This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33332d3333203d3e203532383338.roa
File: 323830343a6264383a383030303a3a2f33332d3333203d3e203532383338.roa (raw, json)
Hash identifier: iX3rBjBn0N7iXHc83g6MEGfA2HUn5O3kTZUbVKO9V0A=
Subject key identifier: 6B:6A:8A:53:12:53:3E:7A:E8:DB:DD:86:FF:2F:C8:C2:01:45:99:B3
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 14540D56C1AFD73DBE3EDB4F99389DC1703F8E93
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33332d3333203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:46:38 +0000
ROA not before: Wed 03 Dec 2025 00:41:38 +0000
ROA not after: Wed 02 Dec 2026 00:46:38 +0000
asID: 52838
IP address blocks: 2804:bd8:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:54:0d:56:c1:af:d7:3d:be:3e:db:4f:99:38:9d:c1:70:3f:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:41:38 2025 GMT
Not After : Dec 2 00:46:38 2026 GMT
Subject: CN=6B6A8A5312533E7AE8DBDD86FF2FC8C2014599B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:5e:f4:bc:75:89:4c:21:4d:44:25:57:c3:
a1:ba:c4:7c:2b:b3:7c:16:41:5c:ee:bd:18:58:77:
94:49:61:28:90:ee:cb:c1:87:d1:d0:26:34:28:1b:
b6:22:9b:b2:e2:f8:08:95:0b:88:b8:e9:0c:b3:95:
cf:87:4f:bf:77:e8:52:0a:32:e2:84:4a:3c:e6:70:
62:94:18:49:15:82:0a:5a:44:2d:e5:e3:e0:8c:7a:
b6:ba:de:64:81:90:71:b3:4d:da:32:23:95:1e:0a:
9f:99:f3:27:7b:2f:91:2e:70:62:ee:46:32:8c:92:
7c:a7:89:17:99:7e:01:cc:32:f9:51:c9:c8:24:04:
77:78:69:f6:a7:4e:83:87:ed:a6:33:4b:67:79:57:
c4:c3:d1:01:5c:46:0a:04:b0:4d:2c:99:8c:4f:46:
c9:f9:66:7c:5b:64:f8:e9:9e:b9:ec:0d:f7:f8:5c:
e4:9a:31:57:1e:f7:e3:33:9c:52:8d:7b:39:e6:f4:
eb:44:10:96:54:03:bc:29:c4:bd:5d:68:66:b3:64:
6a:75:64:19:ed:a6:c1:97:92:25:9a:49:5d:fb:bd:
12:bb:f9:2e:79:a7:2f:b9:f1:22:24:83:68:d5:d1:
48:44:92:c4:3d:9d:65:34:27:67:a1:d5:f1:44:29:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:8A:53:12:53:3E:7A:E8:DB:DD:86:FF:2F:C8:C2:01:45:99:B3
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33332d3333203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:bd8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
7f:eb:47:90:76:c2:5a:1e:2c:d8:7c:9e:c5:7c:73:39:05:09:
52:06:91:2f:22:56:f5:30:e7:68:6b:91:53:7d:70:37:e2:a0:
1b:4e:76:98:e4:1b:44:1c:bb:ad:f6:4b:65:cb:fc:76:ef:05:
46:c6:5b:b4:34:91:ea:17:cc:00:e4:0d:f7:55:07:9e:df:95:
9e:6d:2c:d2:a1:6e:4f:50:aa:62:84:15:4c:e8:de:f6:dc:a0:
31:da:ce:03:d8:8f:87:9d:b7:0e:c0:6f:8a:16:aa:62:04:76:
25:e7:9c:64:fa:6a:d8:aa:8b:a6:48:a9:db:2a:13:a2:59:5a:
b9:51:db:98:84:3d:92:d7:fc:29:58:fb:88:b9:3a:b8:3e:83:
ef:6d:49:71:69:11:5c:01:34:e8:da:bb:28:d8:11:8a:0a:0b:
92:65:a1:22:6f:d9:72:3a:e1:55:bb:53:b5:4d:40:c1:69:d3:
b8:f3:ff:30:e9:24:fc:0b:23:4d:d8:33:5e:89:8f:7c:d2:ae:
e4:a4:75:cc:c7:f1:24:bb:1c:f6:14:10:0e:aa:f2:73:a9:62:
4f:dc:e7:e3:e5:60:93:a2:25:5c:19:61:c7:f3:a1:f0:5e:c6:
23:c2:3c:f2:5f:0d:9e:44:4b:f6:f6:8f:69:3d:e2:16:f2:ed:
5b:8e:3d:89
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUFFQNVsGv1z2+PttPmTidwXA/jpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDQxMzhaFw0yNjEyMDIwMDQ2MzhaMDMxMTAvBgNV
BAMTKDZCNkE4QTUzMTI1MzNFN0FFOERCREQ4NkZGMkZDOEMyMDE0NTk5QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNk170vHWJTCFNRCVXw6G6xHwr
s3wWQVzuvRhYd5RJYSiQ7svBh9HQJjQoG7Yim7Li+AiVC4i46Qyzlc+HT7936FIK
MuKESjzmcGKUGEkVggpaRC3l4+CMera63mSBkHGzTdoyI5UeCp+Z8yd7L5EucGLu
RjKMknyniReZfgHMMvlRycgkBHd4afanToOH7aYzS2d5V8TD0QFcRgoEsE0smYxP
Rsn5ZnxbZPjpnrnsDff4XOSaMVce9+MznFKNeznm9OtEEJZUA7wpxL1daGazZGp1
ZBntpsGXkiWaSV37vRK7+S55py+58SIkg2jV0UhEksQ9nWU0J2eh1fFEKS/PAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUa2qKUxJTPnro292G/y/IwgFFmbMwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4G
CCsGAQUFBzALhoGRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzIz
ODMwMzQzYTYyNjQzODNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAz
NTMyMzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQL2IAwDQYJKoZIhvcNAQELBQADggEBAH/r
R5B2wloeLNh8nsV8czkFCVIGkS8iVvUw52hrkVN9cDfioBtOdpjkG0Qcu632S2XL
/HbvBUbGW7Q0keoXzADkDfdVB57flZ5tLNKhbk9QqmKEFUzo3vbcoDHazgPYj4ed
tw7Ab4oWqmIEdiXnnGT6atiqi6ZIqdsqE6JZWrlR25iEPZLX/ClY+4i5Org+g+9t
SXFpEVwBNOjauyjYEYoKC5JloSJv2XI64VW7U7VNQMFp07jz/zDpJPwLI03YM16J
j3zSruSkdczH8SS7HPYUEA6q8nOpYk/c5+PlYJOiJVwZYcfzofBexiPCPPJfDZ5E
S/b2j2k94hby7VuOPYk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:13 2025 by rpki-client