This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
File: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (raw, json)
Hash identifier: SqaG1ByEtLKbKBLHPMaGERDNDokiA6oFQqtdLll8Mpw=
Subject key identifier: 35:88:79:9D:DF:01:66:10:9F:8F:6A:7F:C3:C1:6B:74:C5:C1:10:F8
Certificate issuer: /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Certificate serial: 30401130B54FA9C503634E409566FE8D25CE47
Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
Signing time: Thu 08 Jan 2026 12:04:19 +0000
ROA not before: Thu 08 Jan 2026 11:59:19 +0000
ROA not after: Thu 07 Jan 2027 12:04:19 +0000
asID: 263442
IP address blocks: 2804:11d4::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl
rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 15:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:40:11:30:b5:4f:a9:c5:03:63:4e:40:95:66:fe:8d:25:ce:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Validity
Not Before: Jan 8 11:59:19 2026 GMT
Not After : Jan 7 12:04:19 2027 GMT
Subject: CN=3588799DDF0166109F8F6A7FC3C16B74C5C110F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:4b:70:b1:de:c5:30:95:9e:e7:85:4d:8e:
39:44:48:85:c6:4f:58:4a:5f:e5:b8:a2:81:f6:d5:
84:3b:e2:b7:70:96:da:ff:76:ce:8d:0f:96:9d:96:
48:0c:f2:8f:35:d3:b0:95:68:96:c5:04:29:a9:7d:
2c:b6:51:c2:ee:01:0c:55:20:b1:ca:8f:86:4a:36:
01:e3:72:fb:85:26:a4:de:4b:77:23:5a:0a:e4:10:
3c:b6:9a:65:06:96:61:ef:df:80:f1:ae:ef:25:92:
9c:7c:3e:bd:08:0b:99:9c:d0:4d:6d:0c:cf:65:7a:
f7:5a:f2:ba:47:18:d8:26:aa:ad:64:53:9d:1a:52:
fe:50:d7:c0:06:0d:fc:9c:89:7b:0d:36:6d:0a:63:
ff:dd:46:27:16:20:7c:0f:ef:f6:81:95:07:d3:a6:
ef:44:87:1c:e3:3b:8d:5d:ed:7c:96:25:d7:9e:8d:
94:a7:f3:9d:18:af:a1:a5:4c:2b:ba:fc:0b:d3:83:
a9:3c:26:dd:34:8f:0c:b6:a3:25:32:ea:a9:7b:d4:
da:a9:9d:c8:0c:c4:76:b3:6d:6f:5d:4d:db:15:f1:
b7:37:e0:4d:d0:e9:9c:7a:74:a0:b1:86:cf:ea:7e:
06:04:5e:49:79:79:96:61:16:af:59:49:97:fb:40:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:79:9D:DF:01:66:10:9F:8F:6A:7F:C3:C1:6B:74:C5:C1:10:F8
X509v3 Authority Key Identifier:
keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:11d4::/32
Signature Algorithm: sha256WithRSAEncryption
b2:32:1f:4b:4e:5b:b1:23:bd:a8:a6:41:85:91:89:65:22:e2:
d2:f8:73:c2:c0:83:7f:5e:83:1a:9d:bd:a7:c4:05:9f:dd:cd:
72:c4:e8:da:ea:c7:68:47:70:a4:a7:23:02:0b:ad:e6:70:e2:
08:c8:f2:4a:d8:e4:7e:c5:f4:c7:16:99:05:61:2a:b2:06:26:
83:92:a0:51:74:da:d3:43:14:2a:0f:97:57:58:0a:1b:0d:cb:
24:0f:1c:76:8c:54:d4:33:35:bd:89:52:6a:1d:23:c3:cf:cf:
e4:e9:45:44:ee:5a:bc:8b:0f:8f:32:6f:12:fa:87:83:4a:01:
f1:36:19:05:74:69:46:28:63:ee:80:85:27:d8:6e:b1:df:39:
7b:c4:1d:35:96:fd:99:8e:f2:88:e5:40:76:e5:d2:05:33:e0:
97:f3:d8:6b:97:2f:7c:9a:47:ae:0f:cb:02:60:0b:1b:b5:84:
64:49:a2:0a:59:ab:b7:f2:b7:06:ec:dc:c8:8b:a3:a7:19:bb:
4f:0b:74:cb:76:3c:0c:62:9a:00:cb:d9:7a:c8:af:33:d0:39:
17:ed:31:d1:b9:3e:47:89:7e:db:51:ee:59:21:45:98:73:5d:
ba:76:66:2b:2a:55:ad:ff:15:31:8c:57:21:b3:a1:85:cf:44:
5a:89:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:32:21 2026 by rpki-client