This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f33322d3332203d3e20323636303230.roa
File: 323830343a333933633a3a2f33322d3332203d3e20323636303230.roa (raw, json)
Hash identifier: 23sU0yYBtUu2Nwh56oiCQTw8xyIBUijoNO7OsONohFI=
Subject key identifier: E4:5D:CA:4C:B5:08:B5:25:54:25:66:A0:5A:DF:AA:CC:70:C2:D2:FA
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 6898743A63335B2F02C4D7F6027D2A8508F8DDFC
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f33322d3332203d3e20323636303230.roa
Signing time: Wed 10 Dec 2025 03:07:34 +0000
ROA not before: Wed 10 Dec 2025 03:02:34 +0000
ROA not after: Wed 09 Dec 2026 03:07:34 +0000
asID: 266020
IP address blocks: 2804:393c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 08:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:98:74:3a:63:33:5b:2f:02:c4:d7:f6:02:7d:2a:85:08:f8:dd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Dec 10 03:02:34 2025 GMT
Not After : Dec 9 03:07:34 2026 GMT
Subject: CN=E45DCA4CB508B525542566A05ADFAACC70C2D2FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:ba:0d:12:31:8a:97:56:72:4e:11:42:09:
48:84:5e:b4:15:9b:67:11:f3:26:a1:cc:56:1f:34:
61:c3:74:94:e1:95:b7:5d:1c:fd:87:5d:54:18:c4:
c2:18:3f:fa:55:f1:f2:90:08:da:4b:78:6d:52:da:
2c:44:7a:2d:4d:9d:0d:2c:93:2e:41:2c:86:04:50:
43:40:7d:a8:c0:2c:ba:9a:89:94:e0:52:a5:97:70:
19:f6:8f:35:5b:49:c6:79:fe:79:68:61:bb:04:e2:
e5:67:e8:73:a5:08:03:22:85:76:be:22:3c:7b:02:
13:77:1a:35:17:99:98:cb:b4:a3:05:d5:6c:4d:9b:
1a:2b:2f:db:b9:86:3f:b5:c7:d1:2d:a0:96:b7:32:
03:7c:c7:b7:49:2c:c2:54:53:dd:d3:90:89:03:f3:
de:2f:9d:2e:5e:cc:5b:bb:5e:f4:c9:8a:6f:02:14:
47:35:82:47:d8:82:7a:ec:99:f2:6a:e3:c0:da:bf:
e3:9e:35:bf:d9:48:d8:96:32:25:85:fb:d9:3c:77:
73:a7:1a:30:77:da:af:4c:88:1f:0f:0d:1a:0e:fb:
d8:80:dc:ee:06:ac:b1:90:de:6a:c4:d5:d6:df:78:
2d:6e:f4:d0:ef:4b:1b:f0:38:e8:e2:c7:24:75:be:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:CA:4C:B5:08:B5:25:54:25:66:A0:5A:DF:AA:CC:70:C2:D2:FA
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f33322d3332203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:393c::/32
Signature Algorithm: sha256WithRSAEncryption
70:64:96:4d:b9:fd:ba:60:49:f2:5b:38:b4:16:d3:b7:09:4e:
51:39:d3:06:80:b8:cb:bc:2a:aa:4a:45:a2:bc:e2:1f:c2:40:
a1:ca:a2:8b:41:f7:ba:ac:fe:aa:50:42:bb:79:53:3a:b3:00:
67:77:1b:c3:94:39:96:81:5c:c6:8d:8f:1c:6a:bf:39:af:d0:
ea:f3:4d:48:b0:a0:4f:1b:1f:5f:c4:4e:4f:61:64:d8:69:06:
20:39:e7:7d:8f:ec:ed:33:2c:3f:27:4d:b0:0e:04:ba:f5:72:
1b:bc:a6:53:a6:48:49:fe:0b:e3:f3:4e:ed:8e:6f:4a:0f:c6:
93:94:92:eb:dc:86:88:8e:89:f2:65:3c:d9:b1:59:2a:d0:b2:
7e:d2:b6:cb:04:ac:ea:16:1f:aa:84:08:05:b0:92:75:e3:27:
9b:ef:74:c7:9e:a1:d7:e9:97:28:84:b6:75:08:0e:11:c4:d9:
ef:46:a0:22:35:cb:36:05:f2:04:bc:1a:c0:db:97:44:6b:2c:
04:20:5a:5b:3a:2e:ea:4c:ba:a7:fe:98:65:6b:1e:f1:af:01:
73:c7:49:d8:f5:eb:cd:ed:a1:2c:fd:67:4d:06:33:88:b2:fd:
2c:5a:7d:96:d1:fc:fd:7b:9b:a1:f8:42:5c:e2:b6:6a:b1:63:
46:c4:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:54:00 2025 by rpki-client