This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa
File: 323830343a386331383a3a2f33322d3438203d3e20323733373739.roa (raw, json)
Hash identifier: P7nvA0pSH8OUgnYaTYMtjglrIw+vfjV/2mYwINClsOM=
Subject key identifier: 8D:54:20:3F:30:42:56:18:71:1C:14:E2:77:AF:8E:89:7F:CA:CC:92
Certificate issuer: /CN=1664676300D4BA487C597BD83DEA3EAE106DAB85
Certificate serial: 21BF06B860304621F6FF4BD9BB8B172A56445D40
Authority key identifier: 16:64:67:63:00:D4:BA:48:7C:59:7B:D8:3D:EA:3E:AE:10:6D:AB:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1664676300D4BA487C597BD83DEA3EAE106DAB85.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa
Signing time: Wed 12 Nov 2025 14:12:40 +0000
ROA not before: Wed 12 Nov 2025 14:07:40 +0000
ROA not after: Wed 11 Nov 2026 14:12:40 +0000
asID: 273779
IP address blocks: 2804:8c18::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.crl
rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1664676300D4BA487C597BD83DEA3EAE106DAB85.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 10:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bf:06:b8:60:30:46:21:f6:ff:4b:d9:bb:8b:17:2a:56:44:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1664676300D4BA487C597BD83DEA3EAE106DAB85
Validity
Not Before: Nov 12 14:07:40 2025 GMT
Not After : Nov 11 14:12:40 2026 GMT
Subject: CN=8D54203F30425618711C14E277AF8E897FCACC92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:76:9e:2b:d5:9c:65:a2:eb:53:ca:3f:92:
94:82:86:e4:d6:d5:44:65:c2:97:55:d9:e2:27:b5:
3e:e0:ae:8c:fc:5b:eb:db:b1:d7:50:2b:c1:e7:77:
97:a9:f7:3b:11:e3:36:82:ae:02:59:ff:1f:48:ad:
77:37:5e:91:b7:f4:fe:04:bc:46:70:fb:ce:3c:56:
67:39:a1:4f:d1:e0:a5:f1:bc:c8:4e:cb:50:48:3f:
a2:23:dd:6d:b5:66:a1:ab:93:5f:11:0b:08:f0:64:
6a:07:7d:2b:4b:4e:3f:c9:41:1b:fa:77:24:64:34:
f5:0e:26:8c:4c:1e:a9:33:59:27:33:0b:98:29:e8:
5e:81:22:26:6b:59:e0:a3:9c:76:bc:02:02:b7:eb:
1c:79:1b:2b:36:28:f0:60:70:42:ea:8d:f6:f9:14:
d3:70:aa:5f:b1:e5:f4:32:b0:5a:7b:bf:a5:b4:a8:
90:80:85:c5:36:26:8f:26:d3:0e:b8:7d:61:e7:67:
ac:ee:fb:f4:3f:6f:cd:9b:51:28:71:20:3e:4d:e9:
5e:04:e5:f6:a5:6c:0a:0e:3c:19:e7:cc:7f:1d:93:
7a:ad:71:0d:df:31:ab:64:2d:a4:fc:6a:e7:4f:be:
23:01:59:99:68:48:f7:ea:11:8e:72:38:c8:47:97:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:20:3F:30:42:56:18:71:1C:14:E2:77:AF:8E:89:7F:CA:CC:92
X509v3 Authority Key Identifier:
keyid:16:64:67:63:00:D4:BA:48:7C:59:7B:D8:3D:EA:3E:AE:10:6D:AB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1664676300D4BA487C597BD83DEA3EAE106DAB85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c18::/32
Signature Algorithm: sha256WithRSAEncryption
0a:43:4e:84:88:bb:df:ca:28:75:ec:4c:3c:55:81:02:1c:8c:
5a:43:ae:c4:dd:8b:ac:f4:ac:a2:92:cc:0c:8a:b9:ed:e1:8e:
23:e2:91:bd:f6:27:e7:d8:3d:18:c3:71:de:dd:ff:39:6c:b4:
e5:80:33:16:d0:4c:b9:6f:47:ea:90:fd:73:25:9d:d4:da:32:
5b:fd:cc:3c:40:9c:7d:33:44:06:eb:44:7f:b3:c9:07:ca:8a:
fe:86:1e:42:47:ac:96:7e:24:13:23:ae:a7:b3:1a:e8:04:f9:
0f:f5:e2:4c:0d:38:ad:2f:50:4d:05:3d:4f:74:99:64:30:b4:
7a:e0:ef:b8:08:bb:a9:63:d1:ef:ac:98:09:91:bb:da:c8:33:
a4:86:f1:f2:c7:d2:cf:e4:8d:16:78:a7:51:15:e9:56:e9:b8:
77:7b:f1:80:b8:b3:e2:34:97:3c:d9:6d:62:3f:bb:a4:37:f2:
74:9a:f6:fa:a5:87:a4:c7:4c:2c:86:ed:bb:6f:47:1e:59:a0:
c1:af:d0:28:da:0b:fc:4e:ba:40:9e:26:34:3c:f7:0b:ad:1a:
10:a1:fc:18:68:a0:e7:00:4f:f2:d9:37:44:0c:fe:de:0a:d2:
0f:be:9b:bf:43:ea:b7:59:e3:20:d9:6c:63:ff:3b:dc:58:22:
f8:df:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:37 2025 by rpki-client