This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33322d313238203d3e20323638383538.roa
File: 323830343a356239633a3a2f33322d313238203d3e20323638383538.roa (raw, json)
Hash identifier: +o3mpYijyEQ8cmpNfl/kEQFRk8tB8rroirH3fQnJ8MU=
Subject key identifier: 9E:6C:5A:D4:A9:64:F9:CA:86:BB:09:51:5C:F3:F9:FF:DD:AC:F9:EE
Certificate issuer: /CN=C486B4374F6ECFC1091D85F260D92DE07C062714
Certificate serial: 4A0AD59DDC8B693E934D58E30B616692CBE54046
Authority key identifier: C4:86:B4:37:4F:6E:CF:C1:09:1D:85:F2:60:D9:2D:E0:7C:06:27:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C486B4374F6ECFC1091D85F260D92DE07C062714.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33322d313238203d3e20323638383538.roa
Signing time: Thu 27 Nov 2025 14:51:59 +0000
ROA not before: Thu 27 Nov 2025 14:46:59 +0000
ROA not after: Thu 26 Nov 2026 14:51:59 +0000
asID: 268858
IP address blocks: 2804:5b9c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C486B4374F6ECFC1091D85F260D92DE07C062714.crl
rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C486B4374F6ECFC1091D85F260D92DE07C062714.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C486B4374F6ECFC1091D85F260D92DE07C062714.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 17:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0a:d5:9d:dc:8b:69:3e:93:4d:58:e3:0b:61:66:92:cb:e5:40:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C486B4374F6ECFC1091D85F260D92DE07C062714
Validity
Not Before: Nov 27 14:46:59 2025 GMT
Not After : Nov 26 14:51:59 2026 GMT
Subject: CN=9E6C5AD4A964F9CA86BB09515CF3F9FFDDACF9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:03:cd:bc:15:9a:dc:f0:3c:3d:4e:8d:b1:
8e:12:ee:28:f9:e3:fa:9b:5c:5b:c4:84:a8:de:e1:
40:3f:00:a2:18:f6:cd:83:25:85:f9:9b:21:b7:c3:
3e:09:a6:42:58:92:16:29:11:ca:86:a3:7a:5e:49:
67:eb:9f:9f:06:d9:49:e9:04:d6:95:6c:fb:6e:8a:
48:3a:3d:f2:50:6a:0a:ff:10:6b:f3:d8:77:47:cb:
2e:1d:bd:79:7c:50:a6:5d:8c:d1:2b:5c:36:93:94:
fc:9a:6b:e8:30:d7:2d:d2:2c:cd:71:4f:d2:d2:c8:
fd:9b:6c:88:3c:71:98:e1:03:f1:63:a4:42:b3:79:
f9:52:ce:19:ee:61:18:34:28:4b:f3:38:d2:9c:ac:
9c:15:4b:d4:7a:cb:8a:a1:59:d7:26:88:04:01:bf:
29:a0:22:2e:3d:e1:ba:ab:0d:b7:7f:70:d5:df:7c:
75:18:8c:82:19:2d:9f:4b:df:d4:15:c8:ca:b8:c2:
e7:a6:f9:6c:f6:36:56:96:94:cf:b5:50:03:f7:6f:
eb:60:90:5d:4e:a9:e8:91:7e:78:f6:6d:b5:fb:eb:
ac:39:ab:65:3f:56:57:1b:27:16:a6:bc:a1:e7:82:
5b:14:66:a0:6b:ca:c0:6c:a7:c9:df:b2:13:8e:ac:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:5A:D4:A9:64:F9:CA:86:BB:09:51:5C:F3:F9:FF:DD:AC:F9:EE
X509v3 Authority Key Identifier:
keyid:C4:86:B4:37:4F:6E:CF:C1:09:1D:85:F2:60:D9:2D:E0:7C:06:27:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C486B4374F6ECFC1091D85F260D92DE07C062714.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C486B4374F6ECFC1091D85F260D92DE07C062714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33322d313238203d3e20323638383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b9c::/32
Signature Algorithm: sha256WithRSAEncryption
c9:6b:80:cf:b8:ad:8a:dd:ec:3a:e7:7e:dc:18:ee:ac:4a:95:
ed:77:cf:c5:54:d9:ea:e4:ec:56:88:a5:f0:aa:89:cd:fb:60:
38:3d:eb:1a:1f:08:2f:5c:c4:d8:d3:f3:61:a7:22:6f:48:ab:
97:2a:a1:59:0e:4d:2b:07:74:f8:5b:e5:06:0c:67:fb:0e:e6:
d0:fe:36:64:00:0b:10:5c:71:79:13:45:ef:dd:6a:b9:e4:9c:
89:f8:18:36:52:08:cd:a0:5e:a7:dd:0a:28:37:ae:4b:c3:6e:
63:45:f3:57:19:a5:13:5c:99:e3:b8:d6:da:b4:f2:00:ef:5d:
b9:90:d0:3e:95:f7:7a:cb:af:f9:a7:0f:88:da:05:f3:c4:97:
c1:ce:8e:49:0b:ac:c5:9d:ea:6c:61:a8:f1:8d:e6:eb:ca:fe:
4e:24:12:c0:5e:75:10:45:33:42:b6:1d:d5:af:db:42:4c:9f:
b9:97:08:95:26:86:7e:e5:2c:9e:8d:9d:b9:50:3c:26:ae:3b:
32:e4:d2:b5:16:f4:e3:86:88:2a:e2:b3:fd:4e:1f:9c:ae:26:
cd:17:ab:c6:6b:ee:93:82:b0:43:0d:ad:2d:ae:ed:f6:32:33:
df:83:d3:c7:c2:df:59:15:af:e4:95:b5:09:e3:bf:f2:c4:26:
e3:56:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:26:36 2025 by rpki-client