This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/323830343a316563633a3a2f33322d3438203d3e20323634343438.roa
File: 323830343a316563633a3a2f33322d3438203d3e20323634343438.roa (raw, json)
Hash identifier: x4D+RR475255YD8WkvS4MMEFntZsaRLQ7bJy8kJa7rE=
Subject key identifier: 08:29:67:A2:5A:45:10:9E:12:4B:17:74:CA:89:46:09:A5:27:6D:91
Certificate issuer: /CN=B52A0D870CC703D8D9FE35123E1890C611011310
Certificate serial: 46DD02A952BFB76BDB5600B6C03BB1D8B0ADD4BC
Authority key identifier: B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/323830343a316563633a3a2f33322d3438203d3e20323634343438.roa
Signing time: Sun 14 Dec 2025 22:21:31 +0000
ROA not before: Sun 14 Dec 2025 22:16:31 +0000
ROA not after: Sun 13 Dec 2026 22:21:31 +0000
asID: 264448
IP address blocks: 2804:1ecc::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl
rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 16 Dec 2025 18:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:dd:02:a9:52:bf:b7:6b:db:56:00:b6:c0:3b:b1:d8:b0:ad:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52A0D870CC703D8D9FE35123E1890C611011310
Validity
Not Before: Dec 14 22:16:31 2025 GMT
Not After : Dec 13 22:21:31 2026 GMT
Subject: CN=082967A25A45109E124B1774CA894609A5276D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:1a:b4:4b:eb:6c:82:94:46:ec:f0:81:e9:
bf:3d:d9:ce:bb:05:06:e4:33:8e:08:29:56:76:fd:
59:e6:3c:b3:dc:96:96:e1:96:a5:33:99:1b:e9:3f:
7b:16:9e:fd:32:e9:c5:b7:cf:4e:df:36:8e:da:c3:
c8:47:d4:d1:b8:81:05:a2:82:9b:3b:fb:5a:71:cb:
09:e1:33:70:61:a9:5a:ac:76:a3:41:2d:5c:1f:5d:
0e:a5:76:f6:f9:df:37:5a:58:ad:b8:d7:d9:fd:11:
49:ad:06:0e:10:d6:15:e5:13:2f:01:b6:76:b2:66:
8f:1a:25:c1:54:ca:b3:57:d8:c6:65:b5:f1:07:1c:
ae:69:11:0d:59:be:8e:b9:bb:3f:b2:2c:9f:48:77:
55:17:18:42:b3:e5:96:18:67:79:17:8b:c9:d8:cd:
20:f3:22:e2:7e:c2:2b:ce:39:d9:93:94:30:83:10:
24:19:c1:f7:e0:77:e3:c2:18:13:ec:a3:4a:a2:a1:
2d:70:d6:cb:bb:22:5f:3e:13:30:98:d3:6f:5a:d6:
4e:13:41:64:6d:03:db:a8:47:a2:92:66:be:48:7c:
d2:ae:65:7a:85:55:d0:fc:18:b4:e3:45:42:04:f5:
e6:01:5f:8d:b6:92:28:32:12:f5:57:df:79:80:f1:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:29:67:A2:5A:45:10:9E:12:4B:17:74:CA:89:46:09:A5:27:6D:91
X509v3 Authority Key Identifier:
keyid:B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/323830343a316563633a3a2f33322d3438203d3e20323634343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1ecc::/32
Signature Algorithm: sha256WithRSAEncryption
1b:dd:52:d8:84:fc:c3:db:14:4e:4c:ed:c4:af:9c:0e:d6:8a:
5c:7e:e4:01:14:b5:ce:9d:7c:76:50:79:74:01:07:9f:23:80:
97:53:ca:9b:eb:50:06:5c:db:44:ad:13:cd:13:0d:7d:32:73:
fe:29:ec:73:c8:40:7d:f9:a4:1c:0a:b2:12:12:64:b2:67:b3:
30:d1:e2:5b:07:82:50:df:a1:86:c6:c9:83:5f:b6:d6:75:f9:
13:80:29:f2:6c:c6:84:36:7d:b4:ad:18:61:64:9c:d5:9f:df:
44:0f:be:51:e0:96:e7:f9:98:72:82:32:af:80:8c:f5:7a:2d:
d7:dc:37:dd:61:63:50:c5:01:49:c9:b6:a5:5b:af:ba:f8:82:
0d:20:80:d6:52:09:84:7e:d3:05:e8:6c:6c:d9:dc:54:2d:a2:
aa:29:55:b2:ba:9f:46:c0:32:1f:9d:76:88:47:20:7a:eb:57:
c4:47:f9:a3:1f:ee:b4:65:85:87:c6:f9:e3:75:de:40:b5:98:
50:89:e7:3c:46:f2:50:eb:21:63:eb:da:19:a4:12:a9:fd:3e:
6e:a8:24:26:b3:c0:01:78:77:c8:94:45:b8:30:2a:1c:0b:fb:
3f:d1:f7:11:e7:d1:74:15:7e:68:23:1b:f7:2d:b4:24:28:5a:
55:84:65:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:08:10 2025 by rpki-client