This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/323830343a323535383a3a2f33322d3438203d3e20323634323735.roa
File: 323830343a323535383a3a2f33322d3438203d3e20323634323735.roa (raw, json)
Hash identifier: ywAhGVa8hTFT9M+Jt6SDSuTqD3qnV07MVgbc2CvZVgE=
Subject key identifier: 7C:3A:69:EC:E9:B8:66:49:3A:AA:90:3D:3E:24:EC:C3:87:AF:E4:0F
Certificate issuer: /CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
Certificate serial: 5FDDC362517C883B9F1C3DB8F9AA4F5A48F19B17
Authority key identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
Subject info access: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/323830343a323535383a3a2f33322d3438203d3e20323634323735.roa
Signing time: Wed 17 Dec 2025 23:22:47 +0000
ROA not before: Wed 17 Dec 2025 23:17:47 +0000
ROA not after: Wed 16 Dec 2026 23:22:47 +0000
asID: 264275
IP address blocks: 2804:2558::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl
rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 21:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:dd:c3:62:51:7c:88:3b:9f:1c:3d:b8:f9:aa:4f:5a:48:f1:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
Validity
Not Before: Dec 17 23:17:47 2025 GMT
Not After : Dec 16 23:22:47 2026 GMT
Subject: CN=7C3A69ECE9B866493AAA903D3E24ECC387AFE40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:f2:e7:d5:31:14:8a:5a:26:54:b7:e8:30:
7f:01:d1:3e:9f:12:47:5e:cd:7d:a7:54:f1:b7:8c:
f8:ee:cb:55:bb:39:55:07:f7:e0:1e:bb:22:5d:61:
44:c0:a5:b8:3d:74:15:94:f8:ac:99:cf:76:ac:02:
cc:c8:3f:8f:29:9c:54:69:f4:ef:23:fa:24:98:d0:
47:46:3d:6a:04:52:f0:15:0c:fe:39:fc:6e:b2:b5:
25:b2:fc:17:71:cb:11:4b:21:cc:33:12:a8:14:1c:
ec:4e:1e:af:d9:d5:f6:eb:c2:21:34:78:76:aa:df:
17:22:3d:1e:b5:aa:fd:c1:14:02:df:d6:1e:03:51:
0a:1c:68:a0:61:14:0b:37:d1:be:54:7e:c0:0e:f0:
87:73:2b:6c:de:15:ac:1c:14:07:0a:2d:01:3f:28:
ba:49:6d:61:a2:a0:27:e8:d4:d4:6b:9a:6c:fd:b7:
13:9c:0e:74:b3:aa:e5:ce:53:4a:8a:5e:69:30:ba:
c6:16:be:fb:88:3e:43:5c:f8:1f:92:94:03:ab:00:
a2:21:6f:df:1f:c6:92:7b:6a:03:29:49:da:56:ad:
42:e6:eb:b9:a9:89:64:a1:17:22:8b:20:9b:5f:f5:
a2:f3:a0:95:7a:c1:a5:34:c5:ac:9a:7e:40:01:06:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:69:EC:E9:B8:66:49:3A:AA:90:3D:3E:24:EC:C3:87:AF:E4:0F
X509v3 Authority Key Identifier:
keyid:D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/323830343a323535383a3a2f33322d3438203d3e20323634323735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2558::/32
Signature Algorithm: sha256WithRSAEncryption
04:c1:2b:51:1e:e7:0e:61:b3:3f:56:80:37:88:f5:ea:03:0a:
15:0f:9c:9f:75:e8:ee:95:62:52:74:75:4b:b1:13:da:e8:23:
56:0a:d5:49:46:5f:e5:a9:f7:1c:6c:8f:95:ec:5b:8e:8b:b3:
1e:da:dc:63:c0:28:1c:6b:d9:91:f7:2f:62:fc:60:1e:dc:e3:
8a:2c:57:0a:dd:b2:be:2e:9b:78:51:6e:53:7d:07:92:c0:53:
8a:0f:ab:3f:2d:bb:b1:a2:84:11:88:a5:14:4e:c4:a5:dc:65:
9f:b4:93:f1:e1:3c:06:04:55:db:20:a9:e1:37:1a:11:0c:a9:
4a:78:72:f7:4d:fd:ec:de:5f:5f:ee:9d:71:99:07:fe:1b:78:
f5:7d:7a:71:b5:b1:40:84:ee:1e:f8:09:4c:34:a2:2c:93:90:
82:61:21:84:f3:51:f3:39:fe:ba:72:3a:7f:9e:f0:b8:47:e0:
45:14:fa:a5:39:60:80:b7:1e:4f:32:62:d3:76:f8:25:83:8f:
0a:ad:c9:60:ab:a7:10:01:d6:84:3f:3c:78:68:fb:1b:49:ea:
d3:16:72:05:67:c3:07:8f:78:c0:69:0e:de:3c:04:ae:c2:db:
b0:7c:1b:df:66:db:8f:e4:37:2e:ee:81:d0:82:d1:db:1a:10:
af:43:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:52:36 2025 by rpki-client