This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f34382d3438203d3e20323731323030.roa
File: 323830343a373763633a3a2f34382d3438203d3e20323731323030.roa (raw, json)
Hash identifier: ehNE7OTHb6Wn9yUhz1VMuFeWU08ANzrT0UwKdMMbA9U=
Subject key identifier: 61:CE:25:60:DE:8E:70:F1:DC:F1:F0:F9:6B:80:47:F9:F3:53:E7:CA
Certificate issuer: /CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Certificate serial: 552033BA18A9445E9D96ED6EF4C4E60E6BC6CAAF
Authority key identifier: 71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f34382d3438203d3e20323731323030.roa
Signing time: Sat 15 Nov 2025 17:46:29 +0000
ROA not before: Sat 15 Nov 2025 17:41:29 +0000
ROA not after: Sat 14 Nov 2026 17:46:29 +0000
asID: 271200
IP address blocks: 2804:77cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:20:33:ba:18:a9:44:5e:9d:96:ed:6e:f4:c4:e6:0e:6b:c6:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Validity
Not Before: Nov 15 17:41:29 2025 GMT
Not After : Nov 14 17:46:29 2026 GMT
Subject: CN=61CE2560DE8E70F1DCF1F0F96B8047F9F353E7CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:0b:77:99:33:6b:b7:d4:df:fb:32:a8:e8:
bb:40:6f:a8:80:76:4c:88:2b:db:75:3f:bf:2b:9c:
c3:c8:8c:23:c3:d4:ca:b1:c1:bf:80:56:73:ca:8c:
06:a8:b7:e2:ee:11:0b:95:32:94:e7:a5:a9:4c:5d:
85:9e:0c:17:bf:15:4a:ce:be:4b:f7:ea:c3:be:9b:
b9:b6:80:76:d2:c6:6d:81:61:01:b0:d5:59:7a:76:
63:6a:6b:1e:20:c7:5c:81:68:7e:5c:86:3a:1b:38:
00:de:14:8c:d6:b5:da:93:9a:12:c9:0a:b2:d1:03:
fb:e8:ab:9b:ba:08:b4:ca:60:ec:3b:d8:fa:4a:80:
6b:62:f7:7f:ef:4f:0e:35:82:c1:14:ba:2c:99:08:
60:90:48:f2:73:2f:b8:61:d1:97:57:32:6b:20:99:
50:ab:f2:45:63:5f:ca:88:f3:56:bf:94:30:01:8f:
97:95:a8:3e:83:9e:02:51:d9:7b:ec:53:40:1a:6c:
e6:2c:84:ef:a3:48:42:01:fd:c4:a0:90:6c:1a:b7:
61:ce:c6:81:91:97:46:f2:8f:f7:f6:5b:fe:86:eb:
55:39:5e:e5:f5:9d:5b:0d:2f:c2:a9:87:e2:2a:da:
65:59:75:38:07:c6:d4:80:60:76:64:2a:f8:66:6b:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:25:60:DE:8E:70:F1:DC:F1:F0:F9:6B:80:47:F9:F3:53:E7:CA
X509v3 Authority Key Identifier:
keyid:71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f34382d3438203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77cc::/48
Signature Algorithm: sha256WithRSAEncryption
86:2d:e6:63:2c:cb:26:ad:ba:f0:18:9a:d7:50:87:fa:c3:22:
a2:17:c4:fa:94:0f:1b:de:da:f1:b3:a7:85:77:1f:67:a1:75:
0c:da:a7:dc:68:76:5f:be:66:c4:ff:9c:b1:d3:d3:9f:d4:a7:
15:d1:95:ac:b9:5f:55:94:80:2b:d6:64:d5:15:e7:bd:06:55:
dc:52:25:6f:54:70:6a:f5:a9:3d:e8:91:46:90:52:64:b6:04:
05:9c:9e:6b:f2:bb:53:fa:93:2c:da:e8:2a:3c:c2:df:73:5f:
c7:ce:7a:b0:f8:ca:32:58:fb:37:6f:c5:90:63:7b:a2:6d:2e:
19:8c:2c:ed:2f:22:84:b3:a2:6d:d3:07:1b:3a:5c:12:0e:f7:
02:c2:a9:1e:0c:96:9a:12:20:b5:2e:78:38:9e:e4:e7:08:2d:
25:34:22:f3:a2:b6:e1:d4:57:8f:2c:6e:c9:dc:9f:ea:f8:90:
7a:a9:e6:09:4d:8b:6f:e3:e5:f3:10:61:35:ef:7b:d4:1c:2c:
7a:47:c7:54:7c:17:97:b3:a4:67:99:9c:12:c9:56:9d:27:03:
7a:63:30:0a:26:af:6e:05:bc:61:4b:06:f8:6e:43:0f:03:ea:
8b:d4:f0:51:82:90:4b:f3:63:b4:f0:8b:5a:66:09:cb:17:c6:
c2:93:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:57 2025 by rpki-client