This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33322d313238203d3e20323633393830.roa
File: 323830343a323863383a3a2f33322d313238203d3e20323633393830.roa (raw, json)
Hash identifier: ZwoJ9apGaavL9wI8wRAKnE+jyQbqTAT2rwfVVRZcQXY=
Subject key identifier: B4:6D:B3:1F:E4:2E:98:94:C6:99:1F:33:AD:41:93:CE:51:14:DD:6F
Certificate issuer: /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial: 5DD1FC930D2D42190D7C5CEFB13F6A9AE6BECC20
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33322d313238203d3e20323633393830.roa
Signing time: Thu 18 Dec 2025 12:33:10 +0000
ROA not before: Thu 18 Dec 2025 12:28:10 +0000
ROA not after: Thu 17 Dec 2026 12:33:10 +0000
asID: 263980
IP address blocks: 2804:28c8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 19:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d1:fc:93:0d:2d:42:19:0d:7c:5c:ef:b1:3f:6a:9a:e6:be:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Validity
Not Before: Dec 18 12:28:10 2025 GMT
Not After : Dec 17 12:33:10 2026 GMT
Subject: CN=B46DB31FE42E9894C6991F33AD4193CE5114DD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:83:53:5d:56:21:27:b7:32:ca:54:15:22:
ac:24:47:ad:50:cf:d5:f6:d3:34:8e:26:40:36:fd:
a4:c7:34:1b:d4:d1:63:78:e8:a9:4c:cb:ea:11:ff:
ee:80:01:ed:49:5f:e7:fe:f1:d7:af:39:09:24:3f:
71:fc:be:dc:d4:06:f7:81:c3:2b:77:71:2d:1f:7d:
d6:ea:2d:2e:c1:9c:52:0f:14:81:7d:f3:30:c9:17:
4a:ce:47:3f:3a:8a:c2:07:e3:76:9f:4e:f9:2c:7b:
27:e2:97:18:28:43:41:17:b1:c8:8d:52:09:59:29:
7e:29:ed:ac:36:02:41:48:5d:fe:a3:73:88:92:04:
58:05:7a:6b:ca:61:f7:71:2f:96:1d:53:71:f5:2a:
c1:e0:1f:e9:09:0c:a9:63:e6:b8:0a:17:89:60:ca:
2e:e1:4c:cb:80:a2:69:bb:22:22:9b:d6:da:a1:15:
99:d0:da:77:92:4f:ec:bc:f6:8e:1e:81:a6:1a:4a:
a8:06:99:0f:8d:aa:f4:90:f5:b0:91:d5:b3:28:54:
c0:b1:95:7a:9a:df:a1:5b:34:fc:5b:08:57:e5:79:
7b:ad:de:09:d8:e4:c9:83:9a:e3:4b:dd:fa:e1:de:
77:65:84:fb:6b:26:22:eb:dd:bb:84:0f:b3:37:74:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6D:B3:1F:E4:2E:98:94:C6:99:1F:33:AD:41:93:CE:51:14:DD:6F
X509v3 Authority Key Identifier:
keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33322d313238203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:28c8::/32
Signature Algorithm: sha256WithRSAEncryption
8a:ac:62:48:e3:cf:9e:dc:ba:1f:6a:12:88:44:db:ec:65:c1:
19:81:87:e2:0b:f2:18:51:47:d2:7c:c6:51:e2:b0:32:af:4c:
3c:02:a3:74:b7:b2:e9:15:e4:0a:e0:74:8c:82:d8:e5:1e:72:
94:7f:b2:2c:c9:41:5d:9a:b2:ad:99:91:da:3f:14:90:4d:f5:
07:12:6e:85:9a:36:75:18:15:15:2a:ad:d8:7a:2a:60:e5:04:
1d:74:19:db:7e:ad:4f:99:f9:38:41:cc:d9:22:a2:a6:15:b6:
80:18:8e:9f:bc:b7:b9:98:7d:04:5e:28:ba:7c:76:22:8d:6d:
8e:5c:23:72:1c:f4:90:59:c3:62:16:73:4b:cc:ab:96:8a:b7:
01:d4:9b:63:94:e0:ae:70:e7:6e:b7:6f:73:98:d0:b0:ab:95:
24:7e:83:dd:3f:cc:1c:a0:94:3e:2f:c3:ef:aa:6c:55:7f:b8:
df:8c:c2:c2:eb:ae:0c:fa:3d:7c:3c:b3:15:5a:d6:b5:cd:f1:
a2:6b:08:dc:6e:e7:a9:ef:b6:75:32:e2:c6:da:44:d2:2d:be:
66:af:ef:f2:32:9d:32:4d:d2:66:35:8d:c9:ef:1d:01:5a:4f:
57:fa:6b:57:23:3a:ef:70:7b:72:a9:9f:0f:7a:c5:7e:fb:bb:
7b:3e:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:09:29 2025 by rpki-client