This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa
File: 323830343a326539303a3a2f33322d3438203d3e203532353238.roa (raw, json)
Hash identifier: 7MTy9/uN2SzdnBl63LwdNvM0xq935RpPT+5Uz/tFsSk=
Subject key identifier: 09:6F:68:10:CF:3E:2C:6A:E6:BD:36:48:72:2A:E3:42:7D:3C:41:EC
Certificate issuer: /CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
Certificate serial: 0B26DA3556FEAAF9B7119718B5574B932342C058
Authority key identifier: F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa
Signing time: Wed 21 Jan 2026 12:04:52 +0000
ROA not before: Wed 21 Jan 2026 11:59:52 +0000
ROA not after: Wed 20 Jan 2027 12:04:52 +0000
asID: 52528
IP address blocks: 2804:2e90::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl
rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:26:da:35:56:fe:aa:f9:b7:11:97:18:b5:57:4b:93:23:42:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
Validity
Not Before: Jan 21 11:59:52 2026 GMT
Not After : Jan 20 12:04:52 2027 GMT
Subject: CN=096F6810CF3E2C6AE6BD3648722AE3427D3C41EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:6e:59:63:c8:5e:fa:4c:a6:8f:9e:fe:29:
b5:71:40:9c:f9:31:c4:af:ae:3c:c4:77:f6:c6:72:
5c:c0:ca:01:6a:b6:46:59:58:72:09:4d:ce:c1:8b:
8c:8a:7f:bd:33:04:1a:61:ae:2e:01:a2:d8:3b:41:
d0:68:3f:63:b7:4a:41:39:db:c7:68:6f:0c:67:76:
0b:ea:d6:d7:da:1a:df:b1:1c:91:6e:cf:dc:dd:c5:
7e:94:b4:f1:2e:d0:e3:dc:89:68:63:d8:0a:53:62:
4f:ba:ba:ad:11:b3:74:b5:e7:4d:1d:e7:cb:5a:38:
d2:aa:f4:07:67:58:ea:c0:5b:44:e9:fe:33:1c:2d:
bc:d4:65:f8:1e:22:9f:9f:c5:c6:45:15:de:1c:62:
ac:02:f7:68:27:2a:44:a4:85:b8:0e:79:f1:cf:06:
67:87:c8:f7:87:29:ea:0a:67:0c:3b:30:9e:7b:cc:
93:56:64:3c:18:c1:c9:41:d3:41:a6:6a:4a:da:83:
0e:56:1f:4a:ea:13:85:f1:c7:95:be:f7:50:5c:84:
36:6e:22:d0:b4:b3:65:c9:6a:73:f5:d6:53:6f:4d:
3f:e8:a3:50:d8:4d:40:72:b9:ad:3d:5d:2f:5b:b0:
91:46:4b:75:53:f1:ad:63:b4:b8:4d:1b:00:06:f5:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:68:10:CF:3E:2C:6A:E6:BD:36:48:72:2A:E3:42:7D:3C:41:EC
X509v3 Authority Key Identifier:
keyid:F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e90::/32
Signature Algorithm: sha256WithRSAEncryption
ac:98:c0:f4:d0:47:de:57:58:bc:6d:de:a1:85:c2:83:4f:93:
44:9b:82:3b:21:97:01:ff:e0:6a:c2:87:5c:14:1c:75:88:13:
17:4d:be:ef:68:f9:88:bb:66:88:2e:4f:fa:d4:4b:8a:02:a9:
34:85:5b:96:23:71:d9:6c:6c:40:4e:9e:a9:ea:01:b0:14:4c:
ed:10:ce:64:c7:52:07:c4:86:f5:c6:6a:49:df:5e:4f:fd:3b:
ee:c8:2a:e8:83:cb:83:48:52:e2:4b:de:23:44:65:cd:34:d3:
43:2c:95:5c:2a:e4:22:ac:4d:e4:9e:30:13:ec:88:fa:62:49:
90:84:7c:41:9b:8a:f7:aa:c5:18:0a:15:0c:d4:c4:d7:fe:aa:
a8:a1:45:0a:92:cf:61:8e:2d:a2:03:93:ec:3f:33:1c:00:a0:
38:02:36:0c:b4:2b:72:58:69:24:60:67:c9:3b:35:b6:10:b4:
81:41:30:86:60:4e:41:1a:a6:68:fe:f3:31:50:bc:d5:c1:00:
3c:30:3d:ce:09:66:81:f2:63:c0:c9:77:46:4a:cb:ed:44:a1:
64:1e:d0:b0:ed:50:60:c7:1e:1e:65:f3:f3:69:c5:fa:07:44:
29:5b:9a:60:96:82:f7:8b:b9:0b:59:63:77:72:30:4e:e5:f2:
1d:25:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:10 2026 by rpki-client