This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
File: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier: +itUekAudTfPqrbwZYglvWAvg+MEQn69yjFaPTNeb3Y=
Subject key identifier: 28:97:96:83:13:B5:8B:A0:1C:AD:FE:CE:7F:BB:08:59:9F:E4:11:AC
Certificate issuer: /CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Certificate serial: 1A123CCA8D3CFEBED0B8F11FD2CB3A39EE1D1CB8
Authority key identifier: 17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
Signing time: Mon 10 Nov 2025 21:05:50 +0000
ROA not before: Mon 10 Nov 2025 21:00:50 +0000
ROA not after: Mon 09 Nov 2026 21:05:50 +0000
asID: 273728
IP address blocks: 2804:8b5c:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:12:3c:ca:8d:3c:fe:be:d0:b8:f1:1f:d2:cb:3a:39:ee:1d:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Validity
Not Before: Nov 10 21:00:50 2025 GMT
Not After : Nov 9 21:05:50 2026 GMT
Subject: CN=2897968313B58BA01CADFECE7FBB08599FE411AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:3f:52:b6:f6:cc:d7:34:66:ad:0d:1c:95:
80:8b:7b:b8:f9:8d:f1:60:a5:51:99:40:9a:e9:bb:
66:22:46:40:42:b7:70:d9:69:bc:cb:32:e6:61:d7:
64:d6:24:e0:73:55:7b:1c:48:f8:07:9b:c6:73:21:
3f:63:7c:26:eb:85:99:7a:4e:64:13:77:04:e2:24:
f2:ea:fc:a8:e2:93:17:9e:6e:04:2c:51:30:49:bf:
94:59:4d:71:ce:6e:03:a0:8e:0a:36:ff:59:d7:69:
63:0c:3c:97:c8:e5:7d:c3:05:0c:bf:56:e4:e3:2c:
3c:e9:34:0c:60:e6:63:5a:6a:89:0d:da:2d:10:7a:
82:4a:e1:63:9f:7e:37:31:67:ec:cf:54:81:80:4b:
a6:ca:d8:02:11:8c:5d:1b:92:c0:8c:cc:c3:d3:79:
fb:cd:7b:79:51:cb:4a:55:fb:90:82:88:29:2b:70:
e7:b7:14:96:b5:78:72:ce:6a:14:40:68:83:f7:f5:
13:ea:dd:fe:85:d6:9a:8a:88:b3:7e:f8:97:54:5b:
cc:23:b6:5d:e7:02:3e:58:98:8e:af:0f:e9:0e:3e:
be:0a:15:8f:e7:ac:1d:7d:d2:63:0d:df:ed:7d:ca:
8e:7f:f3:b8:e0:20:88:5a:a7:12:e1:f6:6b:ba:6f:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:96:83:13:B5:8B:A0:1C:AD:FE:CE:7F:BB:08:59:9F:E4:11:AC
X509v3 Authority Key Identifier:
keyid:17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
27:92:70:54:84:41:42:53:c7:68:21:90:e9:70:1b:24:15:d7:
bd:13:8d:52:a8:2b:77:1c:1b:40:54:0e:01:04:a1:17:ab:92:
f8:06:e5:10:56:82:9b:e6:eb:76:06:d9:6f:e1:64:d8:9d:24:
3e:7b:74:10:00:19:b3:01:e4:a8:eb:ee:92:82:39:cb:4e:5a:
5d:a7:86:d9:b8:e2:f3:87:de:3f:58:92:63:a7:63:71:38:aa:
38:ce:3d:7f:20:33:cd:6c:3c:80:43:a0:c1:40:a5:e7:28:4b:
28:01:b7:8a:b9:89:b3:63:fd:90:56:a7:38:14:6c:de:b8:b8:
3a:9e:16:78:60:d0:11:42:7b:18:9e:bc:ad:aa:e0:c7:81:0f:
b9:f6:57:66:0e:37:80:ab:79:46:c8:e1:86:f2:97:b4:97:c1:
71:0e:c0:19:31:be:cd:05:32:62:1d:d4:21:a6:34:b6:68:b5:
8f:ba:06:99:84:57:6e:df:35:8c:a6:0a:f4:bc:ea:f5:e3:6b:
9a:03:e3:0f:50:df:3f:11:45:49:65:35:17:1d:11:ba:fa:49:
c4:2f:be:49:26:ed:c2:6d:2b:9f:fa:c3:b2:08:da:dd:64:95:
a2:75:1d:75:66:de:52:f8:a9:9c:ee:3c:cd:f0:97:7c:be:01:
63:c0:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:44:05 2025 by rpki-client