This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa
File: 323030313a313239343a3a2f33322d313238203d3e203238313832.roa (raw, json)
Hash identifier: DrgYXFuXcXvXed5T4GIXMZ39qZAVMa29EBzNfD3zg1Q=
Subject key identifier: 9F:AE:B6:69:67:28:2C:7D:97:8C:99:A1:5E:99:7D:E4:F0:E0:F1:9C
Certificate issuer: /CN=5A1F4CB5F026D65948F99DC818591DC9E96E24F6
Certificate serial: 4D8A88AF1DE4297F5E22330543D00A6B8734EBE7
Authority key identifier: 5A:1F:4C:B5:F0:26:D6:59:48:F9:9D:C8:18:59:1D:C9:E9:6E:24:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa
Signing time: Mon 22 Dec 2025 12:03:32 +0000
ROA not before: Mon 22 Dec 2025 11:58:32 +0000
ROA not after: Mon 21 Dec 2026 12:03:32 +0000
asID: 28182
IP address blocks: 2001:1294::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.crl
rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8a:88:af:1d:e4:29:7f:5e:22:33:05:43:d0:0a:6b:87:34:eb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A1F4CB5F026D65948F99DC818591DC9E96E24F6
Validity
Not Before: Dec 22 11:58:32 2025 GMT
Not After : Dec 21 12:03:32 2026 GMT
Subject: CN=9FAEB66967282C7D978C99A15E997DE4F0E0F19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:68:53:20:74:bc:dd:bd:90:93:7b:b1:c6:
b8:99:9f:e5:23:b5:87:53:22:66:17:30:88:d6:a3:
e4:c0:c1:61:23:5c:28:37:4a:58:af:a5:38:59:74:
63:08:59:58:b5:47:4a:f7:61:14:b3:46:0c:3f:63:
38:50:6f:19:df:3a:c2:36:74:43:29:c5:9f:f1:c1:
30:e9:23:31:e2:dd:78:aa:cc:e9:f5:7d:84:fe:72:
3e:70:55:49:ea:19:03:ef:01:23:05:b5:5a:1b:5d:
72:b4:9c:96:5d:e2:6c:63:87:f7:c0:f9:d1:95:01:
42:71:9a:08:4b:e3:8e:69:fc:ee:27:4b:85:1f:05:
c7:2d:c1:14:87:68:b5:c5:dc:e0:ce:17:42:51:17:
29:03:c6:b2:8b:33:a8:b0:6f:c9:f8:4c:49:ba:ad:
72:40:1b:e6:05:81:38:d0:f4:52:c7:36:9e:5e:ff:
fc:9e:64:3b:0c:50:a8:b8:76:2c:33:52:74:16:82:
fd:69:c7:dc:49:14:70:28:7c:01:e3:92:c5:7c:b9:
1a:ee:af:af:d6:09:cb:2b:9b:50:52:87:7d:d5:b3:
8b:12:34:b1:79:a9:1f:6c:a4:ea:4d:2c:f1:a6:9e:
2c:85:2a:97:fd:f6:17:a5:11:27:91:b9:d1:1e:2a:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AE:B6:69:67:28:2C:7D:97:8C:99:A1:5E:99:7D:E4:F0:E0:F1:9C
X509v3 Authority Key Identifier:
keyid:5A:1F:4C:B5:F0:26:D6:59:48:F9:9D:C8:18:59:1D:C9:E9:6E:24:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1294::/32
Signature Algorithm: sha256WithRSAEncryption
05:d9:fc:86:f6:c3:fb:22:67:aa:ab:5e:be:07:55:52:57:d5:
fe:60:0b:d2:6a:33:ca:b6:27:d5:dc:83:7b:94:db:33:81:64:
59:0e:f7:e9:29:19:10:ca:cf:86:99:ce:a7:cf:98:dd:92:e2:
fb:9e:fa:a2:a2:02:c5:b4:eb:77:c6:f6:11:27:d5:83:fd:61:
61:d3:82:27:22:e7:c6:b6:94:7c:0a:2d:54:2b:d5:74:b3:bb:
6f:a9:f1:55:08:1f:42:f9:07:ef:8d:cf:5d:64:0f:de:0a:e3:
07:d9:de:d1:ee:15:59:9e:1c:1e:4f:34:9b:cc:a4:61:37:97:
09:f5:c3:38:57:7a:cd:c2:d1:d3:ee:b6:cb:b6:d5:96:28:18:
83:06:4f:7a:91:8d:7f:6f:13:d0:34:66:6a:7c:61:1d:1e:7b:
a0:96:c2:a3:a0:2f:6f:ba:f4:ff:ad:1e:ea:df:6b:7e:dd:6e:
42:9a:43:a5:2c:fb:f5:13:10:71:37:81:a8:d7:eb:8d:f1:5b:
df:2c:52:36:92:8c:3c:f4:96:a1:6d:05:e2:b9:83:c1:c1:ed:
79:3a:a8:21:bf:69:50:a2:98:8c:8b:a1:f8:04:8f:73:65:5d:
19:7c:76:d0:3d:10:2f:0d:bd:a6:fd:df:34:14:4d:83:f8:70:
a8:eb:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:14 2026 by rpki-client