This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a363030303a3a2f33362d3336203d3e20323633353834.roa
File: 323830343a6636383a363030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier: vghdzbzTW9gbTQBL/z6/MB6BKjAIv4vGcKbKudcyj1g=
Subject key identifier: C8:8A:5F:E4:7B:6D:D7:CE:3B:8F:AF:06:D1:8B:47:63:01:1B:34:EC
Certificate issuer: /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Certificate serial: 41AD20775BD1F6A9639E0CD470FCBBB381A81E27
Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a363030303a3a2f33362d3336203d3e20323633353834.roa
Signing time: Mon 24 Nov 2025 23:10:30 +0000
ROA not before: Mon 24 Nov 2025 23:05:30 +0000
ROA not after: Mon 23 Nov 2026 23:10:30 +0000
asID: 263584
IP address blocks: 2804:f68:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ad:20:77:5b:d1:f6:a9:63:9e:0c:d4:70:fc:bb:b3:81:a8:1e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Validity
Not Before: Nov 24 23:05:30 2025 GMT
Not After : Nov 23 23:10:30 2026 GMT
Subject: CN=C88A5FE47B6DD7CE3B8FAF06D18B4763011B34EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:64:8b:0f:db:b4:6b:2d:9f:23:d4:85:79:
24:44:85:26:1b:be:b7:25:89:b2:bc:bb:11:be:7e:
ae:9c:dd:7f:e1:4f:31:f7:3a:fc:4c:94:2c:6b:d0:
c8:9e:79:ce:20:9e:93:95:bf:8f:e0:af:32:5e:13:
26:7a:09:71:32:a5:2f:1c:5a:d7:1a:a5:9d:58:55:
17:34:9e:cc:53:ee:81:9a:eb:09:86:9f:78:fd:bc:
32:2b:2e:19:44:32:d9:96:7b:05:29:9b:8e:90:a2:
c3:ee:cc:bb:90:8b:22:53:f7:2f:63:a8:20:0c:cb:
ac:fb:9f:5a:80:30:4f:3a:7b:a3:24:65:59:14:d8:
87:35:7e:41:54:5c:d9:fd:c8:c3:3e:7f:cd:08:cd:
d4:de:76:7f:15:01:60:b4:d2:1f:9b:a6:22:76:69:
cf:6e:65:1d:a8:3e:81:9c:90:0a:f6:0f:d2:19:3b:
5d:eb:2c:62:3d:b6:c2:2e:04:4f:ee:b1:79:5b:92:
0f:f4:74:93:c2:2f:10:ad:d3:97:77:d9:9a:f7:46:
f4:14:cb:49:02:1f:df:e1:aa:80:33:6e:02:a2:57:
bc:b5:f4:23:9c:e0:f4:f8:16:2a:94:f8:26:5b:5f:
66:1b:a2:ea:ff:da:59:56:f2:ce:95:6a:98:6b:dc:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8A:5F:E4:7B:6D:D7:CE:3B:8F:AF:06:D1:8B:47:63:01:1B:34:EC
X509v3 Authority Key Identifier:
keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a363030303a3a2f33362d3336203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f68:6000::/36
Signature Algorithm: sha256WithRSAEncryption
27:66:5c:89:15:c4:5c:93:b0:e5:a8:50:13:aa:40:6d:e0:27:
11:05:b3:f6:00:cf:a2:ad:25:1e:33:2d:69:ab:20:71:40:25:
be:0c:18:0e:3f:3a:c4:04:d3:7f:5e:d8:5f:35:df:4b:92:82:
de:64:17:c0:d5:03:6e:32:cc:09:2d:05:3b:17:60:5e:b0:f7:
8c:56:e4:40:ac:92:1e:2f:a0:6d:d0:e2:a5:82:1a:21:16:2a:
f2:e3:4d:8d:90:36:55:ba:6a:c2:c2:67:ff:81:6e:25:34:ff:
4e:c1:6a:57:4e:6c:4d:29:fa:ac:7b:fb:63:f6:4e:38:7b:f8:
81:48:21:ea:c1:af:3c:7e:a4:01:ab:ac:26:77:84:3e:47:f4:
bd:4c:04:4d:cf:f1:a2:93:e5:da:b6:84:83:62:81:59:18:e9:
c1:0f:48:ae:fa:07:9c:e9:b2:7c:de:5a:25:07:f1:89:2a:4f:
69:ef:5e:50:8b:fd:bd:d7:de:2b:79:eb:73:b8:45:59:f6:d8:
2b:2b:e1:26:1c:4b:6c:42:82:89:52:78:4d:aa:ad:e7:cb:1b:
3c:7f:58:a8:23:03:9d:a6:77:56:44:b9:31:80:ef:dd:0d:f5:
2b:ce:78:2c:fc:a6:14:4f:60:09:73:3a:b4:42:85:fb:56:5a:
da:dc:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:19 2025 by rpki-client