This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HtKo49zgYWW4T78So1AYYWzajz6WqN54e2zrFuX5C2NW/0/323830343a356337383a3a2f33322d313238203d3e203533323435.roa
File: 323830343a356337383a3a2f33322d313238203d3e203533323435.roa (raw, json)
Hash identifier: df2QH2fzpiU+ZAPAgj1+Qj5UsrxeYplDrhn8+2uS0ls=
Subject key identifier: 04:AD:6B:E0:B9:97:E4:DE:5E:D6:FB:48:C4:1C:C4:C6:A0:C4:A0:31
Certificate issuer: /CN=7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810
Certificate serial: 06ED93F4485A15D7232165CCCD3ADEC70FCE1638
Authority key identifier: 7B:6F:63:D9:B3:25:8A:05:EA:91:AC:C2:B8:47:FE:DE:7C:06:F8:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HtKo49zgYWW4T78So1AYYWzajz6WqN54e2zrFuX5C2NW/0/323830343a356337383a3a2f33322d313238203d3e203533323435.roa
Signing time: Wed 03 Dec 2025 17:06:42 +0000
ROA not before: Wed 03 Dec 2025 17:01:42 +0000
ROA not after: Wed 02 Dec 2026 17:06:42 +0000
asID: 53245
IP address blocks: 2804:5c78::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HtKo49zgYWW4T78So1AYYWzajz6WqN54e2zrFuX5C2NW/0/7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810.crl
rsync://rpki-repo.registro.br/repo/HtKo49zgYWW4T78So1AYYWzajz6WqN54e2zrFuX5C2NW/0/7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 02:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ed:93:f4:48:5a:15:d7:23:21:65:cc:cd:3a:de:c7:0f:ce:16:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810
Validity
Not Before: Dec 3 17:01:42 2025 GMT
Not After : Dec 2 17:06:42 2026 GMT
Subject: CN=04AD6BE0B997E4DE5ED6FB48C41CC4C6A0C4A031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:fa:fb:6e:e4:fc:05:97:ec:71:58:be:4f:
0f:73:b6:d7:80:25:94:ba:74:9c:99:be:a8:00:52:
23:d3:48:cb:fc:cb:df:59:50:45:0d:96:c9:df:7f:
f0:ac:ae:35:12:a0:74:eb:70:32:61:78:69:e6:26:
e9:64:e4:52:01:89:a6:bc:a8:c6:20:bb:0f:b8:12:
bf:93:2b:39:f4:15:0c:d4:d5:22:1a:a5:f1:d1:ba:
c0:ca:d4:79:33:43:f7:e6:ca:57:ec:b7:bf:66:c0:
2b:f9:ab:dd:d5:80:2b:77:b8:71:c9:85:92:34:0f:
93:69:c1:1a:ef:86:b4:96:17:8a:fc:1d:2f:9a:02:
67:12:be:62:1d:2c:91:00:d8:4b:f0:9c:7a:2e:b5:
4c:f9:51:c8:e0:78:92:ae:e9:31:d0:03:a8:44:e9:
06:13:7f:f2:39:d9:e7:a1:21:cd:b2:ae:f4:ea:ea:
7a:31:fa:8a:b8:35:4f:ba:48:2d:e5:c3:88:c5:76:
69:b9:c3:f7:df:3a:f5:34:db:91:9c:8b:24:c7:80:
92:bf:3c:76:3f:0a:02:f1:5c:87:9d:fb:49:e1:dd:
2b:69:78:55:90:99:e3:cb:8e:c2:56:58:49:28:77:
44:85:c5:03:b0:ba:65:18:ab:cd:c6:f5:2b:a4:46:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:6B:E0:B9:97:E4:DE:5E:D6:FB:48:C4:1C:C4:C6:A0:C4:A0:31
X509v3 Authority Key Identifier:
keyid:7B:6F:63:D9:B3:25:8A:05:EA:91:AC:C2:B8:47:FE:DE:7C:06:F8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HtKo49zgYWW4T78So1AYYWzajz6WqN54e2zrFuX5C2NW/0/7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6F63D9B3258A05EA91ACC2B847FEDE7C06F810.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtKo49zgYWW4T78So1AYYWzajz6WqN54e2zrFuX5C2NW/0/323830343a356337383a3a2f33322d313238203d3e203533323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c78::/32
Signature Algorithm: sha256WithRSAEncryption
d3:cd:02:93:81:64:00:ae:82:da:94:11:70:02:48:cf:c5:fc:
64:54:c2:7d:f2:9d:dd:e4:d9:a8:07:5c:60:78:b1:58:b7:68:
13:a1:6c:70:5a:92:bb:9d:85:ef:ef:f2:4d:c5:ab:c1:fe:89:
a2:50:a5:59:d2:ee:70:e5:c5:c4:8c:9f:bc:c3:26:82:37:49:
55:43:ff:4b:e7:f4:47:f3:ee:6d:85:ab:da:44:89:97:b4:0f:
8a:82:9d:0c:e0:df:11:28:71:a3:ee:0c:1b:04:c8:97:9a:04:
e7:c9:e3:ea:d3:33:0f:fc:9a:28:49:ec:3f:f3:5b:b4:6c:7f:
76:90:19:cb:b1:2c:d3:1c:66:c9:c3:a2:54:66:7b:23:c9:95:
b5:56:d8:04:7c:02:8e:f7:24:38:ea:39:1f:e2:9d:59:6d:c4:
ca:f6:52:20:43:d1:83:92:97:52:7f:a3:d6:ca:ca:25:dc:14:
10:72:00:70:37:1f:5f:04:de:fe:a1:0c:ec:53:4a:82:48:f3:
42:d5:7a:6f:c4:13:19:d9:ad:88:01:f7:03:24:9a:4a:b2:62:
55:be:24:7d:74:13:2e:1c:bc:ac:69:a2:87:6a:f6:e0:0e:49:
ef:fd:0e:30:d5:64:03:dd:be:f7:4f:eb:f3:b7:13:89:5c:c6:
a9:93:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:37 2025 by rpki-client