This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa
File: 323830343a356432633a3a2f33322d3438203d3e20323638393535.roa (raw, json)
Hash identifier: PTiiI38bDfG64CV3gdNmi0yDwmhg9RQyu0FsJx7c4WI=
Subject key identifier: DD:0A:E6:58:1A:A2:94:66:5C:E9:B2:62:51:FF:39:0A:73:83:3E:8C
Certificate issuer: /CN=9585286624B3FE02B7690BEE57E89C3FA5D4770E
Certificate serial: 38F4BA237AF7584ABCED675E5A7698A9859417BD
Authority key identifier: 95:85:28:66:24:B3:FE:02:B7:69:0B:EE:57:E8:9C:3F:A5:D4:77:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa
Signing time: Tue 13 Jan 2026 19:22:26 +0000
ROA not before: Tue 13 Jan 2026 19:17:26 +0000
ROA not after: Tue 12 Jan 2027 19:22:26 +0000
asID: 268955
IP address blocks: 2804:5d2c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.crl
rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 05:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f4:ba:23:7a:f7:58:4a:bc:ed:67:5e:5a:76:98:a9:85:94:17:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585286624B3FE02B7690BEE57E89C3FA5D4770E
Validity
Not Before: Jan 13 19:17:26 2026 GMT
Not After : Jan 12 19:22:26 2027 GMT
Subject: CN=DD0AE6581AA294665CE9B26251FF390A73833E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:b6:32:94:ed:e8:10:9e:ea:9e:0a:cb:26:
37:57:8d:7d:ec:fd:f1:15:9e:05:66:8c:d3:b7:32:
13:b0:f8:61:2a:63:9c:c9:f7:b2:c0:8e:7c:bf:b6:
c2:ab:99:39:89:ef:ac:49:99:b8:57:16:c5:c8:a7:
60:b3:5b:d5:b5:c8:5d:61:0d:87:6b:b4:0a:35:4c:
25:74:92:b5:49:aa:47:39:f1:89:1e:45:8c:a1:d8:
25:dd:48:46:6f:a1:8e:7a:b2:7d:07:e4:89:13:a2:
64:95:f0:1e:7d:bf:ca:d1:1d:6e:ec:5d:c0:12:b2:
ee:76:9d:bd:7d:fa:06:4e:c9:78:38:ed:99:0b:6e:
c7:60:a4:71:98:d9:6a:ff:b8:af:59:48:35:d3:91:
84:fd:b2:4c:e3:15:5c:31:2f:90:76:e8:aa:21:e3:
b6:d6:7e:a3:d2:ce:89:c9:04:f3:0f:8c:12:f4:b1:
85:e4:b9:ee:08:21:0b:c1:7f:32:c5:6b:5f:81:df:
54:88:b6:91:3b:68:47:4d:76:25:70:7b:dc:21:3a:
a3:7a:f2:d8:2f:f1:b3:86:fc:35:9d:c2:bc:a6:11:
cf:f1:ea:ef:5b:8b:0a:95:c9:39:39:f3:f2:56:0a:
ba:8e:04:9c:6f:7a:a7:67:a9:43:f4:de:d0:75:b0:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0A:E6:58:1A:A2:94:66:5C:E9:B2:62:51:FF:39:0A:73:83:3E:8C
X509v3 Authority Key Identifier:
keyid:95:85:28:66:24:B3:FE:02:B7:69:0B:EE:57:E8:9C:3F:A5:D4:77:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5d2c::/32
Signature Algorithm: sha256WithRSAEncryption
76:f7:15:2e:d4:af:d6:d8:8e:c2:72:dd:5c:41:7b:eb:49:1a:
e4:e2:b6:de:2f:db:5d:29:dd:57:02:29:a1:22:88:b9:da:d6:
e6:54:2f:97:13:a9:ff:5b:1f:d5:3b:bf:49:95:97:3b:ed:82:
9d:96:57:74:0b:f0:fc:30:cc:af:ad:86:bd:85:70:c5:c0:64:
f6:57:f9:1f:68:65:68:5c:2a:75:1f:5d:34:cf:9a:66:dd:e3:
89:99:29:1a:e1:20:64:bf:13:4b:1d:89:da:32:88:ca:6a:ed:
3b:fe:bf:3f:42:74:38:97:fa:4f:cf:bb:a1:98:42:1f:54:aa:
13:9b:19:e1:0a:6c:0c:f4:4b:03:03:37:c6:ed:03:e6:2d:a5:
ea:3a:25:99:5b:19:c8:16:ae:ee:86:85:81:92:49:b0:bf:4f:
95:fd:25:c3:ab:bd:d6:00:89:9e:de:6f:70:11:55:b6:37:ee:
61:ab:9b:44:96:8f:f9:02:69:2f:74:76:bc:76:30:59:39:55:
ec:50:23:92:94:50:39:d4:b8:53:94:a7:bf:6c:e1:a5:cf:9c:
77:ed:1b:bf:ce:a9:71:2f:47:af:67:61:5d:14:01:9c:ea:88:
9a:8d:7d:91:1e:9f:d9:e1:35:65:b7:74:c7:94:c4:06:cd:1c:
23:3b:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:33 2026 by rpki-client