This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa
File: 323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa (raw, json)
Hash identifier: Jos3EL0QOn9pxUboT4q1dt7hM14Ff+9UdSZQk3BMmtE=
Subject key identifier: 5A:FF:50:13:E3:79:0A:61:79:AD:37:74:CD:99:65:E5:19:49:A6:49
Certificate issuer: /CN=EBB7F525C02B59CB9192A93DBB768402C465AF7C
Certificate serial: 340584B80174A477BFE3990BB051584DF4589829
Authority key identifier: EB:B7:F5:25:C0:2B:59:CB:91:92:A9:3D:BB:76:84:02:C4:65:AF:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB7F525C02B59CB9192A93DBB768402C465AF7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa
Signing time: Wed 14 Jan 2026 18:30:21 +0000
ROA not before: Wed 14 Jan 2026 18:25:21 +0000
ROA not after: Wed 13 Jan 2027 18:30:21 +0000
asID: 262533
IP address blocks: 2801:80:290::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/EBB7F525C02B59CB9192A93DBB768402C465AF7C.crl
rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/EBB7F525C02B59CB9192A93DBB768402C465AF7C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB7F525C02B59CB9192A93DBB768402C465AF7C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 16:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:05:84:b8:01:74:a4:77:bf:e3:99:0b:b0:51:58:4d:f4:58:98:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBB7F525C02B59CB9192A93DBB768402C465AF7C
Validity
Not Before: Jan 14 18:25:21 2026 GMT
Not After : Jan 13 18:30:21 2027 GMT
Subject: CN=5AFF5013E3790A6179AD3774CD9965E51949A649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:1e:85:ce:2b:a5:0e:06:90:ed:4e:44:f6:
29:34:cc:0c:8e:1d:73:cc:88:99:ab:cf:b7:12:54:
e3:4c:47:c8:7d:e7:b6:92:6a:63:c0:cb:1d:66:61:
ae:82:6b:e0:d8:e3:bf:d6:57:ab:05:d7:d5:0d:84:
15:1a:c5:e0:50:29:26:18:dd:a4:a9:35:60:f4:52:
50:bb:fb:96:9f:e4:01:1b:d7:56:1d:5b:56:fc:d6:
14:07:6a:01:68:bf:ae:c8:d5:b4:eb:60:c8:75:5e:
43:38:78:b9:1c:b1:d7:c7:0c:8b:e7:f4:09:79:c9:
ce:35:d1:b8:55:5b:45:45:4a:ef:7f:38:6a:b0:89:
97:39:c7:7b:1c:46:4f:70:79:ba:10:c0:cc:18:39:
a4:74:9a:aa:eb:19:72:d8:cd:46:e9:ba:55:18:b0:
e6:2d:f5:a5:dc:39:16:ba:5f:b0:81:3c:11:41:b7:
95:38:dd:c4:56:f7:b4:8f:db:a6:65:75:81:f7:ff:
3c:1b:21:71:64:b1:18:03:36:7e:f7:b0:4c:6c:23:
f1:6a:30:50:26:9a:e8:65:c7:0f:d7:67:27:67:3a:
47:b2:e2:36:cf:4c:33:cb:67:5c:0e:41:f8:4e:65:
dd:bd:b6:00:87:cc:5a:c3:b8:38:cc:c0:3a:e4:5b:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:50:13:E3:79:0A:61:79:AD:37:74:CD:99:65:E5:19:49:A6:49
X509v3 Authority Key Identifier:
keyid:EB:B7:F5:25:C0:2B:59:CB:91:92:A9:3D:BB:76:84:02:C4:65:AF:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/EBB7F525C02B59CB9192A93DBB768402C465AF7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB7F525C02B59CB9192A93DBB768402C465AF7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:290::/48
Signature Algorithm: sha256WithRSAEncryption
c8:82:c4:a1:4a:6b:c3:54:7a:a2:f2:cc:32:6e:20:72:af:59:
2f:cb:22:98:08:0a:28:fa:b5:a0:ea:78:09:9d:d4:a8:5f:ec:
5e:ef:d3:49:a4:3c:c2:79:51:24:0a:28:15:2b:19:b6:e7:c1:
cf:94:64:b5:49:20:fd:f2:b0:35:bd:41:7b:54:4e:80:13:eb:
e2:8c:2a:ea:c0:14:e0:b4:4c:34:e4:9f:c8:b8:12:74:2c:e6:
57:e5:d2:58:e6:0f:1f:c9:b8:8e:e7:00:01:ec:1f:4e:78:01:
47:47:0b:6e:f9:97:ba:c9:f3:17:53:fb:df:8a:02:2c:ad:ed:
c1:9a:3c:07:7f:77:03:82:bb:ef:1a:9e:2a:de:6d:99:50:f7:
c4:b6:0c:e0:60:19:ad:a4:3c:e8:6b:27:68:94:51:6c:a5:9b:
f6:6f:69:88:45:95:d1:58:ad:51:4d:68:9c:70:fa:e7:bc:ce:
7f:5d:a9:35:32:a4:01:f8:ee:6d:9c:f3:2b:cf:bd:15:b3:e2:
41:42:ce:35:83:3e:47:64:5c:c0:3d:2d:e1:25:44:7f:6a:e3:
6a:d3:8d:6d:55:28:9d:46:09:2c:9b:c1:bc:b7:f3:e7:d7:f5:
bf:57:d7:fc:52:66:bc:71:b1:2a:23:e5:0a:50:4b:3b:81:f1:
b1:ea:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:17:46 2026 by rpki-client