This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa
File: 323830343a373763633a3a2f33322d3332203d3e20323731323030.roa (raw, json)
Hash identifier: ajogHMUk7QnWZoL4kEt7TJx/0q7mKvVzt76EsmFsrXE=
Subject key identifier: DC:90:5E:57:F7:54:54:90:76:41:7F:57:66:91:74:FE:41:6A:82:2A
Certificate issuer: /CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Certificate serial: 0FA21F98E18C7E221C6B1D724B272B6125E1F771
Authority key identifier: 71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa
Signing time: Sat 15 Nov 2025 17:46:29 +0000
ROA not before: Sat 15 Nov 2025 17:41:29 +0000
ROA not after: Sat 14 Nov 2026 17:46:29 +0000
asID: 271200
IP address blocks: 2804:77cc::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a2:1f:98:e1:8c:7e:22:1c:6b:1d:72:4b:27:2b:61:25:e1:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Validity
Not Before: Nov 15 17:41:29 2025 GMT
Not After : Nov 14 17:46:29 2026 GMT
Subject: CN=DC905E57F754549076417F57669174FE416A822A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:b1:1a:25:88:3d:72:f3:e0:1a:a4:03:36:
ef:18:fe:de:9c:8e:8a:26:df:aa:98:4f:6c:c3:e7:
d6:fe:e1:12:e9:d2:d5:de:a0:06:fd:b3:49:4c:28:
a3:63:ce:be:f0:fa:8a:a7:cb:49:d2:8d:1f:17:8b:
04:ec:bc:11:f5:9f:3f:db:91:25:ef:93:fa:fe:40:
9a:18:a7:fb:4e:0f:66:dc:09:3e:d0:00:fd:bc:2a:
40:2a:c6:64:2d:a0:74:20:50:74:20:6b:09:44:83:
8e:8f:aa:fd:d9:3a:8e:ca:1c:f0:9a:1c:42:ba:26:
1d:ce:3b:62:58:66:54:be:82:bd:b7:25:68:60:f6:
18:41:04:94:cd:ff:86:cc:e6:96:85:7a:e7:3e:a2:
10:c9:48:12:ac:cb:3c:40:8b:cc:b1:15:e0:3f:e4:
03:8f:3a:f4:d7:11:de:1f:75:c2:2b:88:25:db:0c:
cc:6c:d5:3f:48:15:b6:07:d3:0d:21:dd:62:7f:cf:
fc:d0:74:45:0f:5f:68:a8:de:13:4a:76:3f:a6:4c:
fb:a9:ee:8c:7b:d5:e1:c1:dc:1e:50:34:0d:94:f2:
2e:33:d0:b9:18:d2:49:79:3b:5b:6f:f9:e0:e4:91:
e1:35:f5:0c:10:e8:6b:ab:15:da:09:89:44:35:cb:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:90:5E:57:F7:54:54:90:76:41:7F:57:66:91:74:FE:41:6A:82:2A
X509v3 Authority Key Identifier:
keyid:71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77cc::/32
Signature Algorithm: sha256WithRSAEncryption
a6:22:9c:f9:ac:43:ae:c1:3f:67:4b:a0:a4:d4:82:f3:b0:61:
d9:18:ad:7d:aa:87:d1:e2:7f:c1:02:f2:79:70:d4:8e:83:a0:
18:86:07:d5:e9:52:7f:9f:64:c2:8d:56:10:42:bd:76:4e:9c:
e2:fd:39:b2:3e:90:f2:98:7b:a1:a1:86:83:dd:4b:cb:51:bd:
bd:e2:82:a1:62:9d:e3:ac:bc:e4:e5:8e:10:f3:f7:2e:67:a7:
5d:dd:ad:ca:45:07:b7:39:79:2c:e8:1f:d8:a7:c3:0e:5e:09:
bf:8a:d9:78:95:ea:ce:74:c6:59:c3:71:7e:aa:29:dc:53:ef:
0f:95:a9:cb:38:3f:fc:2d:c6:1a:ea:4e:34:83:19:62:e7:93:
c7:72:9f:ef:f8:00:72:45:ce:60:17:08:d2:56:b7:12:85:90:
32:05:4b:73:92:44:22:53:a8:2a:cd:68:a1:80:8e:6a:8d:a4:
e1:5a:f6:dd:49:81:9a:17:cc:c6:c0:ea:b4:0a:3e:41:50:3d:
28:d8:e8:e8:09:c6:47:61:38:39:f0:76:09:ac:03:cc:25:01:
eb:bb:05:dd:8a:e4:5c:58:02:40:70:1d:4d:a6:5c:21:59:c7:
50:84:06:9a:ce:10:73:5c:cf:45:48:0d:5b:2e:64:e3:4d:f9:
51:16:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:17 2025 by rpki-client