This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a376666663a3a2f34382d3438203d3e203533313533.roa
File: 323830343a3733383a376666663a3a2f34382d3438203d3e203533313533.roa (raw, json)
Hash identifier: kkGpgp50hS0o8za/IE2hRRPJ4ZS1vLXTfanE0wpLtXo=
Subject key identifier: 6E:34:38:5F:D4:35:4E:19:DC:B8:73:A5:86:27:D7:16:13:81:41:C9
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 4D0FBDCFE0AF5667F20DB0CAE0BED2BDE0215A25
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a376666663a3a2f34382d3438203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:29 +0000
ROA not before: Wed 28 Jan 2026 11:29:29 +0000
ROA not after: Wed 27 Jan 2027 11:34:29 +0000
asID: 53153
IP address blocks: 2804:738:7fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Feb 2026 21:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0f:bd:cf:e0:af:56:67:f2:0d:b0:ca:e0:be:d2:bd:e0:21:5a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:29 2026 GMT
Not After : Jan 27 11:34:29 2027 GMT
Subject: CN=6E34385FD4354E19DCB873A58627D716138141C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:43:98:31:a9:1b:2d:49:2c:c3:20:3b:61:
09:fe:b3:a1:83:9c:46:ef:db:23:4e:de:bc:8d:ea:
ac:ed:53:03:38:7d:8b:0f:af:3e:ac:25:c6:8c:5d:
b2:de:f0:9b:24:6b:7d:93:df:cc:a5:2b:a2:fb:f6:
a0:84:f4:b7:0a:58:08:b6:43:04:68:8a:ce:bd:55:
46:05:d1:5d:06:eb:b2:15:cc:4d:3a:b0:c7:3e:3a:
b6:84:c8:1f:b0:6a:54:71:ee:e7:e3:61:32:89:ed:
c7:fb:8d:50:a7:b9:bc:e0:77:24:e8:6d:fb:c3:d1:
4d:0d:81:9b:3f:67:47:32:b7:39:38:eb:6b:d3:e9:
33:f6:c5:f8:02:84:18:97:06:49:fc:6d:b2:b4:84:
79:7e:17:0a:70:a0:b1:c1:79:2d:2e:24:7f:0f:8d:
27:5e:7b:62:1d:c8:59:54:c3:52:e7:a1:36:15:9e:
1d:d3:5d:8a:2c:8f:f8:62:5c:1f:eb:a4:e5:9c:85:
2b:78:f6:5f:62:0a:ec:8e:2d:25:45:c7:ee:9c:84:
ec:9d:2d:b3:2a:b0:0d:13:c3:b3:f0:53:39:54:49:
d8:86:2f:f7:3e:d8:15:cc:21:18:95:48:37:10:ae:
7f:9c:e2:67:19:8f:e6:86:91:57:c1:fc:9a:e2:48:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:34:38:5F:D4:35:4E:19:DC:B8:73:A5:86:27:D7:16:13:81:41:C9
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a376666663a3a2f34382d3438203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:738:7fff::/48
Signature Algorithm: sha256WithRSAEncryption
2c:b7:76:f6:6b:7e:e2:2b:75:8e:12:44:30:1c:b0:f2:60:b4:
40:06:c6:c6:21:e9:57:49:4c:f0:a3:fe:12:cf:c9:80:da:8b:
ca:f8:78:9c:c0:f5:2f:62:14:a4:ec:ec:10:6d:19:2b:15:12:
78:d8:0e:d3:f4:e7:04:71:13:d0:c3:e3:1d:7c:08:76:72:5a:
2f:17:c8:5c:b0:ea:4c:f8:32:09:dd:cf:4a:c0:64:35:e2:ab:
69:58:bc:47:ff:fa:4c:46:44:63:79:77:22:ca:98:1a:35:4b:
8c:4f:d6:1e:5a:7a:40:31:bc:d6:9a:10:70:58:5c:8a:21:9a:
1d:da:7a:e4:07:2b:2e:93:58:9e:1e:df:a3:c6:c8:3b:13:ab:
ae:bd:ad:2f:42:b4:bd:e3:a1:b0:dc:72:56:db:71:b6:0d:4e:
d1:ff:a7:a3:fe:3d:59:ea:f7:9b:17:80:3f:1f:62:d3:9d:1a:
bf:0f:79:69:59:51:d8:18:72:38:63:a4:50:7e:8f:e4:0d:66:
98:35:f7:77:8b:ce:bc:f7:e1:d4:c6:17:6b:38:6f:2c:2e:08:
4b:62:d3:35:88:98:2f:bd:e2:8d:05:6b:b6:31:12:e8:12:4a:
0e:0a:aa:82:06:e4:77:c7:9b:61:37:bc:c5:55:83:b5:88:40:
b7:4c:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:01:25 2026 by rpki-client