This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa
File: 323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa (raw, json)
Hash identifier: Dqb1EUXrH4YANnBesF//2tQBquJ9AdC5wuwZiHTUPXA=
Subject key identifier: A0:69:DF:4C:C1:01:35:BE:ED:26:A4:FE:2D:A7:B0:E9:B2:74:39:D3
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 67DFF1AB16FFED4B25704585AE4397BE1C7D3B4B
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa
Signing time: Wed 10 Dec 2025 03:07:34 +0000
ROA not before: Wed 10 Dec 2025 03:02:34 +0000
ROA not after: Wed 09 Dec 2026 03:07:34 +0000
asID: 266020
IP address blocks: 2804:393c:7700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 07:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:df:f1:ab:16:ff:ed:4b:25:70:45:85:ae:43:97:be:1c:7d:3b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Dec 10 03:02:34 2025 GMT
Not After : Dec 9 03:07:34 2026 GMT
Subject: CN=A069DF4CC10135BEED26A4FE2DA7B0E9B27439D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:0d:06:20:ca:70:34:b8:b6:8a:21:8a:e5:
54:06:76:27:c4:9d:64:3d:f2:63:5d:a1:12:2e:98:
58:b1:4d:10:08:55:51:f0:f4:32:7a:07:dd:f7:aa:
9e:7b:2e:73:c1:46:5c:c5:47:27:80:89:7d:dd:11:
9a:1f:ae:71:bf:53:de:bf:db:57:a9:de:8a:0d:d0:
ed:d5:f7:a7:10:4d:26:bb:9f:34:61:f8:82:9f:45:
7c:3f:a2:1c:11:ff:77:e0:7b:37:4f:15:bd:b3:55:
bd:70:3b:e0:98:78:2c:50:a8:c6:45:f5:d0:d2:d1:
b2:1a:e5:b6:7b:87:fd:4b:c1:0b:78:36:cb:01:cb:
61:1a:b6:25:33:52:88:1b:9f:9a:a0:f7:cc:0e:c8:
4f:a2:1c:02:49:ed:e7:cf:83:e0:87:5d:2e:09:22:
6c:16:05:09:be:a5:55:50:ab:8a:e5:68:4f:0a:16:
8b:ad:15:33:6a:59:dc:59:c1:6e:90:6c:3b:24:bd:
44:b1:35:b0:d5:69:f0:13:aa:23:75:b3:54:7e:af:
91:a6:00:94:85:af:82:86:02:e6:b4:a5:dd:5a:aa:
1d:ac:02:72:79:20:88:09:93:9b:58:70:c2:d9:cd:
f0:93:81:81:8c:e0:0b:33:68:5d:42:9f:59:23:d3:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:DF:4C:C1:01:35:BE:ED:26:A4:FE:2D:A7:B0:E9:B2:74:39:D3
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:393c:7700::/40
Signature Algorithm: sha256WithRSAEncryption
5e:e8:07:3d:1e:a3:3e:b6:68:22:18:bd:45:46:c8:38:07:46:
41:75:a2:28:28:2e:96:f4:09:65:cd:59:ad:d8:94:53:52:d2:
b5:61:b8:39:3f:1c:53:11:9d:ec:e3:60:2e:9b:b3:65:bf:54:
6b:eb:18:3a:08:9c:39:31:2f:f4:b4:68:87:c3:ad:56:4b:54:
f4:04:4a:82:95:24:43:70:d0:8e:df:8f:d2:ee:66:b7:ab:ff:
7c:e2:34:df:27:04:bf:86:ef:0e:70:55:87:1c:1a:4b:2f:68:
3b:bd:f1:cb:99:6e:e6:f0:35:86:1a:a6:59:e5:38:fb:7d:24:
04:41:a7:45:32:8a:bd:37:2a:ee:15:39:98:24:52:26:90:c7:
81:b0:63:bf:98:d9:a8:ab:46:63:71:b7:d3:d6:61:c5:31:ef:
c0:7e:cb:e4:39:cd:eb:df:e3:e6:cd:23:3f:a3:ee:fd:bf:73:
99:91:63:fc:51:84:07:0b:c2:d5:d0:30:fc:f6:83:29:7d:be:
03:df:76:dc:80:45:c7:8c:db:b7:1b:a6:a4:29:53:a3:46:68:
bb:ca:94:47:21:ed:99:0e:8d:0d:97:19:ae:5f:0b:da:15:f5:
76:1f:3b:fc:b0:71:3f:be:59:73:a6:2a:1d:98:04:1a:47:9d:
86:3e:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:53:57 2025 by rpki-client