This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa
File: 323830343a333239303a3a2f33322d3336203d3e20323635303835.roa (raw, json)
Hash identifier: KJyfgod/ZleOhEaweWjlo8twk6C7fqY8aR2Fia737G0=
Subject key identifier: D8:D2:04:CC:A4:58:C9:44:89:CF:51:D2:FD:B2:F9:53:DE:DC:DB:9E
Certificate issuer: /CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
Certificate serial: 0CEC9A666898EB46E52B076466992A432C8B3479
Authority key identifier: 99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa
Signing time: Mon 15 Dec 2025 13:55:43 +0000
ROA not before: Mon 15 Dec 2025 13:50:43 +0000
ROA not after: Mon 14 Dec 2026 13:55:43 +0000
asID: 265085
IP address blocks: 2804:3290::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ec:9a:66:68:98:eb:46:e5:2b:07:64:66:99:2a:43:2c:8b:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
Validity
Not Before: Dec 15 13:50:43 2025 GMT
Not After : Dec 14 13:55:43 2026 GMT
Subject: CN=D8D204CCA458C94489CF51D2FDB2F953DEDCDB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:9a:bf:b2:90:af:a8:ad:0f:93:fa:ae:e0:
6a:ec:c3:0e:70:41:e4:f5:02:64:2c:e9:78:24:1f:
91:39:5d:c7:08:6c:98:b8:78:e7:76:71:03:5b:bd:
27:4a:ca:c4:cd:4a:00:19:77:57:34:54:23:ca:eb:
8f:da:0f:db:08:23:e5:e5:d6:8c:67:8c:56:32:1d:
d8:40:93:82:a8:b6:da:0b:4d:99:94:3b:05:40:dc:
0f:e5:d8:07:c7:8a:db:9d:fa:80:99:d4:64:9b:7b:
26:2f:c5:da:8c:6d:92:bc:64:63:d1:ef:e9:45:4e:
f0:80:c6:4d:68:43:73:aa:c3:15:6e:22:4d:10:b0:
ce:ae:09:24:36:80:e9:92:ef:84:d6:f7:fe:37:64:
7b:9d:b3:f8:8e:99:4e:e1:e2:4d:69:55:7a:7e:21:
cd:0f:88:1b:28:fb:bd:35:be:0e:72:53:02:78:85:
58:7f:87:09:fc:ff:97:4a:ad:b8:62:9a:92:90:ff:
9f:4e:80:41:9c:9b:9f:4e:a6:fe:33:36:e9:b3:a7:
72:50:5b:ce:8b:2d:52:6f:61:b7:e0:a6:cd:69:af:
c5:e0:a7:03:fa:19:bd:7e:fb:3c:e5:e8:79:5b:4a:
15:13:2b:36:57:da:be:31:f8:cf:32:ac:6d:23:dc:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:04:CC:A4:58:C9:44:89:CF:51:D2:FD:B2:F9:53:DE:DC:DB:9E
X509v3 Authority Key Identifier:
keyid:99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3290::/32
Signature Algorithm: sha256WithRSAEncryption
55:b5:84:49:ea:94:39:bf:42:68:12:87:c7:8f:34:44:52:0c:
59:5d:b9:16:36:d9:d8:db:76:d4:08:dd:b6:a2:29:50:c1:f5:
3f:0d:dc:ae:8f:9e:95:53:29:5f:bb:3b:b5:49:1a:3b:46:ea:
e0:09:23:1e:bf:60:3e:fa:7a:7a:25:61:19:d7:72:19:90:d6:
50:ff:5c:cd:44:e2:21:39:5e:bc:02:75:d7:09:32:b0:62:56:
a8:42:b4:f0:9c:1c:95:d4:b5:e9:97:f2:5e:7a:09:a4:16:cc:
f5:b3:08:41:41:93:2f:27:aa:c8:f1:d9:85:18:c1:6b:bb:9b:
37:d1:18:36:eb:99:5a:36:f6:6f:b6:d9:d2:e8:19:08:46:dc:
02:0d:28:55:f9:d9:4b:95:f5:85:e0:de:fd:a3:33:bb:93:7f:
fc:ce:b4:dd:23:db:77:44:bb:24:70:59:6b:14:ec:9b:ea:6c:
fe:b1:46:97:d8:2d:85:43:8b:11:a0:f3:60:d2:d2:73:ef:54:
c1:1f:e7:2f:02:7a:c2:a1:03:bc:6f:02:ce:44:8b:6e:31:2c:
a2:06:be:df:e0:59:6c:10:c4:da:34:b7:7b:2b:15:c9:1a:e6:
2d:4a:27:f0:3b:57:69:b4:7f:28:67:74:97:59:d2:fe:d9:84:
4c:a9:3a:da
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDOyaZmiY60blKwdkZpkqQyyLNHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0MjhDNTM3QjBFRTlGNjhGRkNBMTVEQUIxRjlERkMy
NjVEQThENDAeFw0yNTEyMTUxMzUwNDNaFw0yNjEyMTQxMzU1NDNaMDMxMTAvBgNV
BAMTKEQ4RDIwNENDQTQ1OEM5NDQ4OUNGNTFEMkZEQjJGOTUzREVEQ0RCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qJq/spCvqK0Pk/qu4Grsww5w
QeT1AmQs6XgkH5E5XccIbJi4eOd2cQNbvSdKysTNSgAZd1c0VCPK64/aD9sII+Xl
1oxnjFYyHdhAk4KottoLTZmUOwVA3A/l2AfHitud+oCZ1GSbeyYvxdqMbZK8ZGPR
7+lFTvCAxk1oQ3OqwxVuIk0QsM6uCSQ2gOmS74TW9/43ZHuds/iOmU7h4k1pVXp+
Ic0PiBso+701vg5yUwJ4hVh/hwn8/5dKrbhimpKQ/59OgEGcm59Opv4zNumzp3JQ
W86LLVJvYbfgps1pr8XgpwP6Gb1++zzl6HlbShUTKzZX2r4x+M8yrG0j3Pb9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2NIEzKRYyUSJz1HS/bL5U97c254wHwYDVR0j
BBgwFoAUmUKMU3sO6faP/KFdqx+d/CZdqNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXpr
QlIvMC85OTQyOEM1MzdCMEVFOUY2OEZGQ0ExNURBQjFGOURGQzI2NURBOEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NDI4QzUzN0IwRUU5RjY4
RkZDQTE1REFCMUY5REZDMjY1REE4RDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKV3NYR3FBcFoyZEE0RlhNUU1NVU5TZENadjlKS21HZkNKY0hYdGV6a0JSLzAv
MzIzODMwMzQzYTMzMzIzOTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM1
MzAzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQykDANBgkqhkiG9w0BAQsFAAOCAQEAVbWESeqU
Ob9CaBKHx480RFIMWV25FjbZ2Nt21AjdtqIpUMH1Pw3cro+elVMpX7s7tUkaO0bq
4AkjHr9gPvp6eiVhGddyGZDWUP9czUTiITlevAJ11wkysGJWqEK08JwcldS16Zfy
XnoJpBbM9bMIQUGTLyeqyPHZhRjBa7ubN9EYNuuZWjb2b7bZ0ugZCEbcAg0oVfnZ
S5X1heDe/aMzu5N//M603SPbd0S7JHBZaxTsm+ps/rFGl9gthUOLEaDzYNLSc+9U
wR/nLwJ6wqEDvG8CzkSLbjEsoga+3+BZbBDE2jS3eysVyRrmLUon8DtXabR/KGd0
l1nS/tmETKk62g==
-----END CERTIFICATE-----
Generated at Mon Dec 22 04:23:14 2025 by rpki-client