This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
File: 323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (raw, json)
Hash identifier: Od1KMPpF3t30yR/Zgu7BV5XnVFvjt2cRhr5A+SxZ1jY=
Subject key identifier: ED:31:51:76:65:BD:F3:16:2A:00:70:0A:C8:AC:C1:AE:B8:1E:93:94
Certificate issuer: /CN=46669CD8CCAA54E284B44792CB81ED8D401D6A03
Certificate serial: 0C719A09A0DB00A882ABC588261A7D0072F988BB
Authority key identifier: 46:66:9C:D8:CC:AA:54:E2:84:B4:47:92:CB:81:ED:8D:40:1D:6A:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
Signing time: Thu 18 Dec 2025 16:00:46 +0000
ROA not before: Thu 18 Dec 2025 15:55:46 +0000
ROA not after: Thu 17 Dec 2026 16:00:46 +0000
asID: 271343
IP address blocks: 2804:7a08::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.crl
rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 06:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:71:9a:09:a0:db:00:a8:82:ab:c5:88:26:1a:7d:00:72:f9:88:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669CD8CCAA54E284B44792CB81ED8D401D6A03
Validity
Not Before: Dec 18 15:55:46 2025 GMT
Not After : Dec 17 16:00:46 2026 GMT
Subject: CN=ED31517665BDF3162A00700AC8ACC1AEB81E9394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:fa:70:dc:df:bb:ee:31:fe:15:7c:b5:53:
ff:bb:bf:85:ce:ec:9e:7e:20:45:72:da:b1:22:de:
88:de:5f:d1:7c:8f:74:1b:26:7d:7c:6a:c1:05:45:
1b:5f:4d:bf:84:70:63:20:e4:40:93:df:7f:69:6c:
c6:7e:a2:0c:75:cb:96:ee:d0:20:9e:da:cc:76:88:
cd:1a:b0:12:0b:62:9f:93:5c:b6:36:09:f0:0d:0b:
6a:bb:7c:e7:de:d8:90:e9:b6:f9:80:78:e1:56:39:
48:8c:79:c0:e9:a0:15:e7:f6:c9:12:fd:7c:7c:f9:
dc:57:01:25:4e:f9:92:a9:82:96:94:e4:b7:14:5a:
9e:28:54:c0:4f:67:f0:06:2e:c8:f8:1f:63:73:10:
88:0a:79:7f:29:b1:58:c8:15:9e:e2:fd:2f:f6:0b:
a0:b4:b6:f8:09:86:1a:47:a7:98:bc:58:05:89:e1:
02:d6:cc:fb:90:7d:5e:33:6b:b1:6e:29:b6:32:3e:
5a:78:9c:29:ac:00:95:3d:85:58:d4:93:c6:78:1d:
b3:3c:e1:28:1e:2a:0d:0e:6f:fd:34:c8:db:86:1b:
c4:99:44:df:58:a6:c0:f8:ed:1f:11:0f:c1:25:81:
ed:98:5f:64:09:53:70:d3:4c:2c:7a:67:e8:7d:61:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:51:76:65:BD:F3:16:2A:00:70:0A:C8:AC:C1:AE:B8:1E:93:94
X509v3 Authority Key Identifier:
keyid:46:66:9C:D8:CC:AA:54:E2:84:B4:47:92:CB:81:ED:8D:40:1D:6A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a08::/32
Signature Algorithm: sha256WithRSAEncryption
ba:af:17:61:1c:3b:b8:4f:27:55:d6:ce:86:72:9d:0f:b7:a4:
48:d9:8a:da:0f:58:fa:d9:46:da:7c:8f:c0:9e:bc:f9:82:53:
43:53:af:0f:a0:c5:a3:b7:22:d7:de:44:73:ce:5d:39:b5:5c:
1f:d7:e6:25:5f:7b:f3:02:95:d8:73:87:d3:f7:31:e1:f7:29:
a5:37:0b:72:68:e9:be:61:d4:0c:1b:9a:08:a5:40:ec:51:9d:
64:3a:8f:5b:f7:63:15:47:2a:f7:03:78:67:ee:0d:06:5c:e6:
03:b3:b6:24:c3:39:59:77:21:88:6c:b2:bb:d4:51:fe:d4:9c:
2d:45:67:73:ef:e0:37:ef:df:c4:cc:0e:d4:d2:8c:66:4a:dc:
6d:36:b6:96:64:36:0b:09:f9:75:06:9e:1b:db:34:5b:ab:b8:
14:74:d2:1d:ea:64:6b:dc:39:4c:15:c8:b0:31:b6:0b:60:dc:
19:dc:e6:24:77:b2:5f:95:9c:c4:cd:ec:cc:15:d9:42:70:d2:
3f:95:6a:3f:80:3b:70:d4:00:74:fb:83:4e:24:86:ba:a2:24:
36:26:5b:6d:ed:19:5d:b5:d2:be:b2:e9:ee:41:86:bb:30:2b:
50:59:af:3e:55:cf:e8:e8:6c:d2:ae:20:6a:33:3a:15:e4:ab:
5a:03:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:27:09 2025 by rpki-client