This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa
File: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (raw, json)
Hash identifier: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=
Subject key identifier: 43:43:FD:1B:D5:A1:47:0F:C9:E3:9D:C2:A6:59:41:D1:94:0A:C2:A2
Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial: 47AC2D2A8255392CC969FA6AC281E86B72B51CE7
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa
Signing time: Thu 20 Nov 2025 20:20:49 +0000
ROA not before: Thu 20 Nov 2025 20:15:49 +0000
ROA not after: Thu 19 Nov 2026 20:20:49 +0000
asID: 268084
IP address blocks: 2804:57c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 22:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ac:2d:2a:82:55:39:2c:c9:69:fa:6a:c2:81:e8:6b:72:b5:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Validity
Not Before: Nov 20 20:15:49 2025 GMT
Not After : Nov 19 20:20:49 2026 GMT
Subject: CN=4343FD1BD5A1470FC9E39DC2A65941D1940AC2A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:c1:70:4c:72:c1:3d:58:02:d0:73:fb:2a:
6a:75:15:5e:94:16:60:cc:63:76:86:3b:15:80:ba:
5f:51:d8:35:db:ad:e0:02:03:49:65:f2:a0:a6:96:
60:4a:72:a9:1a:e7:47:17:e6:cd:0c:33:a1:14:56:
ee:2d:b8:d0:0c:d5:3e:78:c0:be:e3:20:e6:ef:3c:
ec:8a:4d:14:1d:bc:f6:85:c3:63:58:f2:d5:30:30:
31:9a:b4:a7:dd:42:75:8c:83:84:e1:29:91:72:9a:
a1:66:95:d5:b3:4b:a5:0f:53:ac:2f:ad:ac:3c:df:
28:b0:81:4c:c4:34:e5:e9:3b:cc:4f:40:a1:4e:78:
59:c3:d0:5e:4f:12:5e:cd:17:ff:ac:36:cc:d3:a7:
84:cd:c3:6e:44:d2:16:87:1d:a1:cc:db:e9:54:67:
7c:74:7a:06:15:19:d8:70:8d:3e:56:a1:ee:82:30:
5d:a9:fc:cb:e9:d9:c5:af:a0:e9:44:4d:ce:f2:16:
5d:f3:81:0f:a9:32:a4:e9:68:c1:c3:62:b4:a1:c1:
7d:96:ac:c4:12:ca:34:01:d2:09:f1:09:ef:b8:07:
18:10:1a:7a:bf:17:be:08:cf:34:93:41:59:a0:a2:
dc:f4:61:ba:29:04:3f:80:01:2a:2d:f2:34:f2:7a:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:FD:1B:D5:A1:47:0F:C9:E3:9D:C2:A6:59:41:D1:94:0A:C2:A2
X509v3 Authority Key Identifier:
keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:57c0::/32
Signature Algorithm: sha256WithRSAEncryption
05:a0:0b:b3:14:05:90:b5:b2:64:65:d2:33:0c:eb:b9:72:ee:
45:cd:86:e5:94:f0:bb:2b:69:56:cf:8b:7c:0e:55:9d:42:ee:
4c:d5:e0:6b:a9:3d:da:a9:2e:64:fa:d8:95:6f:4b:1c:38:fd:
21:d6:b4:20:08:52:aa:63:9a:64:f6:c1:58:1f:45:cd:90:16:
c4:d5:28:e6:2b:3a:24:df:c9:8d:69:f6:47:55:e5:3f:9c:c1:
2d:73:47:35:59:8a:b8:5a:d8:95:71:45:a4:a5:b7:78:60:58:
9a:f1:62:b7:3a:f5:8f:7b:39:43:77:ee:cf:ca:98:21:4c:34:
30:4d:2c:24:5e:43:24:72:88:42:68:35:5b:88:ee:70:b6:f4:
25:af:04:c0:27:00:fe:4a:02:ee:95:8d:de:dd:9e:16:3e:75:
04:5e:01:82:e7:fd:e4:4a:71:cf:63:04:21:79:e5:e5:1e:f3:
e0:f8:eb:1d:e5:33:b0:a8:69:e4:e0:5c:dd:f8:d0:a9:83:26:
f0:68:3c:02:ca:f0:79:99:c6:22:90:9c:82:ce:7a:83:29:39:
17:ed:0c:e7:85:f1:29:13:2e:51:9b:24:c9:ad:29:e1:5a:db:
56:bd:85:3a:04:6c:d2:48:1c:a4:55:d2:d5:e2:f7:ae:12:b1:
89:c8:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:19 2025 by rpki-client