This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
File: 323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier: b+fEM8W1228T+cZiyj+KBXvGQMHGvOU1ASF/ghX2mbg=
Subject key identifier: 75:D0:0E:B1:F7:25:05:2D:AB:83:16:02:B9:FC:37:98:63:8B:02:5A
Certificate issuer: /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial: 29916D6256B6D682CC5F5FA406184F16D39F1F4B
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
Signing time: Wed 17 Dec 2025 18:11:29 +0000
ROA not before: Wed 17 Dec 2025 18:06:29 +0000
ROA not after: Wed 16 Dec 2026 18:11:29 +0000
asID: 264425
IP address blocks: 2804:1e60:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 23:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:91:6d:62:56:b6:d6:82:cc:5f:5f:a4:06:18:4f:16:d3:9f:1f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Validity
Not Before: Dec 17 18:06:29 2025 GMT
Not After : Dec 16 18:11:29 2026 GMT
Subject: CN=75D00EB1F725052DAB831602B9FC3798638B025A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:86:42:83:b7:9e:f0:5d:75:0d:cb:32:ab:
29:f9:e7:84:e4:04:44:30:40:19:25:f6:db:a5:ee:
90:1e:53:a7:e0:0a:fe:47:bd:34:50:ee:4c:c8:22:
75:15:c7:ea:6d:9e:78:49:b0:12:07:1e:13:40:e5:
83:98:01:fe:0b:1f:76:92:e4:99:51:7e:75:9a:67:
52:81:fd:93:6e:f4:49:c9:5d:37:2a:89:6e:07:61:
3e:95:32:dc:29:80:96:81:2c:27:a1:ff:f0:eb:57:
4e:19:39:9a:4d:0c:d1:cb:ad:32:f5:6d:e7:b6:74:
a6:51:a9:0a:a8:5b:5f:8f:2b:1f:f4:da:a3:6d:16:
7b:b2:2a:6c:76:47:5c:83:82:b2:1d:8c:22:5c:b6:
63:3a:65:5e:12:52:2f:e1:c8:26:49:af:22:59:3d:
8c:47:90:6a:cb:eb:ba:43:e7:71:8c:a5:a6:38:ee:
ca:44:d1:c5:5f:d6:b8:78:6b:be:98:73:ad:ec:10:
35:46:53:20:8b:b7:da:a9:d8:61:29:0f:b4:4f:9f:
dd:c4:d9:a4:b8:1a:fa:5a:be:f5:03:1b:dc:79:c8:
c3:7c:b4:f3:d3:2a:24:de:64:89:56:e8:1b:08:b6:
2b:b9:50:7b:2e:78:5e:1b:c4:3f:f9:f3:8d:1d:35:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:0E:B1:F7:25:05:2D:AB:83:16:02:B9:FC:37:98:63:8B:02:5A
X509v3 Authority Key Identifier:
keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e60:4000::/36
Signature Algorithm: sha256WithRSAEncryption
28:46:7d:e6:c5:24:27:59:ab:cf:ce:07:61:25:08:cc:66:89:
11:7e:89:04:7d:fb:d9:10:2b:52:8e:aa:5d:bf:ec:ab:ee:67:
c8:dd:a0:b1:23:cc:39:34:17:6c:1c:51:c0:ef:c3:ea:dc:77:
0a:c1:e2:6a:64:6f:ef:d5:65:0b:07:71:b1:7c:04:1b:c8:50:
f5:33:c1:b2:2e:7d:38:a5:ff:d7:5d:19:fc:0d:e6:f4:98:50:
df:4e:14:a6:fe:be:7e:28:d7:49:3d:56:dc:48:f4:ac:57:65:
0f:56:ef:2b:49:ec:c8:bf:04:eb:db:2d:83:27:15:06:ab:3a:
46:dc:7a:0f:c5:2c:d2:45:78:ea:f1:e8:cd:36:95:ac:81:91:
7c:17:3e:db:a3:2a:52:c0:7a:88:87:5b:64:e6:de:e8:dc:f2:
ae:55:6e:9a:77:8f:8f:65:c2:e8:6a:f1:e8:c9:82:05:c4:1b:
3a:4e:79:41:c5:89:d2:62:22:3e:2b:85:51:d8:ca:8d:fd:2e:
95:e7:dd:fb:57:e2:54:69:af:c1:fb:d5:75:e5:8d:a9:f4:d4:
87:4e:66:2e:ef:a6:a5:8d:5f:f8:3d:45:ec:94:df:fd:44:e5:
46:0a:ee:7e:34:37:1e:32:36:d5:bc:70:bb:2a:1d:b4:df:78:
ca:ae:e9:cf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKZFtYla21oLMX1+kBhhPFtOfH0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNBNjJDQ0FFQTE1NEJGQTcyQjBDRTk5M0RBMDJDMUFE
Q0VBNTIxNTAeFw0yNTEyMTcxODA2MjlaFw0yNjEyMTYxODExMjlaMDMxMTAvBgNV
BAMTKDc1RDAwRUIxRjcyNTA1MkRBQjgzMTYwMkI5RkMzNzk4NjM4QjAyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70oZCg7ee8F11Dcsyqyn554Tk
BEQwQBkl9tul7pAeU6fgCv5HvTRQ7kzIInUVx+ptnnhJsBIHHhNA5YOYAf4LH3aS
5JlRfnWaZ1KB/ZNu9EnJXTcqiW4HYT6VMtwpgJaBLCeh//DrV04ZOZpNDNHLrTL1
bee2dKZRqQqoW1+PKx/02qNtFnuyKmx2R1yDgrIdjCJctmM6ZV4SUi/hyCZJryJZ
PYxHkGrL67pD53GMpaY47spE0cVf1rh4a76Yc63sEDVGUyCLt9qp2GEpD7RPn93E
2aS4GvpavvUDG9x5yMN8tPPTKiTeZIlW6BsItiu5UHsueF4bxD/5840dNXWLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUddAOsfclBS2rgxYCufw3mGOLAlowHwYDVR0j
BBgwFoAUc6YsyuoVS/pysM6ZPaAsGtzqUhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL
NGQvMC83M0E2MkNDQUVBMTU0QkZBNzJCMENFOTkzREEwMkMxQURDRUE1MjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczQTYyQ0NBRUExNTRCRkE3
MkIwQ0U5OTNEQTAyQzFBRENFQTUyMTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv
MzIzODMwMzQzYTMxNjUzNjMwM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAoRn3mxSQnWavPzgdhJQjMZokRfokEffvZECtSjqpdv+yr7mfI3aCxI8w5
NBdsHFHA78Pq3HcKweJqZG/v1WULB3GxfAQbyFD1M8GyLn04pf/XXRn8Deb0mFDf
ThSm/r5+KNdJPVbcSPSsV2UPVu8rSezIvwTr2y2DJxUGqzpG3HoPxSzSRXjq8ejN
NpWsgZF8Fz7boypSwHqIh1tk5t7o3PKuVW6ad4+PZcLoavHoyYIFxBs6TnlBxYnS
YiI+K4VR2MqN/S6V5937V+JUaa/B+9V15Y2p9NSHTmYu76aljV/4PUXslN/9ROVG
Cu5+NDceMjbVvHC7Kh2033jKrunP
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:39:11 2025 by rpki-client