This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/323830343a323032303a3a2f33322d313238203d3e20323634343730.roa
File: 323830343a323032303a3a2f33322d313238203d3e20323634343730.roa (raw, json)
Hash identifier: fvrwpKs8ErlYj07vZb3tl7k/BrGdBOtloosSsbFhxbw=
Subject key identifier: E9:99:0F:48:3E:1E:33:CD:F6:95:CF:A6:0B:B0:33:3E:67:03:29:D5
Certificate issuer: /CN=3163DDA10F752408FB174D8814A0878B2C7DFC3C
Certificate serial: 03179F4205058CAF6DF4A85E5BD211304DDD73CE
Authority key identifier: 31:63:DD:A1:0F:75:24:08:FB:17:4D:88:14:A0:87:8B:2C:7D:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3163DDA10F752408FB174D8814A0878B2C7DFC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/323830343a323032303a3a2f33322d313238203d3e20323634343730.roa
Signing time: Mon 24 Nov 2025 17:40:23 +0000
ROA not before: Mon 24 Nov 2025 17:35:23 +0000
ROA not after: Mon 23 Nov 2026 17:40:23 +0000
asID: 264470
IP address blocks: 2804:2020::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3163DDA10F752408FB174D8814A0878B2C7DFC3C.crl
rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3163DDA10F752408FB174D8814A0878B2C7DFC3C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3163DDA10F752408FB174D8814A0878B2C7DFC3C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:17:9f:42:05:05:8c:af:6d:f4:a8:5e:5b:d2:11:30:4d:dd:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3163DDA10F752408FB174D8814A0878B2C7DFC3C
Validity
Not Before: Nov 24 17:35:23 2025 GMT
Not After : Nov 23 17:40:23 2026 GMT
Subject: CN=E9990F483E1E33CDF695CFA60BB0333E670329D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:b7:fe:8c:eb:9d:38:14:94:a4:27:ae:10:
82:71:a1:6c:6d:77:35:0b:12:d2:4f:73:31:7c:4e:
e3:93:f7:3e:c3:f3:1e:7c:a6:53:1e:a7:a8:65:95:
74:2c:37:bc:23:de:6a:02:b9:9f:c9:b2:c6:63:07:
a5:a0:24:03:04:10:03:b8:eb:8d:60:e8:ea:1d:db:
1c:65:c2:c4:15:0d:74:b0:d9:85:0d:99:d0:86:22:
37:6e:4e:c2:f3:e0:41:2e:2f:fc:2b:3c:05:41:d1:
4c:62:bf:24:5d:5f:94:da:af:f9:94:b9:d7:20:5e:
43:e0:12:5b:9c:97:3d:ee:4d:40:c3:58:04:2e:76:
57:07:94:28:12:df:c5:88:27:6e:2d:5a:cb:48:31:
a3:58:dc:1f:cd:f0:6c:92:e1:a5:f3:cf:2e:15:ac:
d2:10:a3:7c:39:a1:d9:1b:c0:96:1b:21:16:f2:f8:
3d:7b:90:35:f1:1d:99:22:f9:b4:a8:e2:0d:74:ca:
ae:c2:76:81:6a:56:9b:ad:96:e2:b8:87:dd:7c:d5:
26:ff:25:33:90:3b:b9:07:ec:6c:0f:c9:4a:03:f8:
78:79:cb:4c:0c:e8:96:99:f0:5e:80:ea:fd:5d:d6:
d8:00:3e:2f:fb:fe:91:27:c5:3d:99:fb:69:60:a8:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:0F:48:3E:1E:33:CD:F6:95:CF:A6:0B:B0:33:3E:67:03:29:D5
X509v3 Authority Key Identifier:
keyid:31:63:DD:A1:0F:75:24:08:FB:17:4D:88:14:A0:87:8B:2C:7D:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3163DDA10F752408FB174D8814A0878B2C7DFC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3163DDA10F752408FB174D8814A0878B2C7DFC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/323830343a323032303a3a2f33322d313238203d3e20323634343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2020::/32
Signature Algorithm: sha256WithRSAEncryption
17:c6:0c:a9:1d:22:d5:72:1d:22:a1:93:46:c3:a7:c4:c7:e2:
03:d4:0f:a4:d3:e7:d4:ef:1f:ef:e0:b6:e9:9b:31:3e:5c:74:
83:08:1d:ed:26:9f:a8:a0:c1:e3:f0:8f:3f:bc:0c:b2:42:83:
06:7a:bf:e9:98:6d:2b:e1:d0:8e:d4:77:83:da:de:99:8a:1f:
07:b4:2e:6a:69:e1:92:60:79:d0:2a:ec:48:b2:2b:30:52:3b:
99:f4:a4:6f:ee:eb:95:b9:43:b1:bd:00:e9:ee:e9:c2:ff:bb:
0b:8a:4f:7b:cb:56:f6:a0:f7:73:07:ab:8b:c1:48:c0:56:5c:
30:05:4b:55:36:6d:96:73:75:88:a0:5d:15:15:f4:f2:59:bc:
b4:75:a3:70:4f:ca:1e:53:df:76:29:46:a1:d5:e8:9c:5c:c5:
36:cf:aa:fb:0b:25:ba:f7:a9:af:a5:13:15:b3:4f:7d:aa:f4:
e8:03:07:72:f1:1c:a7:7f:af:6f:7c:b2:3d:1b:88:46:fe:34:
57:ed:7e:63:3d:ac:29:4f:30:9f:fb:fc:2b:be:e3:f6:08:0a:
85:18:36:5b:67:89:53:17:59:3a:75:95:26:2c:69:30:c5:93:
24:2c:15:5c:d3:77:71:bd:41:fa:20:98:93:f4:01:0c:bc:16:
04:8e:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:06 2025 by rpki-client