This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa
File: 323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa (raw, json)
Hash identifier: I2F1WfqlYpi8WFf7dl1acgEvRCVcqgkFsW9SWIT+mVM=
Subject key identifier: 94:4A:54:91:49:FF:E8:C1:A6:B8:8A:E6:85:C1:A8:F2:45:37:EB:C5
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 43EF7AEBAB19E5B9F4E4609F5BF8BACCECB04BFB
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:48:32 +0000
ROA not before: Wed 03 Dec 2025 00:43:32 +0000
ROA not after: Wed 02 Dec 2026 00:48:32 +0000
asID: 52838
IP address blocks: 2804:bd8:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ef:7a:eb:ab:19:e5:b9:f4:e4:60:9f:5b:f8:ba:cc:ec:b0:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:43:32 2025 GMT
Not After : Dec 2 00:48:32 2026 GMT
Subject: CN=944A549149FFE8C1A6B88AE685C1A8F24537EBC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:81:8f:58:91:14:3e:9f:60:c8:f4:38:f3:
f3:ba:a5:10:2f:d7:22:82:d0:c8:bf:59:f7:95:de:
1e:8e:d0:60:55:da:b7:36:cc:23:67:18:12:62:c7:
5a:60:35:04:93:aa:77:23:4f:37:4b:4c:b7:9d:03:
d5:b7:fe:9d:f8:4d:39:72:ba:af:75:9d:02:fe:16:
d4:d0:24:7f:3f:e4:da:b4:06:26:da:e4:f0:a4:f0:
35:15:33:ed:0b:6c:43:49:a0:de:77:5a:2d:25:a7:
9d:89:63:dc:74:92:75:29:86:73:82:41:c6:05:75:
e9:3d:de:d4:eb:7f:cf:37:60:c6:64:e9:09:8f:ba:
17:c6:db:4c:ba:0c:e1:29:3f:86:b8:f2:b5:00:04:
48:3d:ec:b2:b6:80:24:06:cc:00:55:ed:d0:47:3b:
2f:10:03:3b:7d:f1:5a:92:cb:b3:1a:91:67:b9:6d:
c4:74:76:70:82:e8:b6:48:f0:ed:8b:55:4d:ba:a8:
e6:51:62:1a:c8:74:df:4e:61:46:2f:f1:44:eb:e2:
72:95:39:9a:1d:19:c8:cb:b9:b0:17:ea:a9:13:63:
0b:49:91:19:09:61:50:e3:92:40:0b:b4:be:b8:a2:
1f:75:77:53:81:b6:03:ae:8d:a9:ba:c6:cf:93:32:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:54:91:49:FF:E8:C1:A6:B8:8A:E6:85:C1:A8:F2:45:37:EB:C5
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:bd8:8000::/34
Signature Algorithm: sha256WithRSAEncryption
06:3d:cb:1d:dc:8f:ea:55:11:b6:33:91:5d:e8:f7:ad:7e:d6:
6a:eb:fc:39:e5:d0:63:3b:71:92:d6:c6:a6:ca:fc:d8:d2:98:
12:64:99:b3:93:3d:a5:e5:c3:b6:35:1e:d3:18:a3:bf:b9:22:
99:eb:24:8b:df:06:89:90:e0:90:25:76:2a:4f:1a:80:e3:d0:
b4:fe:01:ef:1a:7b:28:3e:ac:c9:1b:9e:12:d3:22:8d:a7:06:
3a:5c:2e:57:ea:ef:85:9c:ea:d3:93:0f:74:76:29:13:6a:75:
ac:b6:40:8e:3d:1b:4f:2c:dc:d8:ee:1b:84:dd:05:35:df:b9:
a7:1c:f8:91:83:a5:0e:9c:c4:8b:30:14:3d:9e:f1:c2:a0:0a:
1e:24:aa:90:68:aa:b2:c7:ff:ee:ab:0a:22:b7:03:70:b8:59:
64:f6:67:3f:71:df:20:9b:b4:c5:be:a4:c9:11:14:9b:25:f2:
25:c1:24:da:85:1a:6b:32:57:fe:86:6c:07:4b:6f:b0:f8:37:
9d:7c:bf:b4:08:6c:0d:a6:b5:73:72:65:41:54:d6:5a:a3:68:
2c:ce:82:e6:8c:7b:bd:ac:c7:af:f0:a2:9a:61:f1:29:52:01:
aa:6c:a0:52:cf:3d:29:48:b5:87:dc:c0:c0:33:60:5d:72:8d:
a6:d7:19:b7
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUQ+9666sZ5bn05GCfW/i6zOywS/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDQzMzJaFw0yNjEyMDIwMDQ4MzJaMDMxMTAvBgNV
BAMTKDk0NEE1NDkxNDlGRkU4QzFBNkI4OEFFNjg1QzFBOEYyNDUzN0VCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEw4GPWJEUPp9gyPQ48/O6pRAv
1yKC0Mi/WfeV3h6O0GBV2rc2zCNnGBJix1pgNQSTqncjTzdLTLedA9W3/p34TTly
uq91nQL+FtTQJH8/5Nq0Biba5PCk8DUVM+0LbENJoN53Wi0lp52JY9x0knUphnOC
QcYFdek93tTrf883YMZk6QmPuhfG20y6DOEpP4a48rUABEg97LK2gCQGzABV7dBH
Oy8QAzt98VqSy7MakWe5bcR0dnCC6LZI8O2LVU26qOZRYhrIdN9OYUYv8UTr4nKV
OZodGcjLubAX6qkTYwtJkRkJYVDjkkALtL64oh91d1OBtgOujam6xs+TMk7vAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUlEpUkUn/6MGmuIrmhcGo8kU368UwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4G
CCsGAQUFBzALhoGRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzIz
ODMwMzQzYTYyNjQzODNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAz
NTMyMzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYGKAQL2IAwDQYJKoZIhvcNAQELBQADggEBAAY9
yx3cj+pVEbYzkV3o961+1mrr/Dnl0GM7cZLWxqbK/NjSmBJkmbOTPaXlw7Y1HtMY
o7+5IpnrJIvfBomQ4JAldipPGoDj0LT+Ae8aeyg+rMkbnhLTIo2nBjpcLlfq74Wc
6tOTD3R2KRNqday2QI49G08s3NjuG4TdBTXfuacc+JGDpQ6cxIswFD2e8cKgCh4k
qpBoqrLH/+6rCiK3A3C4WWT2Zz9x3yCbtMW+pMkRFJsl8iXBJNqFGmsyV/6GbAdL
b7D4N518v7QIbA2mtXNyZUFU1lqjaCzOguaMe72sx6/wopph8SlSAapsoFLPPSlI
tYfcwMAzYF1yjabXGbc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:22 2025 by rpki-client