This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
File: 323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier: VD96TvPCp3SeL42OsYoY5+GO1kpY5AFXvlXy6dpyetY=
Subject key identifier: 96:07:1B:B0:38:F6:1D:8E:31:41:76:3D:CA:FE:25:E6:49:04:64:9A
Certificate issuer: /CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Certificate serial: 487A552A0DE55601C72880A22CE01B52F0A7B72A
Authority key identifier: 17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
Signing time: Mon 10 Nov 2025 21:05:50 +0000
ROA not before: Mon 10 Nov 2025 21:00:50 +0000
ROA not after: Mon 09 Nov 2026 21:05:50 +0000
asID: 273728
IP address blocks: 2804:8b5c:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7a:55:2a:0d:e5:56:01:c7:28:80:a2:2c:e0:1b:52:f0:a7:b7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Validity
Not Before: Nov 10 21:00:50 2025 GMT
Not After : Nov 9 21:05:50 2026 GMT
Subject: CN=96071BB038F61D8E3141763DCAFE25E64904649A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:d5:fc:5f:b0:90:ff:7f:5f:0b:45:74:d6:
73:2c:c9:dd:cf:70:e0:9d:df:dc:44:ca:1f:97:98:
6f:0c:cf:8f:11:60:03:d4:46:c7:7e:b4:a8:2a:53:
11:58:6e:66:20:3c:d5:39:44:aa:1f:c8:ca:64:7f:
b2:76:9d:3e:90:09:be:18:de:d2:36:4f:93:4c:59:
36:54:90:7d:0a:bf:d4:5b:88:24:fa:7b:a3:92:72:
2b:e6:24:7a:ee:73:eb:6d:20:2d:b0:d6:0b:72:d1:
9c:5c:34:fb:82:00:d4:5a:e0:a4:d8:ce:b2:89:4b:
4c:1b:e7:d1:9a:79:2a:f7:f3:ec:45:92:86:e2:33:
f9:52:bd:ed:35:84:a9:c5:cd:c9:8e:03:a6:62:c1:
34:6e:de:8d:54:31:40:9e:0f:9a:98:55:e3:ed:76:
ac:48:f5:41:d5:58:ab:62:62:32:83:75:61:38:fe:
b4:64:14:32:38:da:02:79:86:01:4b:8d:42:16:8b:
36:66:23:e3:24:46:aa:5c:d7:bd:7e:42:1b:ff:e5:
c6:29:af:8e:b2:37:a5:bf:3a:20:9e:01:04:38:46:
6a:72:9b:3d:18:e5:d2:ba:36:53:21:88:24:a9:a5:
bb:79:b1:20:48:2b:8f:ee:08:43:9e:b9:28:2b:ce:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:1B:B0:38:F6:1D:8E:31:41:76:3D:CA:FE:25:E6:49:04:64:9A
X509v3 Authority Key Identifier:
keyid:17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6b:ea:9e:7c:95:75:7a:1e:c0:1d:ed:57:72:c9:a3:07:c5:eb:
58:4d:4c:db:cf:04:b1:b6:36:52:c9:f1:40:d0:6e:97:3d:52:
3d:1e:84:e7:d1:c2:52:cc:13:2e:79:93:56:51:dc:6d:09:5f:
84:c3:23:c5:4e:d9:b9:b5:01:bf:a6:93:8d:f3:f7:29:92:4e:
44:d4:c1:40:01:bf:10:7e:cd:68:54:68:94:db:2f:3e:7d:7e:
e4:ef:d1:06:23:20:ed:8d:83:90:da:26:5c:df:6b:ab:d8:c2:
95:7d:0c:49:48:d9:9c:29:8d:6e:cb:3f:e6:46:f9:9f:20:db:
9d:5c:63:bd:ce:12:44:68:9c:90:cf:29:9c:a0:c9:d9:d5:1d:
36:d2:03:ff:40:61:a7:6c:ac:3a:e2:6f:4a:9a:13:6d:60:e3:
33:9a:07:ef:4b:13:47:89:73:d9:36:03:99:3c:c9:93:53:d9:
7f:78:fc:71:d4:9d:3f:48:6e:88:29:18:1b:cd:6e:1a:2a:6b:
f9:0e:3b:4e:b3:f7:cd:71:82:a7:d4:0a:66:1c:74:4d:ef:93:
75:83:31:3e:c1:a9:25:65:7a:3b:3e:b4:b4:87:4c:3f:08:a7:
ce:1c:4a:03:04:9b:f9:04:d8:14:cc:b6:96:23:6a:00:0c:a4:
77:3e:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:32 2025 by rpki-client