This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa
File: 323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier: 4ahVeghNQdnzfuQvav6bte0JIw8HHW2KyxGCoCW9vfw=
Subject key identifier: 2C:EF:94:5D:4C:2B:87:BC:E3:52:F1:C1:2D:E5:1B:38:5D:C0:A7:C0
Certificate issuer: /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial: 77E185DE4DB264476730AF84277C93B9556AB3D0
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa
Signing time: Wed 17 Dec 2025 18:11:28 +0000
ROA not before: Wed 17 Dec 2025 18:06:28 +0000
ROA not after: Wed 16 Dec 2026 18:11:28 +0000
asID: 264425
IP address blocks: 2804:1e60:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 18:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e1:85:de:4d:b2:64:47:67:30:af:84:27:7c:93:b9:55:6a:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Validity
Not Before: Dec 17 18:06:28 2025 GMT
Not After : Dec 16 18:11:28 2026 GMT
Subject: CN=2CEF945D4C2B87BCE352F1C12DE51B385DC0A7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:bf:8a:e7:8f:2c:7a:48:01:64:58:12:bf:
ae:ca:ce:89:85:16:3a:55:05:76:65:d2:6c:80:a2:
81:bb:b7:02:4a:75:9e:cd:3a:8a:c6:7f:1e:43:dd:
3d:a1:32:ac:6f:0f:ae:53:77:61:a3:19:a2:8f:f1:
e4:21:61:02:a9:0f:e2:c9:12:ca:cc:f9:d6:0f:0b:
75:4d:1b:9b:0c:93:ba:92:1c:68:0a:f8:6e:e1:f6:
86:dc:b7:5c:ee:30:f0:db:3d:02:a9:55:08:ca:f0:
24:a3:b6:cd:ef:7f:cd:92:8a:3a:a5:97:9a:2d:e9:
ef:5a:b8:bf:f7:9f:84:f5:48:ff:8c:34:17:66:c7:
b3:23:e2:3f:41:7a:a1:a1:20:88:8c:89:ab:91:94:
65:bd:b7:36:19:ec:0f:18:85:17:9a:44:a6:ac:59:
1c:c1:84:e7:55:3d:f8:0b:17:c8:8c:23:cc:9b:46:
0f:b1:e6:77:9a:b9:93:52:da:79:59:8e:02:7e:e1:
19:99:91:d6:98:69:22:44:bf:1d:8d:9d:af:95:e8:
1a:34:99:f6:61:5a:c9:da:bf:34:43:4a:ff:c7:54:
bc:96:40:55:13:66:02:21:f7:15:e2:00:90:56:46:
15:9e:fa:e7:e3:23:59:40:75:fe:7f:58:12:d6:7c:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:94:5D:4C:2B:87:BC:E3:52:F1:C1:2D:E5:1B:38:5D:C0:A7:C0
X509v3 Authority Key Identifier:
keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e60:2000::/36
Signature Algorithm: sha256WithRSAEncryption
b7:c9:17:ad:e2:86:99:c2:bc:88:e2:81:ef:16:21:26:cb:f3:
5c:15:bc:dc:06:24:3d:32:68:b0:ab:5a:d8:03:ef:0c:03:28:
91:f6:b8:40:2a:4d:33:77:8b:55:37:7f:43:c9:53:3a:d9:24:
68:63:cc:cc:f9:97:87:66:4e:e8:a4:e1:df:95:d1:32:0c:88:
f9:fa:dd:85:ac:b3:47:a3:1d:00:23:97:38:ca:6d:ee:30:fb:
2d:83:3b:7f:86:4a:5a:d4:11:5e:ce:7a:6a:c8:3a:3c:e9:ca:
f2:e9:ee:38:c3:4a:95:43:62:77:55:68:df:92:01:13:8b:a7:
75:75:43:5f:7f:bb:53:53:4a:f5:3a:7f:39:d9:56:40:30:b1:
56:0c:39:ea:10:57:7b:49:3c:c2:b4:9c:a4:59:dc:a2:95:ff:
45:c3:ce:8e:b9:00:92:d0:c9:a7:a1:48:b4:20:c8:db:5e:a2:
c0:06:34:da:f8:ba:4b:0a:54:60:5a:46:76:fa:7f:3b:94:35:
04:9f:7a:d2:99:a8:73:96:eb:24:c9:7f:64:ff:61:7a:17:30:
5e:9e:76:19:61:d6:fe:c3:09:4f:f9:de:8d:54:44:61:44:77:
f2:d8:52:e4:53:12:a4:05:d5:1f:4c:c3:36:5c:f7:cd:c1:c9:
61:d1:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:10:22 2025 by rpki-client