This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa
File: 323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa (raw, json)
Hash identifier: yFVKAi5aEglTEoIhBKdpR4Tj+Ojal+yy0N1oVAyAIXg=
Subject key identifier: 96:D0:61:36:43:A6:38:C6:6F:38:3D:C7:89:4A:2D:D4:34:B1:AD:0D
Certificate issuer: /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial: 1362624B9219D7477225C549023EC753763405C2
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa
Signing time: Tue 25 Nov 2025 20:15:16 +0000
ROA not before: Tue 25 Nov 2025 20:10:16 +0000
ROA not after: Tue 24 Nov 2026 20:15:16 +0000
asID: 269444
IP address blocks: 2804:64b8:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:62:62:4b:92:19:d7:47:72:25:c5:49:02:3e:c7:53:76:34:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Validity
Not Before: Nov 25 20:10:16 2025 GMT
Not After : Nov 24 20:15:16 2026 GMT
Subject: CN=96D0613643A638C66F383DC7894A2DD434B1AD0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:8b:1a:6e:12:a1:a9:42:eb:02:9c:09:67:
e5:5d:dd:f4:11:fe:47:3f:ab:b3:8d:4b:af:99:4a:
bb:63:07:dc:8c:90:8a:c8:a9:05:64:44:07:7b:9b:
ea:6a:cf:31:15:63:de:d0:fc:6b:ce:75:73:ee:cf:
29:f3:e7:5d:88:ac:3d:16:fc:d7:17:8a:28:c0:42:
c1:08:a5:0a:7c:69:1a:e3:21:1c:9b:25:3b:10:5a:
07:f1:61:a9:18:6d:3a:7a:54:99:c7:f1:31:ef:5e:
1a:26:67:2b:1c:67:4f:5c:8c:65:ae:39:6d:c0:65:
83:4d:3d:dc:8a:65:86:e3:d1:23:99:5f:1f:9b:3b:
dd:f6:d8:73:5a:a5:0a:8c:a8:8d:18:57:73:7f:d4:
69:48:0c:8d:4f:70:28:dc:94:a2:e4:59:b4:a2:89:
d2:cf:e9:9c:20:bb:37:46:bb:df:72:4e:3f:8f:04:
d9:28:6a:70:d4:fa:39:f2:65:a5:48:ce:ff:4e:66:
c2:cf:d8:2e:14:0a:50:39:51:39:a7:e0:30:4b:8c:
5a:42:0a:aa:92:fa:eb:35:2c:4f:38:9a:94:85:bc:
ee:98:dd:df:72:5b:b2:9b:04:fb:17:c9:0b:3c:23:
12:c2:bf:d6:e3:73:bd:cd:12:2d:7f:45:a9:00:c2:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:61:36:43:A6:38:C6:6F:38:3D:C7:89:4A:2D:D4:34:B1:AD:0D
X509v3 Authority Key Identifier:
keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:64b8:e000::/35
Signature Algorithm: sha256WithRSAEncryption
8d:ac:40:2d:5a:6d:60:e4:c9:56:db:b3:41:bc:aa:92:f4:3d:
4e:36:51:6d:46:f7:9f:cc:72:ae:b0:16:57:25:6e:50:ba:64:
80:59:ed:2b:3b:6d:8d:b6:1f:18:96:7f:5a:d6:d5:ee:a2:7e:
ec:32:7e:0e:19:e1:29:d2:b8:e7:9d:94:2f:08:b6:54:59:b2:
40:0a:51:df:eb:91:79:b8:c5:a7:c5:7d:dc:95:5f:16:d6:9f:
c7:f6:38:c3:11:a5:45:f2:d9:2c:33:a9:3a:44:93:d4:68:53:
d3:2c:24:d0:e0:d2:87:d8:47:35:ec:8a:24:15:93:e1:a5:f8:
fc:ee:9e:1a:a6:2e:1d:ce:4f:3c:29:39:48:b5:6b:3d:3a:f8:
08:87:55:cf:37:d0:ea:01:fa:ff:fb:78:16:8d:e0:b1:53:45:
98:94:12:62:8e:ca:3d:2a:bc:c1:21:ef:80:33:dc:31:28:8e:
a4:4a:32:e1:bb:cd:31:60:58:8d:10:b9:b8:c0:a9:cb:c5:1e:
0b:0d:9c:7f:72:8c:97:14:2f:0c:e6:c7:c7:31:0c:e9:54:0b:
09:da:07:76:8d:61:18:6c:97:73:78:c3:99:7b:e3:9f:ce:d1:
50:0c:d1:17:f8:14:72:0b:e0:e2:0e:70:d5:34:c8:18:d2:6e:
dc:10:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:27 2025 by rpki-client