This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/323830343a6362633a363030303a3a2f33352d3335203d3e203532353439.roa
File: 323830343a6362633a363030303a3a2f33352d3335203d3e203532353439.roa (raw, json)
Hash identifier: mNzUGA0u3hurV+X4O+8aB4QGv9SvjnygxpDdUwdiGYM=
Subject key identifier: 1C:22:07:79:C6:DD:6D:B9:0B:0F:2B:2F:60:6E:59:81:77:C7:B6:C3
Certificate issuer: /CN=8C6B0731DF0118BC538E3C43743B0B48B1EE8A30
Certificate serial: 387CEEC12D36B2374F96D2715066865A681A7A9A
Authority key identifier: 8C:6B:07:31:DF:01:18:BC:53:8E:3C:43:74:3B:0B:48:B1:EE:8A:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/323830343a6362633a363030303a3a2f33352d3335203d3e203532353439.roa
Signing time: Mon 17 Nov 2025 17:40:44 +0000
ROA not before: Mon 17 Nov 2025 17:35:44 +0000
ROA not after: Mon 16 Nov 2026 17:40:44 +0000
asID: 52549
IP address blocks: 2804:cbc:6000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.crl
rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7c:ee:c1:2d:36:b2:37:4f:96:d2:71:50:66:86:5a:68:1a:7a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C6B0731DF0118BC538E3C43743B0B48B1EE8A30
Validity
Not Before: Nov 17 17:35:44 2025 GMT
Not After : Nov 16 17:40:44 2026 GMT
Subject: CN=1C220779C6DD6DB90B0F2B2F606E598177C7B6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:de:ce:3f:68:b9:71:ec:9e:5c:dc:78:90:
f8:4a:5f:9b:9d:d0:a1:33:c4:5b:03:dc:71:4a:2a:
7f:d4:ad:1c:36:e3:20:c4:86:84:d9:1e:75:b3:8e:
3c:47:a9:6f:5d:5b:f8:b1:f9:31:21:8b:96:8e:05:
c0:82:60:d1:dc:eb:65:a4:75:4c:b0:11:31:6c:1c:
7e:e3:47:bd:97:17:26:bf:dd:cc:dc:6e:06:09:c3:
de:dd:1e:c1:bd:67:5b:6e:12:c3:36:42:4c:a1:91:
77:55:46:27:1f:37:fc:d8:9b:9f:4f:03:b2:16:20:
b0:cf:8b:53:53:2f:cd:f0:4a:dc:c9:42:23:45:f1:
e8:0b:ea:07:10:0f:0e:64:f1:47:a1:15:d5:81:21:
e6:fd:93:bd:85:80:94:3e:b3:05:9a:8b:13:ed:0c:
14:92:36:ae:d4:26:a5:0a:d5:b4:9b:4a:a5:ca:3b:
69:3a:0a:4f:b4:a2:7f:a4:f5:76:6f:db:39:d9:d2:
7e:c1:96:fb:aa:5a:41:9d:09:ee:4b:96:78:db:fd:
9e:ed:13:cd:6e:dd:7c:dd:60:b1:c6:ee:68:ff:59:
47:bb:d2:50:73:32:9d:74:43:b9:e8:cc:d4:e3:8c:
b7:37:22:06:f7:5a:86:fa:1c:90:f8:ac:b1:4a:13:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:07:79:C6:DD:6D:B9:0B:0F:2B:2F:60:6E:59:81:77:C7:B6:C3
X509v3 Authority Key Identifier:
keyid:8C:6B:07:31:DF:01:18:BC:53:8E:3C:43:74:3B:0B:48:B1:EE:8A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/323830343a6362633a363030303a3a2f33352d3335203d3e203532353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:cbc:6000::/35
Signature Algorithm: sha256WithRSAEncryption
3f:06:01:48:83:4c:c4:cd:ac:fc:9f:e3:ba:e0:1a:05:83:ab:
af:d5:8f:45:a3:8f:f3:f7:fd:4e:c7:e8:ec:b2:f6:01:aa:59:
84:31:dc:88:4f:79:d8:7d:af:39:9c:79:5b:49:ea:05:47:4c:
07:ff:90:fd:fd:ff:02:36:18:d9:c8:3a:87:eb:e1:47:71:33:
18:ed:ac:cf:2f:59:41:6c:e5:d3:13:74:27:9c:cf:dc:c1:42:
5c:52:2d:f1:04:10:9f:d7:c9:10:f7:2a:3a:69:b7:db:34:eb:
8a:7d:1c:56:ac:fc:8b:1f:54:0c:88:87:47:b7:fd:58:3f:12:
14:6c:43:84:e4:71:0b:9f:ca:75:3a:ee:4a:40:40:08:67:ad:
c8:c4:65:b7:9c:5d:2a:4b:6c:f4:5a:0a:a3:9e:ee:28:78:3e:
24:dd:b6:e4:10:d6:64:51:de:ba:b7:39:2c:97:6e:0e:f7:4f:
18:8c:99:04:db:4a:44:5c:22:ff:33:fe:10:26:04:f3:e3:02:
d8:2f:c9:e3:23:2e:1f:d6:50:e0:41:bd:d9:0d:a3:96:1b:fa:
f4:1f:d9:1e:dd:78:29:8a:1f:94:3d:fd:04:98:fd:a6:95:bf:
1c:63:ee:a3:e8:71:eb:37:d7:2f:65:a9:6a:2d:d1:4c:41:a6:
da:4b:a5:52
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUOHzuwS02sjdPltJxUGaGWmgaepowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM2QjA3MzFERjAxMThCQzUzOEUzQzQzNzQzQjBCNDhC
MUVFOEEzMDAeFw0yNTExMTcxNzM1NDRaFw0yNjExMTYxNzQwNDRaMDMxMTAvBgNV
BAMTKDFDMjIwNzc5QzZERDZEQjkwQjBGMkIyRjYwNkU1OTgxNzdDN0I2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZd7OP2i5ceyeXNx4kPhKX5ud
0KEzxFsD3HFKKn/UrRw24yDEhoTZHnWzjjxHqW9dW/ix+TEhi5aOBcCCYNHc62Wk
dUywETFsHH7jR72XFya/3czcbgYJw97dHsG9Z1tuEsM2QkyhkXdVRicfN/zYm59P
A7IWILDPi1NTL83wStzJQiNF8egL6gcQDw5k8UehFdWBIeb9k72FgJQ+swWaixPt
DBSSNq7UJqUK1bSbSqXKO2k6Ck+0on+k9XZv2znZ0n7BlvuqWkGdCe5Llnjb/Z7t
E81u3XzdYLHG7mj/WUe70lBzMp10Q7nozNTjjLc3Igb3Wob6HJD4rLFKE9ybAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUHCIHecbdbbkLDysvYG5ZgXfHtsMwHwYDVR0j
BBgwFoAUjGsHMd8BGLxTjjxDdDsLSLHuijAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR204TERnTFNXcnY2SG9BWUMxQjJtTUhwRUhQZm5aS21WeEVjcVdjRHY5
cjYvMC84QzZCMDczMURGMDExOEJDNTM4RTNDNDM3NDNCMEI0OEIxRUU4QTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkIwNzMxREYwMTE4QkM1
MzhFM0M0Mzc0M0IwQjQ4QjFFRThBMzAuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtOExEZ0xTV3J2NkhvQVlDMUIybU1IcEVIUGZuWkttVnhFY3FXY0R2OXI2LzAv
MzIzODMwMzQzYTYzNjI2MzNhMzYzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzNTMyMzUzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKAQMvGAwDQYJKoZIhvcNAQELBQADggEB
AD8GAUiDTMTNrPyf47rgGgWDq6/Vj0Wjj/P3/U7H6Oyy9gGqWYQx3IhPedh9rzmc
eVtJ6gVHTAf/kP39/wI2GNnIOofr4UdxMxjtrM8vWUFs5dMTdCecz9zBQlxSLfEE
EJ/XyRD3Kjppt9s064p9HFas/IsfVAyIh0e3/Vg/EhRsQ4TkcQufynU67kpAQAhn
rcjEZbecXSpLbPRaCqOe7ih4PiTdtuQQ1mRR3rq3OSyXbg73TxiMmQTbSkRcIv8z
/hAmBPPjAtgvyeMjLh/WUOBBvdkNo5Yb+vQf2R7deCmKH5Q9/QSY/aaVvxxj7qPo
ces31y9lqWot0UxBptpLpVI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:57 2025 by rpki-client