This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
File: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier: OiITny8zStKi99clxFBl95eHbHhrZOZx2Hm59TUh/J8=
Subject key identifier: D7:A5:E1:71:82:EE:B7:53:DC:89:7A:98:93:44:9B:D2:81:00:45:3B
Certificate issuer: /CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Certificate serial: 69619B6CA614EAC8334ABEED6143E3A66E1B4A33
Authority key identifier: 17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
Signing time: Mon 10 Nov 2025 21:05:50 +0000
ROA not before: Mon 10 Nov 2025 21:00:50 +0000
ROA not after: Mon 09 Nov 2026 21:05:50 +0000
asID: 273728
IP address blocks: 2804:8b5c:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 02:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:9b:6c:a6:14:ea:c8:33:4a:be:ed:61:43:e3:a6:6e:1b:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Validity
Not Before: Nov 10 21:00:50 2025 GMT
Not After : Nov 9 21:05:50 2026 GMT
Subject: CN=D7A5E17182EEB753DC897A9893449BD28100453B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:a2:ad:ae:5b:a3:c2:f6:14:f9:7a:e6:07:
c5:68:b1:30:09:ee:c2:9d:11:d4:81:d9:d6:4a:36:
44:ad:43:a8:8c:b0:de:5c:90:ee:a8:ba:6a:c6:37:
4e:01:29:ae:2a:b0:e8:e4:41:2a:e8:18:59:d2:97:
b6:40:85:a7:11:7d:fc:00:78:5f:3b:da:40:e5:89:
ce:e2:2f:c2:97:19:8c:05:b0:f2:ad:29:0a:2e:22:
39:c7:7b:6b:bc:18:bf:e4:85:49:bc:b3:4d:97:d9:
64:21:bb:73:c4:92:3f:c4:fc:38:7c:1a:b9:25:95:
fc:93:0b:f2:2d:9c:bc:37:f0:cf:11:14:0c:15:94:
31:85:b1:87:fd:09:99:7a:51:bf:d3:da:4f:6a:c8:
f9:ec:b8:38:27:87:1b:e9:64:2a:6f:8a:91:61:90:
3d:50:d7:19:ed:45:e0:66:fd:06:3e:4f:df:19:4c:
7b:d5:74:b9:ba:2d:08:2d:cc:10:b6:96:73:ae:4f:
3b:ec:a1:62:ad:c2:8e:1c:c9:f3:34:ff:f1:9f:20:
ff:20:1f:47:17:53:5c:5f:0a:7f:33:f8:47:3e:e8:
0a:a5:72:14:46:fe:5b:56:49:db:87:db:ea:03:0f:
ee:65:5d:62:4e:5c:ae:a4:9a:37:d4:2b:64:c8:76:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:E1:71:82:EE:B7:53:DC:89:7A:98:93:44:9B:D2:81:00:45:3B
X509v3 Authority Key Identifier:
keyid:17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
82:3e:6c:f8:df:ed:da:cf:78:23:23:54:ec:29:06:b3:02:84:
51:df:f9:11:1b:8b:ab:8b:b7:59:9a:6b:e5:93:b8:81:bb:a5:
90:b3:e9:4f:ec:fc:ef:36:f0:bb:bd:2e:e6:a4:b7:be:c8:5e:
a7:71:e6:a1:97:f8:b7:91:cd:34:06:8e:b3:f2:96:20:5d:cb:
77:69:6c:c3:48:2d:c9:b9:ea:5a:1f:c4:63:75:32:5e:90:17:
d3:db:0f:7b:9a:19:48:55:8d:53:a3:64:86:ea:1c:42:55:f5:
a1:40:93:7f:7b:0b:fe:a6:9d:2b:20:51:e4:01:43:21:e1:b3:
30:91:a8:8a:37:2a:81:ec:8d:68:11:20:24:a9:87:b5:a2:38:
87:88:cc:eb:ce:bd:b7:f7:7f:49:56:c2:c9:e7:49:bb:96:ef:
4e:90:29:a1:0b:0c:83:f6:a0:02:10:4c:a5:17:3c:0c:71:e3:
01:9d:85:4a:90:5a:73:15:62:1d:8a:94:b0:d4:42:27:39:b6:
7e:d3:04:2f:50:fc:20:bf:3b:21:bc:02:d9:cf:76:71:f5:6c:
2a:56:0b:12:8e:16:0a:6d:0b:59:23:52:93:84:ed:40:5d:f5:
1d:c7:50:23:8a:af:36:a7:a4:00:50:5c:d9:d7:e5:05:bb:25:
df:85:9d:0e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaWGbbKYU6sgzSr7tYUPjpm4bSjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdBQTY0RUI4RDAwODRDRkVFODlCRjYxOTM3MUJEQ0RC
NDFGREI3NDAeFw0yNTExMTAyMTAwNTBaFw0yNjExMDkyMTA1NTBaMDMxMTAvBgNV
BAMTKEQ3QTVFMTcxODJFRUI3NTNEQzg5N0E5ODkzNDQ5QkQyODEwMDQ1M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv6aKtrlujwvYU+XrmB8VosTAJ
7sKdEdSB2dZKNkStQ6iMsN5ckO6oumrGN04BKa4qsOjkQSroGFnSl7ZAhacRffwA
eF872kDlic7iL8KXGYwFsPKtKQouIjnHe2u8GL/khUm8s02X2WQhu3PEkj/E/Dh8
GrkllfyTC/ItnLw38M8RFAwVlDGFsYf9CZl6Ub/T2k9qyPnsuDgnhxvpZCpvipFh
kD1Q1xntReBm/QY+T98ZTHvVdLm6LQgtzBC2lnOuTzvsoWKtwo4cyfM0//GfIP8g
H0cXU1xfCn8z+Ec+6AqlchRG/ltWSduH2+oDD+5lXWJOXK6kmjfUK2TIdusNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU16XhcYLut1PciXqYk0Sb0oEARTswHwYDVR0j
BBgwFoAUF6pk640AhM/uib9hk3G9zbQf23QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMC8xN0FBNjRFQjhEMDA4NENGRUU4OUJGNjE5MzcxQkRDREI0MUZEQjc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QUE2NEVCOEQwMDg0Q0ZF
RTg5QkY2MTkzNzFCRENEQjQxRkRCNzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAv
MzIzODMwMzQzYTM4NjIzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi1yAMA0GCSqGSIb3DQEBCwUA
A4IBAQCCPmz43+3az3gjI1TsKQazAoRR3/kRG4uri7dZmmvlk7iBu6WQs+lP7Pzv
NvC7vS7mpLe+yF6nceahl/i3kc00Bo6z8pYgXct3aWzDSC3JuepaH8RjdTJekBfT
2w97mhlIVY1To2SG6hxCVfWhQJN/ewv+pp0rIFHkAUMh4bMwkaiKNyqB7I1oESAk
qYe1ojiHiMzrzr23939JVsLJ50m7lu9OkCmhCwyD9qACEEylFzwMceMBnYVKkFpz
FWIdipSw1EInObZ+0wQvUPwgvzshvALZz3Zx9WwqVgsSjhYKbQtZI1KThO1AXfUd
x1Ajiq82p6QAUFzZ1+UFuyXfhZ0O
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:01:04 2025 by rpki-client