This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a3a2f33322d3634203d3e20323639313934.roa
File: 323830343a363064343a3a2f33322d3634203d3e20323639313934.roa (raw, json)
Hash identifier: C5FDVefJNQXuIZxOWfS/a5JxiA1PkR9WZm1zM84u5So=
Subject key identifier: 4E:E5:03:BF:EB:6D:22:2F:60:14:27:0B:DC:36:7B:C8:5A:62:5B:04
Certificate issuer: /CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
Certificate serial: 22828C91B4F0516AE814F278B3D56934FD9942EA
Authority key identifier: 2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a3a2f33322d3634203d3e20323639313934.roa
Signing time: Thu 20 Nov 2025 19:35:33 +0000
ROA not before: Thu 20 Nov 2025 19:30:33 +0000
ROA not after: Thu 19 Nov 2026 19:35:33 +0000
asID: 269194
IP address blocks: 2804:60d4::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl
rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 14:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:82:8c:91:b4:f0:51:6a:e8:14:f2:78:b3:d5:69:34:fd:99:42:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
Validity
Not Before: Nov 20 19:30:33 2025 GMT
Not After : Nov 19 19:35:33 2026 GMT
Subject: CN=4EE503BFEB6D222F6014270BDC367BC85A625B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:cf:5a:b2:ac:10:ec:97:2e:99:b7:06:d5:
65:ca:aa:a8:64:5b:e8:f7:97:a1:cc:9f:55:44:81:
9e:30:e8:03:83:3c:35:d8:48:0c:db:c1:48:ff:b8:
00:8e:cf:e5:2c:f3:ad:e1:84:24:f7:42:dd:f3:2e:
d9:57:14:16:80:04:b2:a2:9d:73:49:08:b5:0c:6f:
ff:77:e3:83:79:27:b1:64:f6:f1:ee:ca:ae:4b:c0:
ce:c6:f2:6f:48:cd:bd:1f:30:f9:ad:a9:98:87:0d:
4b:a2:bf:e9:cf:c8:cc:7b:86:1f:2c:b0:3e:33:68:
50:17:82:aa:1d:74:cc:4d:41:dd:37:04:cd:a6:6a:
2f:35:51:c6:2a:8c:42:94:48:cc:3e:b2:cf:4e:db:
21:be:bf:a0:a9:40:90:f1:f9:e6:51:02:2b:19:b7:
62:d9:a1:07:c9:81:ad:b6:82:ac:98:e4:fd:06:4c:
19:e0:96:af:89:6f:50:86:dc:91:8e:d4:f5:82:a6:
45:80:00:78:20:2e:f7:60:29:d4:47:4b:a2:ad:89:
1e:de:c6:b1:8c:66:25:48:81:7b:79:ec:8f:54:f6:
0a:b0:5d:93:04:db:5c:48:e1:16:c5:80:08:3a:9f:
50:a5:c5:ea:13:82:3d:48:f6:d2:6b:f5:d9:c8:34:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:03:BF:EB:6D:22:2F:60:14:27:0B:DC:36:7B:C8:5A:62:5B:04
X509v3 Authority Key Identifier:
keyid:2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a3a2f33322d3634203d3e20323639313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60d4::/32
Signature Algorithm: sha256WithRSAEncryption
97:c8:cc:af:ef:e1:9a:11:17:11:48:2b:fd:da:58:1e:d0:06:
2e:b2:16:2d:b0:aa:b6:19:fb:d2:04:77:c7:63:7d:3b:19:a4:
ec:ff:ba:5e:89:4c:0b:89:71:43:ee:2e:e5:41:9c:db:8d:37:
b5:0b:9e:dd:ff:1e:1a:f3:5f:f9:1b:17:9c:fe:4d:b9:4d:35:
42:be:cf:0b:6d:0c:9a:c8:ad:94:cf:71:72:9f:e2:1d:af:26:
56:1f:81:99:02:b5:94:36:c3:c3:05:ca:51:30:fd:3f:c2:81:
1d:be:c8:cd:2a:45:5c:6b:bd:d0:7c:3e:47:52:c3:19:60:f8:
62:35:fd:57:8a:0f:d2:0c:39:fb:e7:1e:af:97:2f:2a:0d:0a:
f0:75:6b:31:38:e9:92:a1:28:be:58:84:2e:ce:d6:a5:ef:b0:
d1:f5:7e:89:5c:bd:f2:85:b3:7c:42:7e:7f:74:9f:60:81:66:
ec:74:a1:08:a2:50:1e:12:22:d6:30:21:dd:6b:6b:99:9e:4d:
8b:1b:d2:cc:56:28:20:73:1d:5b:da:87:62:e0:94:ad:66:b6:
7b:28:8d:d3:1e:e4:cd:9f:77:9b:35:ff:4b:9d:0d:fd:3f:ac:
71:d9:b3:1b:85:87:bf:60:e6:30:db:5c:7c:c3:6d:f9:b1:85:
ab:16:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:57 2025 by rpki-client