This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa
File: 323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier: LJWMhYXgYibrkvJawC53GG6yEZMzQWX5wlL36dgS80w=
Subject key identifier: B5:31:92:C2:A7:C8:E8:30:19:23:5D:97:1A:43:03:A3:65:D6:E5:BE
Certificate issuer: /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Certificate serial: 44C661627D9DC69021BB7C1E4E217796820CC827
Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa
Signing time: Mon 24 Nov 2025 23:10:09 +0000
ROA not before: Mon 24 Nov 2025 23:05:09 +0000
ROA not after: Mon 23 Nov 2026 23:10:09 +0000
asID: 263584
IP address blocks: 2804:f68:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c6:61:62:7d:9d:c6:90:21:bb:7c:1e:4e:21:77:96:82:0c:c8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Validity
Not Before: Nov 24 23:05:09 2025 GMT
Not After : Nov 23 23:10:09 2026 GMT
Subject: CN=B53192C2A7C8E83019235D971A4303A365D6E5BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:32:bc:03:b0:a5:aa:bb:9c:34:3e:63:19:
03:68:62:58:57:3b:7d:59:12:ce:84:6a:2a:d6:70:
26:a5:57:ec:3e:40:fd:b3:b7:f7:bf:f9:af:cc:b8:
36:76:34:2e:19:c3:5b:a5:d8:7d:44:31:d4:6d:e1:
85:17:c9:53:fd:a7:f0:ef:18:d1:6e:69:2b:4f:b8:
be:b9:8e:7b:a6:e8:42:6b:36:43:85:5e:68:13:b2:
97:89:d8:02:fa:2e:d1:ba:84:6c:cb:d5:df:34:ee:
b0:5a:91:47:c5:c0:be:96:de:62:ec:f1:bf:00:c9:
1f:9f:1f:ad:83:f8:5e:db:32:8b:6e:39:5d:95:0c:
cb:c2:8a:d7:be:e5:fd:d9:85:87:8e:80:7a:9a:6b:
71:ad:69:73:50:c1:c6:12:01:0e:b8:84:c8:eb:3b:
cf:ea:7e:13:7e:f6:bd:3d:3f:c5:e0:a4:92:ad:55:
38:30:57:4b:bd:f5:49:80:2d:08:33:6b:9c:28:16:
cc:6b:87:1e:1a:7b:eb:83:22:de:98:64:84:51:d1:
64:ce:bc:21:ef:88:1c:ad:52:e5:36:0e:8b:da:0f:
e0:13:66:e0:bb:85:d6:92:c3:9c:d3:0a:f8:1f:a6:
0d:94:71:bd:22:be:2d:36:2c:be:f1:6b:c1:98:15:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:92:C2:A7:C8:E8:30:19:23:5D:97:1A:43:03:A3:65:D6:E5:BE
X509v3 Authority Key Identifier:
keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f68:5000::/36
Signature Algorithm: sha256WithRSAEncryption
58:7d:b3:97:44:b1:1b:df:ac:3c:61:a5:3c:32:50:7f:d3:7e:
0e:15:db:79:55:6a:79:3d:63:44:8b:af:d7:91:35:4d:73:24:
54:72:c1:fd:a7:12:c6:8b:fc:54:28:dc:da:e5:c6:bd:09:0c:
9b:1c:61:98:db:b8:2c:f4:0e:b8:9f:99:df:64:0e:6a:40:e1:
28:3a:b2:bd:0c:a4:14:7d:35:4c:64:43:96:0d:5a:f6:f5:c5:
41:f2:55:40:46:ad:ff:d4:f4:13:fa:83:f4:1a:fe:20:23:59:
e9:6b:50:70:d1:6c:a5:63:e0:88:dc:74:bc:2d:72:27:c5:68:
e9:6d:31:7f:f2:1c:24:ec:e5:e5:da:5b:4f:da:9e:c0:e8:9d:
a8:3e:74:d4:f8:89:be:bb:53:f4:99:df:b6:ac:30:d9:ba:b0:
db:2d:4b:bb:c6:90:f0:4e:62:43:13:c7:84:fa:00:ad:21:b0:
9c:4f:63:18:50:e2:73:97:77:25:dc:ef:ce:84:b9:7b:82:5e:
fc:42:a0:2b:e6:0e:ec:f8:b5:7b:d2:b7:e0:3a:bd:a8:6e:0f:
f5:c3:e6:71:68:14:c6:5b:4b:26:ee:8f:65:bb:ae:19:01:09:
83:ca:02:f4:0b:94:a9:df:01:2d:df:82:b7:35:a6:5e:c3:ff:
6a:ca:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:11 2025 by rpki-client