:25:24:d4:ce:b6:78:00:61:e9:
00:44:b4:e1:ed:4b:38:ca:89:50:c3:53:20:b4:ef:d6:7f:e4:
99:1b:38:a4:56:79:5a:3b:6a:90:5d:e6:7a:be:fd:0f:30:c8:
a4:41:8a:18:80:46:6a:2d:2a:65:4b:2e:a0:02:8b:27:99:88:
c9:f6:82:02:f0:fb:dc:7f:7d:65:72:54:30:80:ce:91:96:72:
ef:5e:6e:60:d1:7e:70:98:63:c1:ed:00:56:d7:42:12:6b:b6:
98:6e:bb:72:f7:5f:5d:fe:78:3d:cb:cb:91:59:fd:20:9f:7c:
03:db:15:cf:b1:1c:2a:ab:7d:97:61:f7:49:b3:35:af:0c:39:
b5:94:c7:f6:70:59:ba:67:21:82:b9:67:31:11:a6:e1:ab:f3:
1a:a8:90:c4:4c:86:19:01:0e:42:2a:29:b4:c0:5c:91:0e:62:
f2:35:32:4c:23:25:b9:d1:e3:b5:b9:47:05:ec:88:39:5a:1e:
64:d9:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:08:30 2026 by rpki-client