This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa
File: 323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier: qKQQpw1mjeg1W/0vZWkgb+QCXVU+GySV+l4MeFtxQac=
Subject key identifier: BE:62:66:DA:E9:B0:AF:D2:92:53:0E:7C:5D:F6:31:DA:BC:9F:DE:9D
Certificate issuer: /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Certificate serial: 4C890AB5E7FF05B4A462D09BE288021ED4AC647B
Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa
Signing time: Mon 24 Nov 2025 23:09:09 +0000
ROA not before: Mon 24 Nov 2025 23:04:09 +0000
ROA not after: Mon 23 Nov 2026 23:09:09 +0000
asID: 263584
IP address blocks: 2804:f68:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:89:0a:b5:e7:ff:05:b4:a4:62:d0:9b:e2:88:02:1e:d4:ac:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Validity
Not Before: Nov 24 23:04:09 2025 GMT
Not After : Nov 23 23:09:09 2026 GMT
Subject: CN=BE6266DAE9B0AFD292530E7C5DF631DABC9FDE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:1d:73:23:d9:37:3f:22:3a:cf:56:df:5d:
54:f6:4b:39:09:d7:5c:d3:e8:19:88:9c:1a:92:19:
6f:fc:1b:04:91:47:d7:f2:50:bc:f5:a5:f7:7d:b1:
03:76:e8:19:d0:78:86:43:f2:cc:c1:72:4b:59:72:
19:ea:04:e8:40:d6:94:f9:fc:45:66:5d:6d:35:3a:
31:f4:ed:4a:68:c8:4f:70:a4:74:e7:54:6f:c4:c8:
a0:95:6b:52:76:45:72:cd:07:9e:4c:00:63:9e:e6:
99:56:77:1a:41:6e:b9:24:ec:77:ec:c6:a6:13:0d:
c2:9e:90:13:3b:12:15:b6:7f:80:ea:8b:72:c9:f6:
a2:dd:ee:49:c9:69:70:b1:cf:87:89:9b:46:5c:39:
38:ba:10:6d:80:ba:d2:a1:a9:9a:54:00:c1:a3:6a:
45:f5:f1:06:e3:32:77:d5:f3:56:f2:14:ed:57:9c:
97:4a:4e:4f:b9:27:d9:67:51:9f:d5:c2:44:6c:9c:
35:f9:78:9c:9e:da:31:cc:e5:40:3e:79:39:75:52:
79:77:9d:4c:37:bd:c2:6f:ad:ee:f6:55:d2:b7:a5:
4d:43:e2:b1:69:10:30:d9:ce:3e:f8:9e:90:84:b6:
0c:84:94:91:c2:42:eb:a2:e7:61:62:5c:84:bb:a8:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:66:DA:E9:B0:AF:D2:92:53:0E:7C:5D:F6:31:DA:BC:9F:DE:9D
X509v3 Authority Key Identifier:
keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f68:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6d:53:b4:5a:99:92:20:1f:7e:05:9a:8b:56:dd:14:df:8e:ca:
e3:ba:ba:b3:33:f9:d8:de:81:09:75:cd:ed:34:f6:28:04:d8:
b5:3b:6a:18:23:bb:bb:38:0c:49:3a:96:fc:06:f4:7c:66:84:
65:0f:ac:cc:05:ca:e6:2e:df:36:41:07:7a:2a:76:96:54:2f:
00:d9:af:4d:4b:9f:ce:2f:e5:52:43:f3:e7:f9:54:dc:65:ad:
62:af:08:6b:0b:48:ca:a2:2c:35:bd:7c:9b:68:36:ba:ef:7d:
ae:4a:fe:fd:c9:d9:bf:c9:3d:50:dc:b7:b6:0b:7b:ba:08:97:
97:44:94:42:f9:79:74:69:1c:27:76:83:86:e2:d4:ae:14:0a:
b6:af:a4:93:ed:2e:c9:68:6a:c7:dd:d1:99:69:e2:af:6d:d6:
03:a3:b8:f6:50:b5:ad:8e:57:0d:66:69:62:d0:61:d4:4e:b5:
13:3d:08:e3:23:33:c6:4c:c3:09:b9:05:db:e8:a3:6f:f5:91:
c3:66:5d:bd:d6:24:81:c1:46:2f:7d:0a:81:3f:31:a1:49:6c:
64:57:2f:87:b6:fd:53:ac:dc:25:35:75:e6:ac:ea:34:fe:66:
14:b3:47:79:0f:7a:eb:0b:02:68:d7:7a:76:a9:31:ff:b3:36:
7f:ce:d5:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTIkKtef/BbSkYtCb4ogCHtSsZHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkEzRTc2NEI4NERBODYyMkFERTM4QTQzREM1MjdBNzlG
Nzg4MTU4NTAeFw0yNTExMjQyMzA0MDlaFw0yNjExMjMyMzA5MDlaMDMxMTAvBgNV
BAMTKEJFNjI2NkRBRTlCMEFGRDI5MjUzMEU3QzVERjYzMURBQkM5RkRFOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKR1zI9k3PyI6z1bfXVT2SzkJ
11zT6BmInBqSGW/8GwSRR9fyULz1pfd9sQN26BnQeIZD8szBcktZchnqBOhA1pT5
/EVmXW01OjH07UpoyE9wpHTnVG/EyKCVa1J2RXLNB55MAGOe5plWdxpBbrkk7Hfs
xqYTDcKekBM7EhW2f4Dqi3LJ9qLd7knJaXCxz4eJm0ZcOTi6EG2AutKhqZpUAMGj
akX18QbjMnfV81byFO1XnJdKTk+5J9lnUZ/VwkRsnDX5eJye2jHM5UA+eTl1Unl3
nUw3vcJvre72VdK3pU1D4rFpEDDZzj74npCEtgyElJHCQuui52FiXIS7qD7HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvmJm2umwr9KSUw58XfYx2ryf3p0wHwYDVR0j
BBgwFoAUuj52S4TahiKt44pD3FJ6efeIFYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC9CQTNFNzY0Qjg0REE4NjIyQURFMzhBNDNEQzUyN0E3OUY3ODgxNTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBM0U3NjRCODREQTg2MjJB
REUzOEE0M0RDNTI3QTc5Rjc4ODE1ODUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzIzODMwMzQzYTY2MzYzODNhMzEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA9oEDANBgkqhkiG9w0BAQsFAAOC
AQEAbVO0WpmSIB9+BZqLVt0U347K47q6szP52N6BCXXN7TT2KATYtTtqGCO7uzgM
STqW/Ab0fGaEZQ+szAXK5i7fNkEHeip2llQvANmvTUufzi/lUkPz5/lU3GWtYq8I
awtIyqIsNb18m2g2uu99rkr+/cnZv8k9UNy3tgt7ugiXl0SUQvl5dGkcJ3aDhuLU
rhQKtq+kk+0uyWhqx93RmWnir23WA6O49lC1rY5XDWZpYtBh1E61Ez0I4yMzxkzD
CbkF2+ijb/WRw2ZdvdYkgcFGL30KgT8xoUlsZFcvh7b9U6zcJTV15qzqNP5mFLNH
eQ966wsCaNd6dqkx/7M2f87V2A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:14 2025 by rpki-client