This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/323830343a343532633a3a2f33322d313238203d3e20323632383531.roa
File: 323830343a343532633a3a2f33322d313238203d3e20323632383531.roa (raw, json)
Hash identifier: KhZ7MzruN/7XDAD++JcqjEs3P9+iIqDFy1bRGqXfdMA=
Subject key identifier: D2:2D:0A:6D:E3:19:61:6E:5B:06:83:B7:B9:72:BB:D0:F8:AA:20:70
Certificate issuer: /CN=EFBFF18693AA724D3ACD35EE8D27150D4F9A897C
Certificate serial: 26A39F8842C329419785704004798A15F2F772BB
Authority key identifier: EF:BF:F1:86:93:AA:72:4D:3A:CD:35:EE:8D:27:15:0D:4F:9A:89:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/323830343a343532633a3a2f33322d313238203d3e20323632383531.roa
Signing time: Mon 01 Dec 2025 12:32:22 +0000
ROA not before: Mon 01 Dec 2025 12:27:22 +0000
ROA not after: Mon 30 Nov 2026 12:32:22 +0000
asID: 262851
IP address blocks: 2804:452c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.crl
rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a3:9f:88:42:c3:29:41:97:85:70:40:04:79:8a:15:f2:f7:72:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFBFF18693AA724D3ACD35EE8D27150D4F9A897C
Validity
Not Before: Dec 1 12:27:22 2025 GMT
Not After : Nov 30 12:32:22 2026 GMT
Subject: CN=D22D0A6DE319616E5B0683B7B972BBD0F8AA2070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:9e:7c:ae:a2:af:ed:a2:f7:0c:07:ce:38:
16:89:68:c4:40:72:21:30:de:07:65:e3:87:16:1b:
e1:4d:04:fc:14:4d:e3:d8:43:b8:ff:3f:46:06:f1:
60:de:c4:64:f9:f3:e7:7b:c0:26:ae:85:98:12:38:
80:7d:11:f1:86:e2:2f:fd:24:2c:12:5d:4a:16:18:
be:40:e5:f3:da:36:23:7a:74:25:e9:05:f7:1a:19:
79:cd:40:0a:32:ce:ac:34:ec:45:30:7b:ae:20:b3:
bb:da:ac:c6:7b:30:f2:96:37:fe:79:1a:a5:f0:67:
6f:6f:f5:ed:91:ca:e8:31:00:56:17:d3:ea:c5:6d:
48:a9:ce:41:f0:98:7d:92:11:51:b6:5e:55:84:d7:
35:e3:f5:da:f5:15:4e:5c:60:6f:a5:09:f9:76:6d:
a0:45:05:56:ff:81:68:fd:fd:ea:d7:48:dc:23:a9:
77:88:cc:e9:d4:07:93:af:f8:76:0d:cd:54:12:73:
4b:dc:45:d0:04:65:6e:e9:9b:bc:29:fe:0f:2a:02:
34:f6:40:2b:2a:04:fe:7b:95:66:69:d2:53:30:76:
06:bb:ca:30:40:ea:20:e5:5e:c1:89:7f:c1:c8:82:
9e:dc:1e:78:b9:e2:5a:d0:03:fb:79:aa:2d:6d:e6:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:0A:6D:E3:19:61:6E:5B:06:83:B7:B9:72:BB:D0:F8:AA:20:70
X509v3 Authority Key Identifier:
keyid:EF:BF:F1:86:93:AA:72:4D:3A:CD:35:EE:8D:27:15:0D:4F:9A:89:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/323830343a343532633a3a2f33322d313238203d3e20323632383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:452c::/32
Signature Algorithm: sha256WithRSAEncryption
79:3a:8d:0e:9a:cd:e1:d4:14:35:9f:a8:76:69:0a:64:c6:f9:
d7:9e:5d:02:7f:cb:cd:dd:7a:3f:f4:f6:30:5c:6b:22:20:ec:
30:ea:04:90:c4:22:7c:cb:b7:90:73:37:2c:e7:0d:af:80:5a:
83:1d:f7:b4:3d:9d:9d:ef:96:d0:69:98:c1:20:46:e6:80:85:
88:e7:81:9b:14:19:a8:07:39:71:26:67:44:bc:c2:2e:52:90:
4a:b2:40:3b:dd:93:f6:d6:af:03:c0:d4:0b:af:72:7d:9d:4e:
04:e7:e6:1b:5d:a2:fb:5e:0e:51:f1:f3:78:fa:a8:56:45:2d:
8b:47:ce:de:07:65:06:8b:c8:12:20:1a:07:88:15:e5:2a:76:
8e:ec:44:11:c4:be:ee:43:6a:0f:ef:73:b2:29:62:fb:f4:cb:
a9:96:87:f9:d8:44:25:b1:15:e5:a8:96:41:16:a6:a4:eb:a1:
41:8c:dd:e1:57:8b:76:d5:cf:bf:c6:5a:2a:c5:b1:53:04:d2:
ef:fe:4f:45:ff:13:cf:b6:b6:15:ba:9b:34:55:95:c6:a5:85:
64:f6:8a:54:95:bd:96:d4:0c:78:44:e2:12:60:79:bb:69:e2:
a3:23:1e:cc:cb:c2:64:ab:a2:03:2e:0d:2b:08:aa:c9:99:73:
ad:80:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:35:09 2025 by rpki-client